Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203135333131.roa
File:                     3230302e3131332e36342e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          XLba6kqpYlzTYT4D6g4uNxMljt69km6/gxXxuXPVJm0=
Subject key identifier:   FA:B1:DF:33:41:11:D8:49:C3:CC:C3:AB:CA:BD:AD:C6:3F:36:5E:22
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       05B176180825D3F2137BA5E28996D368C2F5AACA
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:16:53 +0000
ROA not before:           Tue 05 Mar 2024 18:11:53 +0000
ROA not after:            Tue 04 Mar 2025 18:16:53 +0000
asID:                     15311
IP address blocks:        200.113.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b1:76:18:08:25:d3:f2:13:7b:a5:e2:89:96:d3:68:c2:f5:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:53 2024 GMT
            Not After : Mar  4 18:16:53 2025 GMT
        Subject: CN=FAB1DF334111D849C3CCC3ABCABDADC63F365E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:cd:b5:b9:76:4f:8b:b9:c9:23:c6:a5:2b:
                    46:2e:c7:a6:7f:cf:f9:c6:6a:fa:6d:a2:df:f7:8b:
                    91:de:fa:d1:25:4c:c7:05:b6:fb:09:ad:cf:a8:aa:
                    29:45:1d:2d:01:94:75:ac:86:a8:95:fb:fc:f6:4b:
                    32:04:95:fb:99:9b:65:be:9f:91:ba:2c:22:8d:03:
                    d4:86:c4:f4:58:5a:ae:d9:e9:1e:a6:32:98:32:c9:
                    fb:32:56:f1:16:10:27:bf:dd:e3:48:24:cc:36:3a:
                    0d:7a:a3:b5:f3:e6:d8:5b:98:90:b0:9d:77:d4:3b:
                    be:12:30:d2:60:ea:8e:d3:50:60:d0:ac:d1:ca:46:
                    1d:11:aa:99:3e:e3:58:9a:19:6f:52:71:34:d2:e7:
                    be:be:8c:c2:a0:7b:e4:5f:6c:fd:15:6b:b3:6c:77:
                    1d:20:ae:21:53:06:7a:33:50:b1:c8:02:10:12:3a:
                    16:9c:75:99:e1:de:cb:f4:f5:46:71:d9:1d:32:d7:
                    73:8a:7f:62:ad:a3:fe:ee:7a:aa:31:6f:c2:20:39:
                    10:91:76:e0:36:4a:c4:60:1b:8d:c4:05:db:f5:21:
                    96:e4:2a:f6:90:28:9c:3d:a4:00:d9:fc:aa:b3:92:
                    80:94:31:eb:aa:ad:f4:9c:5d:3d:76:6b:1c:35:08:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:DF:33:41:11:D8:49:C3:CC:C3:AB:CA:BD:AD:C6:3F:36:5E:22
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:85:5a:5f:9f:a0:9d:00:59:76:e5:24:84:8d:94:6c:52:
         d7:2d:9d:e2:28:aa:44:cb:2f:b3:29:10:cf:09:b5:fd:e0:b8:
         ed:8e:10:63:b5:99:ff:68:4f:02:a4:62:cb:dc:5c:4b:5f:a0:
         bf:b1:e1:95:0d:48:7b:f8:56:65:c6:67:1d:15:26:9c:55:53:
         20:97:c3:00:c1:34:ed:64:d0:b0:61:c8:f0:ec:f3:ba:0c:9e:
         f9:5b:a0:8c:75:99:28:66:93:91:4b:4e:ae:84:57:52:b5:5e:
         e2:6c:52:65:5c:e4:03:7f:a8:32:9f:34:86:1e:b4:e3:93:7e:
         0b:3a:78:d9:17:33:e2:51:cb:52:89:52:9c:b5:7d:de:f4:6a:
         7e:2e:06:da:b1:a4:69:3c:38:62:87:be:a8:a3:ac:49:12:f5:
         b0:40:a8:98:77:b1:19:32:a0:85:7b:38:64:6e:b2:d2:9e:4b:
         59:ec:cb:45:02:80:bd:37:c8:c0:9b:a7:17:f8:8d:fd:2d:ad:
         c7:8b:6c:49:82:f9:db:8e:ac:e2:94:ed:fb:af:0f:ee:4b:1c:
         3c:b2:75:52:9d:86:06:0e:8b:94:c7:4a:8d:1a:9e:1c:10:91:
         66:e0:91:61:94:d1:79:ca:96:15:96:18:8b:3d:1c:45:76:46:
         ca:86:92:5e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBbF2GAgl0/ITe6XiiZbTaML1qsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODExNTNaFw0yNTAzMDQxODE2NTNaMDMxMTAvBgNV
BAMTKEZBQjFERjMzNDExMUQ4NDlDM0NDQzNBQkNBQkRBREM2M0YzNjVFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuc21uXZPi7nJI8alK0Yux6Z/
z/nGavptot/3i5He+tElTMcFtvsJrc+oqilFHS0BlHWshqiV+/z2SzIElfuZm2W+
n5G6LCKNA9SGxPRYWq7Z6R6mMpgyyfsyVvEWECe/3eNIJMw2Og16o7Xz5thbmJCw
nXfUO74SMNJg6o7TUGDQrNHKRh0Rqpk+41iaGW9ScTTS576+jMKge+RfbP0Va7Ns
dx0griFTBnozULHIAhASOhacdZnh3sv09UZx2R0y13OKf2Kto/7ueqoxb8IgORCR
duA2SsRgG43EBdv1IZbkKvaQKJw9pADZ/KqzkoCUMeuqrfScXT12axw1CKa5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+rHfM0ER2EnDzMOryr2txj82XiIwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzNjM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhxQDAN
BgkqhkiG9w0BAQsFAAOCAQEATeCFWl+foJ0AWXblJISNlGxS1y2d4iiqRMsvsykQ
zwm1/eC47Y4QY7WZ/2hPAqRiy9xcS1+gv7HhlQ1Ie/hWZcZnHRUmnFVTIJfDAME0
7WTQsGHI8Ozzugye+VugjHWZKGaTkUtOroRXUrVe4mxSZVzkA3+oMp80hh6045N+
Czp42Rcz4lHLUolSnLV93vRqfi4G2rGkaTw4Yoe+qKOsSRL1sEComHexGTKghXs4
ZG6y0p5LWezLRQKAvTfIwJunF/iN/S2tx4tsSYL5246s4pTt+68P7kscPLJ1Up2G
Bg6LlMdKjRqeHBCRZuCRYZTRecqWFZYYiz0cRXZGyoaSXg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org