Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e38302e302f32302d3234203d3e203135333131.roa
File:                     3230302e3131332e38302e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          oMFaLcuhSMZQBRxsOhRBN7jsXTdRdhXQ+f0hCwQMMuA=
Subject key identifier:   40:F5:EB:A9:CA:7B:E4:3F:02:12:C9:75:D2:A3:97:34:8C:6E:C1:E8
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6B855CCF71E9709EFB2E5D18F54D1ECBC49A4539
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e38302e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 20:00:47 +0000
ROA not before:           Tue 04 Feb 2025 19:55:47 +0000
ROA not after:            Tue 03 Feb 2026 20:00:47 +0000
asID:                     15311
IP address blocks:        200.113.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:5c:cf:71:e9:70:9e:fb:2e:5d:18:f5:4d:1e:cb:c4:9a:45:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:47 2025 GMT
            Not After : Feb  3 20:00:47 2026 GMT
        Subject: CN=40F5EBA9CA7BE43F0212C975D2A397348C6EC1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:63:bd:ef:43:88:59:a8:00:bc:8f:b2:6b:
                    ee:e1:00:59:ed:94:7b:f7:ad:d5:d1:17:81:a9:9c:
                    03:c9:65:cf:5c:67:c9:83:a9:a6:8e:09:7a:02:f6:
                    ee:7a:b5:4a:c6:24:6d:48:76:df:5e:a4:b7:4e:ed:
                    24:1b:f2:11:9a:b7:e9:46:c9:85:eb:eb:fc:e9:f9:
                    cc:cf:fc:41:e1:63:19:af:c3:ba:22:39:88:a0:6a:
                    82:a6:57:91:c3:56:f9:ed:45:1b:e0:05:f2:72:30:
                    8b:9c:d5:15:f3:f4:8f:f8:d3:41:2b:68:5e:9a:7a:
                    88:ef:10:88:70:de:13:70:95:81:fb:19:ec:01:74:
                    64:ff:ad:5b:43:d7:f3:13:e0:ee:7d:21:7a:e1:db:
                    b3:f9:53:71:b4:08:7f:ae:77:04:39:9f:6f:d4:0e:
                    cf:c1:5b:d0:2c:e1:5f:4c:da:34:24:cf:f8:5a:7d:
                    c5:a5:e5:8b:e7:b9:f6:eb:46:86:62:0e:0b:06:3e:
                    4d:ad:49:31:37:7d:6c:39:4b:46:b6:37:6b:56:c3:
                    27:5c:d5:1b:d1:5f:84:1a:58:d8:7d:85:01:49:16:
                    23:ef:4d:54:62:36:5c:e2:9f:13:4b:4d:81:4c:b6:
                    e5:7f:f6:00:a1:d3:1b:e9:1b:39:58:66:f6:6e:08:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F5:EB:A9:CA:7B:E4:3F:02:12:C9:75:D2:A3:97:34:8C:6E:C1:E8
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e38302e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:07:4c:d8:ef:ea:f5:ed:b1:85:ce:c7:87:67:f8:a4:c1:97:
         6c:1c:2b:60:c1:12:49:e3:19:1b:08:b0:f0:8f:77:b3:a6:00:
         59:eb:3a:1f:d9:f2:45:8b:fa:84:bd:5e:6d:39:60:85:9f:63:
         e8:4d:1d:04:8e:62:7f:6a:fb:35:d4:7c:c6:20:9f:e1:b1:38:
         ee:90:13:d9:de:24:d3:7d:7c:fd:63:4f:a6:f6:6c:4d:9e:f8:
         34:d8:61:42:4c:f8:fc:0d:23:5b:44:93:62:2b:30:73:c8:f7:
         07:3d:54:b2:fd:36:32:22:8d:15:8f:b8:b1:24:e1:71:f7:cf:
         6f:6f:81:98:83:10:17:74:a8:a4:ab:94:08:ec:90:dd:11:dc:
         ce:91:58:56:6a:76:22:d4:78:fe:9a:52:a7:fb:48:b6:f9:70:
         b8:9d:03:1c:1b:b0:ec:50:dd:2f:2b:42:2a:88:30:9c:c8:29:
         d9:83:c6:9d:7b:a9:95:9f:30:d8:b3:5c:94:44:4e:b2:b4:82:
         6e:dd:4c:10:28:6e:20:4e:7f:42:5d:bc:88:5f:fe:49:57:ae:
         d1:20:ee:19:ed:eb:41:0b:5d:fe:2f:53:b6:cc:95:e6:fd:bf:
         8b:d2:e7:f9:6d:c7:67:83:e8:85:77:fe:79:aa:51:9a:65:5b:
         06:b5:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:57 2025 by rpki-client