Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203136363239.roa
File:                     3230302e3131332e36342e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          Cb4rBnIENxenIGTPzEcH8CqDCpWFU54pFLsf+WOhIdo=
Subject key identifier:   2A:74:12:AD:E8:C7:53:47:11:4A:16:D1:43:00:F5:21:F1:60:6C:83
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       1C6201B30F73628E73228FA923F736F316AEFDCB
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:16:56 +0000
ROA not before:           Tue 05 Mar 2024 18:11:56 +0000
ROA not after:            Tue 04 Mar 2025 18:16:56 +0000
asID:                     16629
IP address blocks:        200.113.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:01:b3:0f:73:62:8e:73:22:8f:a9:23:f7:36:f3:16:ae:fd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:56 2024 GMT
            Not After : Mar  4 18:16:56 2025 GMT
        Subject: CN=2A7412ADE8C75347114A16D14300F521F1606C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:4e:69:c1:1b:b3:4c:ee:86:dd:9d:55:c3:
                    a4:12:2d:4d:98:89:a1:36:f6:07:69:f2:72:87:42:
                    87:e0:37:45:bc:cb:7a:26:33:4f:b7:68:8e:d2:98:
                    62:d8:49:86:b3:61:70:b6:eb:ad:bd:46:d6:fa:de:
                    69:bc:b5:6d:35:34:15:3f:0d:08:7e:e8:1e:67:14:
                    07:d2:07:23:7a:01:6c:d6:13:ba:02:ca:60:fc:ef:
                    ae:80:8d:9d:f0:79:3f:ce:8d:80:b3:2a:3f:36:b7:
                    65:f5:ca:18:e1:de:df:42:a7:1d:a7:9d:38:f3:eb:
                    91:52:63:9d:d9:e0:74:d8:65:e3:78:42:77:69:b6:
                    e8:fa:48:dc:dd:9d:e0:2a:31:53:f2:43:0d:ed:55:
                    ea:40:9f:4c:ea:52:94:38:3f:c0:94:0e:a4:6f:20:
                    85:fd:f4:73:9d:14:e3:31:32:61:a9:62:78:21:a1:
                    25:dc:f8:bc:a6:02:42:03:a8:41:d4:50:eb:51:98:
                    3e:9e:b9:22:11:e6:37:95:53:e5:59:2e:bb:1a:61:
                    04:21:b2:ef:50:fa:29:e3:a6:c3:d0:7d:45:e1:e2:
                    92:52:1b:ad:86:a5:a9:c2:1c:7f:18:8e:24:fa:e2:
                    54:24:de:d7:8a:95:5a:f2:f3:f5:7b:19:b7:06:e2:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:12:AD:E8:C7:53:47:11:4A:16:D1:43:00:F5:21:F1:60:6C:83
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:ce:29:0d:ea:38:c8:34:31:90:b6:64:18:99:50:96:26:
         68:35:f3:e5:46:ac:6d:e0:4c:5a:a1:0d:9f:25:0d:f7:56:11:
         5b:40:f0:b8:dc:db:06:f6:7c:08:ef:94:94:5f:0f:40:1a:81:
         b6:ad:04:54:36:b7:dc:ef:f1:5b:af:dd:66:ab:fa:a8:a1:0e:
         d9:40:bd:8c:e8:1d:9b:3a:4b:6f:49:dd:63:e6:a0:f1:64:6a:
         23:eb:d3:f9:91:ef:a5:70:b9:47:cc:93:40:63:b0:c1:5e:0c:
         c0:c7:00:1e:c2:26:2b:a7:e8:85:6f:fd:bc:83:01:7c:35:a1:
         02:b4:0c:d2:d0:71:18:21:26:0c:1c:e9:7e:72:27:c1:e7:bf:
         ae:d6:ad:03:21:07:9e:db:51:33:cf:3e:bc:69:19:1c:7b:7f:
         c2:d2:6b:27:9e:c5:31:b1:d1:80:4c:8f:c3:5c:1e:d5:73:79:
         8f:3e:4a:6e:09:a3:00:39:36:05:9e:f6:54:38:d7:e6:a1:7f:
         a4:4f:23:c0:e5:16:d5:14:6a:18:a6:d6:e2:3a:56:1e:48:67:
         d3:41:d0:1e:3d:bd:ad:eb:a8:b3:6f:2e:7f:ef:7b:92:1f:f0:
         56:a2:9b:8b:82:0a:05:b3:3a:77:e6:3e:7e:4a:62:60:37:a3:
         bd:17:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org