Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e2037343138.roa
File:                     3230302e3131332e33322e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          6V//lXjVjyHij58cUx2ZY9XwtDnF/+Tqqsmg1Fd9+dE=
Subject key identifier:   95:78:7C:AC:A2:99:96:AD:CA:89:69:11:98:E3:7A:94:A7:E2:4A:4C
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       23E86DAA39A3420C5663A41DBA36682590934E12
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:00:47 +0000
ROA not before:           Tue 04 Feb 2025 19:55:47 +0000
ROA not after:            Tue 03 Feb 2026 20:00:47 +0000
asID:                     7418
IP address blocks:        200.113.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e8:6d:aa:39:a3:42:0c:56:63:a4:1d:ba:36:68:25:90:93:4e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:47 2025 GMT
            Not After : Feb  3 20:00:47 2026 GMT
        Subject: CN=95787CACA29996ADCA89691198E37A94A7E24A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:61:ef:7b:43:f1:9b:6b:27:7d:8a:e7:75:
                    21:86:6d:17:63:be:b7:62:18:ce:d3:89:2c:ac:ee:
                    dc:98:31:1e:c4:c0:fa:22:86:76:d5:0d:3a:d8:dc:
                    88:54:0f:be:3b:04:25:8b:b2:04:78:e6:d1:fe:ba:
                    b3:70:81:92:fa:8f:c3:42:30:05:9f:01:a9:9c:07:
                    4c:6d:5a:b7:30:35:03:7f:bc:c5:4e:e7:f6:2e:1a:
                    25:b8:a9:3f:0a:1b:39:37:81:b4:23:e3:20:ef:18:
                    e6:18:76:20:1e:95:9a:01:0c:b3:a3:f5:7e:49:91:
                    56:e5:b9:45:6c:ac:d3:79:3f:47:fc:75:5f:ed:a6:
                    78:ee:36:f8:a6:f6:91:06:8b:9a:c4:2c:5d:57:f3:
                    c4:a1:42:b4:df:3f:60:a9:71:17:f2:04:92:de:f1:
                    86:55:05:79:38:9f:45:8b:5b:b1:8e:56:1e:f7:20:
                    b4:36:28:57:17:3e:b0:43:97:44:0f:c9:62:b3:5e:
                    e4:f0:a6:03:0f:59:5f:92:36:5b:04:62:e9:1d:e9:
                    e4:1e:68:7b:11:9b:a2:5a:de:cb:28:21:21:c6:15:
                    8d:fc:6c:f8:93:4c:93:fe:c1:23:99:96:3b:f4:fb:
                    26:f4:b8:e2:d4:c8:65:c1:3a:61:09:0c:76:fc:0b:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:7C:AC:A2:99:96:AD:CA:89:69:11:98:E3:7A:94:A7:E2:4A:4C
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:73:f1:8d:df:00:8d:bc:18:42:5d:d3:e4:45:77:1f:0c:
         68:82:80:8a:4e:c2:ad:00:84:0a:62:1c:98:43:33:db:47:ab:
         08:ed:7a:84:59:e5:ec:ef:ac:e2:96:85:70:db:d2:73:29:f2:
         2d:69:b4:54:e8:26:c6:fb:dd:e7:24:24:f0:03:99:1d:39:ee:
         56:c0:36:c0:4b:93:c9:3d:bf:ce:ce:69:46:0d:c4:97:92:00:
         97:77:91:d4:9e:f6:50:fb:a5:bb:31:f2:db:b7:52:b4:ee:3b:
         86:ed:eb:f4:5e:54:ba:7c:67:48:f7:1c:71:11:26:e9:87:24:
         68:0d:ea:9f:f1:d6:d9:32:df:f4:5e:f6:16:f2:22:a9:4e:77:
         10:f9:6a:cb:54:18:bb:e5:6c:df:9c:31:31:46:61:17:53:52:
         e1:0d:61:a5:a1:02:3d:77:0d:f7:1d:fc:be:5e:92:24:a6:1b:
         c8:a2:64:20:e0:d2:d4:50:27:a4:16:4b:f5:90:e2:a0:81:ad:
         99:32:dc:a8:17:8b:f6:44:35:12:e6:23:a7:23:2d:ca:06:4e:
         42:03:db:af:dc:3e:24:12:1a:20:77:91:7b:90:3a:c9:8c:a5:
         31:00:20:91:e1:61:ff:4b:d6:4c:c5:e2:85:be:59:d7:d4:9a:
         b4:c5:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:09:35 2025 by rpki-client