Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e203136363239.roa
File:                     3230302e3131332e34382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          6KEIOFcGtdVgTt7R292guTaKSLNjAaXRvcVx3l3WAnw=
Subject key identifier:   97:13:5F:4E:80:73:97:BD:BE:CF:B9:B9:FA:2C:A0:26:63:4B:B2:17
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       35B59B1CA4326B9F76C8170AC769BF6D0E61042E
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:16:53 +0000
ROA not before:           Tue 05 Mar 2024 18:11:53 +0000
ROA not after:            Tue 04 Mar 2025 18:16:53 +0000
asID:                     16629
IP address blocks:        200.113.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b5:9b:1c:a4:32:6b:9f:76:c8:17:0a:c7:69:bf:6d:0e:61:04:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:53 2024 GMT
            Not After : Mar  4 18:16:53 2025 GMT
        Subject: CN=97135F4E807397BDBECFB9B9FA2CA026634BB217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:1a:03:46:68:18:2e:2c:c1:e6:7a:b8:9a:
                    a8:52:6f:54:80:78:97:16:50:43:24:f0:1d:61:0b:
                    5b:19:5c:32:94:d0:49:b9:a0:b9:41:e0:f7:7d:48:
                    d9:34:04:c4:6e:9b:47:11:af:3a:73:cf:38:1b:83:
                    fd:83:3f:5c:ca:5c:95:0c:c2:b8:c0:3a:d2:a7:99:
                    97:af:4f:fa:10:31:1a:36:9a:b6:73:c1:0d:23:36:
                    82:eb:0c:1c:77:fc:4a:fb:3d:c1:68:a7:62:fe:f1:
                    9f:82:07:13:d9:70:27:ef:a2:09:0a:36:08:03:88:
                    e9:95:a8:ed:19:27:19:d2:23:19:6b:95:df:61:f2:
                    f4:70:86:3d:de:87:be:93:52:fc:45:8e:2c:aa:0f:
                    89:2c:d8:19:f5:3f:e6:b3:b7:34:f4:9f:ef:8d:c6:
                    17:f9:e2:6c:68:f6:a8:a1:cd:41:c6:7a:32:0e:cf:
                    5f:7d:a1:45:d3:82:eb:b9:38:c4:0e:2e:54:ff:5e:
                    88:52:6c:07:c8:e9:9e:a6:b6:52:4a:6e:ea:a5:b1:
                    cf:25:cf:66:c7:e8:38:06:70:d3:a4:c5:4b:f4:00:
                    15:70:8b:4a:f0:63:61:eb:07:4d:fa:c1:1d:53:8e:
                    90:31:fc:74:c4:27:3f:a2:b8:b5:30:b1:e6:95:92:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:13:5F:4E:80:73:97:BD:BE:CF:B9:B9:FA:2C:A0:26:63:4B:B2:17
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:98:0c:6d:22:aa:d1:10:d6:fc:91:a6:51:57:35:ab:4a:91:
         c1:a0:39:53:df:f0:af:bc:22:86:49:43:6c:22:47:0d:fd:18:
         7a:24:40:e5:0c:e0:19:a4:93:9d:19:c7:36:de:0a:04:12:cf:
         8b:24:4f:e5:8f:13:d8:bd:a6:a7:ed:76:f8:0a:e2:2a:d8:d6:
         14:20:2e:c9:ac:36:35:59:25:41:87:5c:ba:c0:9c:35:f4:01:
         f7:d1:7a:93:90:30:8a:58:5a:aa:9a:ff:d8:81:f3:4a:bd:c3:
         52:a2:1b:29:91:57:9b:e7:2f:66:11:88:47:91:8c:e7:96:73:
         20:aa:99:78:7f:1c:c4:99:85:e4:8c:7d:de:b1:15:9d:95:a6:
         05:92:0b:53:24:47:f1:62:59:1a:a7:71:72:d9:42:cd:b1:b4:
         67:fe:4a:96:a9:64:37:5d:d8:aa:3f:ee:57:01:0b:e6:19:67:
         25:f2:3f:40:0b:c2:90:4d:33:d6:67:15:ef:61:5d:47:d1:25:
         3c:58:69:3b:b1:14:7d:52:7c:04:96:71:47:2e:18:32:cf:09:
         6c:18:c5:f9:e8:61:37:5b:b4:4e:e1:27:e2:d0:fb:5a:f8:ae:
         ad:03:17:a8:34:d6:78:95:84:28:29:30:8f:a9:02:ff:c4:a5:
         00:45:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org