Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e39362e302f31392d3234203d3e2037343138.roa
File:                     3230302e3131332e39362e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          0d/d9IrW2dL9PPxrWuV+hOCI5sWFUqjq1A+YxDX6jX0=
Subject key identifier:   E4:89:8B:16:53:78:3F:17:06:DC:CC:31:57:2F:0B:F6:97:49:D8:66
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       1B215050DD02E8AAD4BB52DEFF8DC45ECCEA8521
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e39362e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:01:01 +0000
ROA not before:           Tue 04 Feb 2025 19:56:01 +0000
ROA not after:            Tue 03 Feb 2026 20:01:01 +0000
asID:                     7418
IP address blocks:        200.113.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:21:50:50:dd:02:e8:aa:d4:bb:52:de:ff:8d:c4:5e:cc:ea:85:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:01 2025 GMT
            Not After : Feb  3 20:01:01 2026 GMT
        Subject: CN=E4898B1653783F1706DCCC31572F0BF69749D866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:29:78:1b:f7:0f:11:c7:16:34:37:b0:d5:
                    9f:fd:75:7a:00:77:6b:f7:01:bb:6b:fa:77:72:b1:
                    ec:9e:cd:db:c0:81:4b:4f:9a:ac:ff:b4:de:ae:4b:
                    cf:c5:28:bc:bb:25:02:ce:bf:a4:f8:df:be:9e:2f:
                    17:14:db:84:50:82:22:1a:2b:8b:60:b5:9c:f2:af:
                    67:d9:1b:8e:bc:fd:56:ef:9b:33:a1:82:e7:d1:71:
                    77:60:8b:14:60:78:d5:5f:9a:04:13:e8:b6:67:d4:
                    df:92:2f:3e:14:e0:54:a8:64:99:34:54:f2:fb:b8:
                    ee:da:d5:87:f6:eb:4c:59:eb:38:f5:5a:73:02:53:
                    62:0b:25:75:78:7d:c5:41:27:f4:ae:a7:d1:b1:5c:
                    f8:69:1e:68:bb:8f:e1:ea:53:53:4f:54:84:ed:c3:
                    1f:cf:60:42:cf:c5:e0:02:04:24:a3:88:e4:b4:b8:
                    ff:83:9a:dd:7d:96:d5:78:ca:95:f5:33:bd:96:76:
                    6c:c2:ca:8e:d0:de:38:49:66:29:0e:59:06:9d:20:
                    42:03:80:8c:e7:08:4d:1e:d9:a6:0f:1c:8b:94:97:
                    79:09:bc:c1:07:f5:dd:84:5b:5a:fa:43:6d:e0:f4:
                    10:2e:b2:0c:a8:40:c5:23:ed:4a:8e:67:ee:d1:95:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:89:8B:16:53:78:3F:17:06:DC:CC:31:57:2F:0B:F6:97:49:D8:66
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e39362e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:22:96:50:31:2c:96:20:5a:ae:72:45:86:43:cd:68:f9:
         6b:d6:c1:71:93:48:66:b2:74:d9:0b:50:5b:f3:c0:f0:38:d3:
         5b:f8:fc:1b:06:14:f9:40:fe:8e:46:07:cb:c7:7a:e4:5e:94:
         fd:2d:56:f2:b4:e6:3c:10:d1:2b:37:bc:7a:d3:45:e8:6e:a2:
         aa:24:c9:86:49:83:9c:dc:3a:39:6f:fc:3a:fe:e2:e2:c4:63:
         32:cc:f6:75:f0:7c:45:5d:b3:5c:4c:a4:e2:86:58:e4:7e:1f:
         fd:d9:1f:72:b3:df:c2:3e:84:b3:75:96:de:e4:80:bb:6d:95:
         3a:00:40:16:3b:45:c1:1c:fa:16:1a:76:0b:02:fe:ff:ad:2d:
         8d:71:b4:d8:0b:13:de:6b:04:77:50:d9:a1:4b:6e:93:57:71:
         32:35:da:f4:05:5e:18:a7:92:48:f8:94:c2:55:33:dc:36:c6:
         2a:39:80:ed:25:60:8b:78:2c:38:dd:3d:1d:56:95:62:53:e0:
         d9:c9:9a:53:51:96:d1:6a:47:5b:83:1b:ea:ca:b9:35:5d:01:
         6c:b8:c7:14:2e:bc:01:c0:ec:d2:20:42:74:3a:ad:ec:2a:90:
         8e:fb:76:6f:42:ab:62:87:76:a1:dc:68:29:d9:26:89:a0:1a:
         d6:3e:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:03:46 2025 by rpki-client