Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136302e302f32312d3234203d3e2037343138.roa
File:                     3230302e34322e3136302e302f32312d3234203d3e2037343138.roa (raw, json)
Hash identifier:          GRz1YTwI3QWlup+phXRApVq26oWFH+xPgQyWOh8G2GI=
Subject key identifier:   D7:27:AF:E8:37:4E:E1:F0:97:D0:34:2C:20:88:5E:91:14:B0:4A:31
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       330900B6381BBCC9C529EE7AB7736ECF723DB306
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136302e302f32312d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:52 +0000
ROA not before:           Tue 05 Mar 2024 18:11:52 +0000
ROA not after:            Tue 04 Mar 2025 18:16:52 +0000
asID:                     7418
IP address blocks:        200.42.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:09:00:b6:38:1b:bc:c9:c5:29:ee:7a:b7:73:6e:cf:72:3d:b3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:52 2024 GMT
            Not After : Mar  4 18:16:52 2025 GMT
        Subject: CN=D727AFE8374EE1F097D0342C20885E9114B04A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:47:bb:88:6d:b5:e7:56:84:ed:ab:a9:6d:
                    df:47:1e:22:18:13:fa:c5:f1:f0:1c:b2:2f:35:83:
                    78:fd:f3:bb:79:89:18:7e:2f:74:44:02:8c:f4:fa:
                    bc:98:d4:8f:d6:81:a6:9d:39:4d:5e:ff:8a:6e:b7:
                    97:f5:62:91:fa:d4:76:fe:fd:2d:da:bb:2c:db:e3:
                    fe:86:c3:99:2e:bb:6b:c1:95:c1:7a:d9:22:37:4b:
                    d3:29:33:b0:44:7e:fa:fd:11:79:cb:c1:79:e6:2a:
                    4c:d7:7d:8c:b2:0b:30:0e:af:3c:71:46:0e:2b:b6:
                    04:be:1f:e3:ff:0d:72:79:08:50:7e:da:c6:b2:a2:
                    4f:06:34:0a:99:4c:ab:01:35:ca:07:07:aa:f5:57:
                    58:6a:5e:6b:db:81:cf:3f:c3:0d:fe:b8:a7:8d:f2:
                    6b:24:3d:c9:18:6f:24:da:02:84:f3:7c:73:66:6d:
                    d2:88:2d:4c:e3:46:5e:7b:0b:de:4b:23:0a:3b:04:
                    b0:cd:60:d3:20:19:8c:83:af:64:cf:db:f2:d7:75:
                    cc:90:26:4b:98:74:31:3c:40:33:85:98:a3:19:84:
                    56:00:ec:d4:cd:47:82:0a:59:ab:9a:c0:6d:5d:c7:
                    92:16:4c:0b:1e:5e:03:f2:7e:05:87:2c:a9:41:72:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:27:AF:E8:37:4E:E1:F0:97:D0:34:2C:20:88:5E:91:14:B0:4A:31
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136302e302f32312d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:b4:8a:0f:42:3c:4a:9f:d8:89:66:d3:40:a2:ab:e6:78:86:
         7a:c4:04:72:9b:8d:e7:22:67:d5:84:ef:93:a6:a0:65:b9:b4:
         b3:df:2a:cb:6a:65:23:f2:e3:fe:bc:c6:1e:74:02:9b:7b:59:
         74:14:7e:2e:26:47:c4:5f:a5:01:47:6d:55:62:3d:ff:40:b6:
         dc:f3:14:40:bd:0c:2f:be:e5:f2:0a:f1:5f:a5:2e:01:2b:14:
         6d:33:f9:03:b3:17:a8:eb:bd:b2:66:94:51:c3:ad:49:4d:09:
         3b:c5:68:7b:87:95:b3:b1:9b:ba:5c:85:ce:4b:25:55:06:a1:
         e9:5f:51:ac:da:1d:dd:3c:ec:21:fe:68:be:56:49:9d:02:00:
         2b:10:35:1f:7c:61:64:84:be:00:13:0a:d0:8e:79:bb:e8:28:
         2d:b0:e9:95:54:44:fd:9d:47:cf:03:30:42:a9:ba:88:30:42:
         02:f3:21:86:13:44:31:f6:47:68:39:8d:4d:8a:25:aa:3a:f1:
         49:91:f5:08:62:4a:8c:72:77:10:32:ba:c5:ec:7a:26:a8:f2:
         b3:40:4d:9b:f0:81:70:2e:65:ff:e0:9d:2c:5f:9d:1b:20:9c:
         9d:06:d8:12:a1:ba:72:00:f6:83:1c:b0:74:f1:97:db:d3:6d:
         5f:2b:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org