Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e2037343138.roa
File:                     3230302e3131332e34382e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          dFZIgKVkIRUWxt6H1+aDPfj5sx8O5nGWSOL4VlJwmdE=
Subject key identifier:   80:2D:B2:82:8B:E8:88:DC:80:25:65:B8:FB:B0:EE:A2:9B:58:0A:FD
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       13AD1EDF4BA9427A20E60E11EBAFA42D684ECE25
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:01:05 +0000
ROA not before:           Tue 04 Feb 2025 19:56:05 +0000
ROA not after:            Tue 03 Feb 2026 20:01:05 +0000
asID:                     7418
IP address blocks:        200.113.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ad:1e:df:4b:a9:42:7a:20:e6:0e:11:eb:af:a4:2d:68:4e:ce:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:05 2025 GMT
            Not After : Feb  3 20:01:05 2026 GMT
        Subject: CN=802DB2828BE888DC802565B8FBB0EEA29B580AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:bb:85:3e:59:15:d9:76:b0:5c:3d:c3:be:
                    3e:15:51:bd:ba:9f:38:c3:1c:9f:10:34:44:b7:83:
                    be:5f:ca:47:02:89:b5:84:1b:70:21:0b:6b:2d:15:
                    25:ce:4d:40:19:9c:3d:7e:f1:cf:20:39:06:58:07:
                    ab:28:37:ad:ce:6e:dd:ba:ea:bd:e7:1a:30:92:2a:
                    7c:fa:be:bd:b2:25:ec:cf:33:ff:17:f8:2b:e3:80:
                    64:71:38:47:ea:aa:2a:a8:f7:8f:6f:f0:b5:cb:86:
                    1d:b6:94:13:06:4f:b1:07:f8:75:31:cd:b6:44:41:
                    7c:25:06:63:42:1e:47:a1:66:dd:f3:22:7a:47:83:
                    d5:d4:32:90:87:5f:3f:53:05:52:b8:62:84:f5:1b:
                    7e:82:c8:70:03:9b:77:65:26:f6:8f:b8:15:ff:c8:
                    0f:3e:d3:3d:72:51:e0:85:c8:62:1b:55:65:f5:dc:
                    9c:46:32:f7:5c:86:17:d6:40:be:6d:14:d0:42:07:
                    53:03:b1:ae:d8:0a:f6:e4:fc:9a:ae:e1:91:2c:6f:
                    45:dc:6c:f0:80:1e:ae:67:86:39:b8:0d:24:1e:8c:
                    66:27:15:04:a2:1d:af:ba:6e:69:e3:cf:d5:d6:97:
                    64:3e:2c:dc:d5:86:53:cd:96:5a:ad:f5:b9:05:1d:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:B2:82:8B:E8:88:DC:80:25:65:B8:FB:B0:EE:A2:9B:58:0A:FD
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:c0:34:33:fe:26:07:7c:db:78:1b:30:fd:b9:3c:fc:74:
         42:84:a8:fb:19:91:73:10:69:9c:16:b4:d1:1f:29:64:ab:b7:
         f0:90:8f:e1:97:4a:69:c8:42:2a:e3:6a:60:69:a6:40:d4:60:
         c0:23:c4:72:2c:6a:a7:08:3f:6a:c1:9d:8e:14:12:f8:72:de:
         f7:fa:6e:97:9b:aa:d6:72:b1:e4:0b:c0:a0:80:b5:d8:e9:61:
         c4:07:3e:79:af:13:68:68:80:7e:75:c6:11:4e:df:84:ae:35:
         1e:44:56:6a:bf:c0:4a:61:d0:ea:51:56:11:a2:cc:8d:e1:d9:
         4e:6d:a3:82:e0:87:1e:10:52:11:4b:b4:99:a5:2e:1b:2f:c9:
         b9:c8:93:1d:88:f2:1b:fd:25:32:65:fd:57:f9:70:63:92:86:
         9a:ef:9f:67:16:71:a0:2a:5f:5f:2c:fc:e7:2d:32:80:8f:f7:
         69:b7:dd:48:a6:0c:16:28:3f:ad:f1:30:d4:7b:00:a1:78:c4:
         67:88:6d:14:a2:98:c5:24:5f:3e:63:56:5a:b6:94:6a:80:8b:
         1c:89:b0:a4:c3:92:49:49:96:3c:bc:8e:f8:9e:97:45:18:fa:
         45:0e:4a:a0:8f:d6:49:6a:23:94:e1:68:0a:3a:fe:d0:08:2e:
         13:a7:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:30 2025 by rpki-client