Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e2037343138.roa
File:                     3230302e3131332e36342e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Jqj10hMRvgNuVkpiCt2y2c6OY33oVj8I1nt8QkxHJqg=
Subject key identifier:   60:34:EC:FC:72:23:D8:52:DB:4E:EC:A6:FC:8F:DC:C2:3A:5E:D3:33
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       0202AD525C7FCCE361C4FEF41289C1DD215E8CFF
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:00:53 +0000
ROA not before:           Tue 04 Feb 2025 19:55:53 +0000
ROA not after:            Tue 03 Feb 2026 20:00:53 +0000
asID:                     7418
IP address blocks:        200.113.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:ad:52:5c:7f:cc:e3:61:c4:fe:f4:12:89:c1:dd:21:5e:8c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:53 2025 GMT
            Not After : Feb  3 20:00:53 2026 GMT
        Subject: CN=6034ECFC7223D852DB4EECA6FC8FDCC23A5ED333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:ac:45:7f:e0:58:4b:e2:84:1e:fe:00:20:
                    2c:a2:7d:49:b4:a9:60:cc:3e:bc:5c:cd:5e:e1:a5:
                    d2:90:6e:5c:62:75:65:1e:20:7b:a5:8b:0d:c2:c1:
                    a1:1a:9b:f6:d4:91:1a:bb:9c:76:d3:7f:fa:14:af:
                    35:e7:40:ad:19:6f:3a:da:87:5a:a1:ce:64:33:eb:
                    cb:4a:cb:b2:01:3f:37:86:35:97:15:d7:18:cf:5a:
                    50:fe:c8:ac:2c:fb:7e:e1:47:26:4b:58:18:12:d4:
                    50:39:d2:67:10:51:df:62:04:71:6c:d3:2f:d7:57:
                    7d:59:58:d6:cc:c1:ca:8e:9d:e0:16:5f:fe:d5:80:
                    d6:ba:5c:2a:12:2f:38:f5:a1:ec:46:c0:8f:b2:9d:
                    a1:77:89:4a:25:e0:60:6c:19:0b:ce:a4:84:e0:52:
                    dd:c0:75:4b:a0:06:b8:c7:68:98:70:5c:ea:a3:22:
                    d2:88:d6:fd:1c:ea:d6:36:94:c5:68:18:11:dc:a0:
                    ff:c1:39:0c:d7:ae:26:f7:98:cc:38:af:9e:93:2c:
                    65:53:06:d5:23:8d:87:3f:95:85:d4:26:2a:bf:ec:
                    68:f4:cd:15:06:87:af:27:ab:fb:19:2d:0d:d3:62:
                    a7:69:5a:00:5e:3c:e0:f7:18:94:32:e4:9b:05:bc:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:EC:FC:72:23:D8:52:DB:4E:EC:A6:FC:8F:DC:C2:3A:5E:D3:33
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:60:ab:6f:98:7f:f1:84:11:7d:ac:54:f9:b7:cd:40:07:b9:
         2a:17:82:2d:f9:1d:30:d7:67:d2:9f:07:c2:8d:c8:36:06:77:
         e9:bb:f7:cf:8b:9b:b9:34:85:76:94:64:c6:21:7c:c2:2f:66:
         d4:c4:2f:4f:ee:02:46:3b:40:5e:e1:e4:07:fd:97:5e:56:9c:
         6b:4a:02:be:5e:e4:38:67:5e:c7:b2:de:0d:70:bd:eb:88:e5:
         a1:eb:56:5f:87:b5:4d:c0:1b:a3:18:2d:eb:e7:3b:f6:98:08:
         b4:e0:0c:ab:cb:e3:c2:7f:c9:a4:0a:02:c5:31:b3:50:87:b4:
         34:f0:8a:5b:c6:7b:02:a5:c4:74:02:5c:23:28:52:9d:ee:37:
         f3:72:d0:b4:36:09:25:a8:09:dd:15:6c:c3:1d:49:95:6e:e5:
         57:8c:ba:4a:22:eb:57:09:d9:27:58:72:2a:4e:59:4a:7d:6e:
         ff:66:a2:c7:00:4f:70:55:8a:22:0a:67:37:ea:52:81:87:49:
         6e:75:7e:db:d8:ea:76:03:a5:f0:5f:e5:81:35:67:48:a3:e5:
         9a:c3:47:ce:3d:6e:c8:34:d4:a3:89:1b:63:37:59:13:97:0e:
         91:de:75:fb:48:df:72:c3:a2:81:f4:c6:64:8b:e6:b0:a9:b7:
         c1:16:fd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:20:42 2025 by rpki-client