Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e39362e302f31392d3234203d3e203135333131.roa
File:                     3230302e3131332e39362e302f31392d3234203d3e203135333131.roa (raw, json)
Hash identifier:          w+q0uKUC0QVCxUUqgeG72iEnJVz7LMV6kOsnzWepccg=
Subject key identifier:   9D:8C:BF:8B:D4:47:44:CC:17:AC:7B:03:36:49:1C:59:C9:97:B8:76
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       578F80D3FEF035E7B2E61E3458ECD1B443A250CC
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e39362e302f31392d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:17:00 +0000
ROA not before:           Tue 05 Mar 2024 18:12:00 +0000
ROA not after:            Tue 04 Mar 2025 18:17:00 +0000
asID:                     15311
IP address blocks:        200.113.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:80:d3:fe:f0:35:e7:b2:e6:1e:34:58:ec:d1:b4:43:a2:50:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:00 2024 GMT
            Not After : Mar  4 18:17:00 2025 GMT
        Subject: CN=9D8CBF8BD44744CC17AC7B0336491C59C997B876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:47:91:d6:ac:f5:94:aa:50:c3:e6:20:0c:
                    48:16:58:84:d3:cd:79:16:74:6f:f7:f9:95:5f:23:
                    d7:52:32:a7:87:7f:f2:fc:e5:1f:bd:29:4d:d4:f9:
                    9e:af:c0:c8:2f:51:cc:8c:ef:6b:6f:2a:81:63:7c:
                    98:27:0e:a3:9c:71:4e:30:e3:96:db:23:f4:18:38:
                    be:74:2e:a9:f0:ad:6c:3d:5d:b3:46:3e:76:c6:68:
                    dc:1e:6a:f1:83:c0:da:2d:da:3c:cf:37:06:0d:86:
                    31:c4:f8:7b:b4:aa:e6:43:4d:50:36:43:85:a7:58:
                    34:4b:5a:89:8d:0c:03:50:c5:5b:33:47:6e:eb:5e:
                    81:6f:32:e6:3d:11:c8:3d:e7:69:6e:22:a0:bb:f2:
                    79:2d:48:f4:ae:21:b0:a0:d1:ac:02:3d:3e:01:b7:
                    e3:48:3a:27:3b:d2:8a:2d:d5:a2:11:d0:99:d5:71:
                    91:f2:0f:d2:1a:f2:9c:5c:77:d6:5f:b9:b8:11:5b:
                    f3:a0:af:3b:70:ec:49:a9:56:d1:fa:c0:6e:70:09:
                    61:11:63:ba:8d:82:d0:12:f0:13:68:d9:6b:eb:65:
                    ed:c6:a5:5a:f8:b2:ec:3c:d6:29:18:7c:90:01:be:
                    bb:ee:83:64:5f:49:27:d2:0d:d2:6f:df:21:f7:e8:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8C:BF:8B:D4:47:44:CC:17:AC:7B:03:36:49:1C:59:C9:97:B8:76
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e39362e302f31392d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:19:18:81:d5:fd:31:0c:2c:0c:6c:2b:1a:86:1f:13:45:88:
         08:d9:88:aa:60:25:e2:0f:1c:68:e0:ee:3a:7b:b2:e1:fc:b3:
         43:30:ca:dc:32:bc:38:5c:1b:3b:f2:51:a7:dc:bd:b6:66:fe:
         a8:a5:41:2d:89:69:ef:96:75:c1:45:e4:1f:a9:4f:a0:e9:fc:
         2c:ae:1a:5a:b4:20:e3:15:08:f9:2b:1f:77:d8:73:07:34:14:
         64:a3:fa:2e:36:a7:b7:63:92:98:7e:02:39:50:cc:a2:5a:31:
         d6:5a:dc:9c:ce:e8:9c:79:51:b5:a1:15:cb:51:23:96:bc:ca:
         2f:da:8a:f8:7d:ba:98:2f:d5:25:f6:fe:32:ac:f1:b6:18:ef:
         03:db:fd:bd:12:d8:a2:2b:62:64:2a:d3:6d:ae:09:74:2b:01:
         09:d8:86:dc:ee:ce:a5:de:45:a6:c0:e0:7c:e9:5f:ab:03:e3:
         d3:13:2e:50:db:01:80:1f:a9:11:4c:7d:79:07:7e:b3:48:05:
         3e:23:57:3d:e1:d5:78:ba:38:b6:01:30:b2:91:e4:6c:7a:74:
         bf:ef:dd:3a:65:ea:bc:9f:69:53:be:a5:bd:da:ae:52:6d:45:
         32:a2:8d:03:d2:e5:44:ca:f8:2f:f8:61:29:f5:63:6c:71:c3:
         2b:90:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org