Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138302e302f32322d3234203d3e2037343138.roa
File:                     3230302e34322e3138302e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          m7j7deo2bBPfzir1pqQmB6MzbbpMdiO2zcKS6RpMlH0=
Subject key identifier:   A2:C7:23:80:50:3F:3A:C2:2D:3B:BE:33:B1:2C:2A:8C:40:9A:47:81
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       615C72B628C93FC0AA72703682808FABE170F117
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138302e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:51 +0000
ROA not before:           Tue 05 Mar 2024 18:11:51 +0000
ROA not after:            Tue 04 Mar 2025 18:16:51 +0000
asID:                     7418
IP address blocks:        200.42.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5c:72:b6:28:c9:3f:c0:aa:72:70:36:82:80:8f:ab:e1:70:f1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:51 2024 GMT
            Not After : Mar  4 18:16:51 2025 GMT
        Subject: CN=A2C72380503F3AC22D3BBE33B12C2A8C409A4781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:d3:44:37:2e:db:32:5d:a2:33:cb:a0:c1:
                    2c:33:28:0a:64:9e:68:c2:9a:49:43:a2:fd:cf:cf:
                    7c:6d:97:15:a2:ea:17:77:0f:a1:e6:9a:0a:34:c3:
                    9e:8f:a0:06:1a:91:ff:cc:09:93:a0:09:66:ce:df:
                    d7:53:cf:7d:4e:97:fa:d4:70:7f:a4:2e:f2:4f:dd:
                    c4:ea:c9:53:d1:c8:a1:72:3a:40:1f:14:48:f8:70:
                    04:4d:22:a4:87:ff:bb:54:3b:82:e2:fa:b7:09:9f:
                    63:60:1b:00:98:46:ed:07:20:bc:08:3f:c7:36:d0:
                    df:4a:9e:9e:4f:07:86:5c:20:04:e0:ec:bc:e7:fd:
                    63:d7:a4:55:03:b0:9a:86:80:d1:ae:bf:56:75:4a:
                    67:0c:81:2c:1a:fe:38:80:43:ce:ed:36:56:fa:30:
                    e7:30:c2:75:5e:26:53:bf:6e:ee:80:b1:f7:3c:86:
                    84:0b:fa:f7:c5:0e:96:0e:90:35:ab:2d:2b:7c:84:
                    b9:9e:c5:33:f0:07:49:9a:70:3e:b9:a9:b7:c6:6a:
                    1c:07:d2:d9:8f:d1:81:38:cf:1f:3d:87:77:35:fd:
                    0b:89:44:d3:1b:18:f6:7d:a5:6b:de:90:f1:06:2d:
                    52:13:48:9a:5e:70:5b:50:4d:ee:b1:fe:82:6d:66:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C7:23:80:50:3F:3A:C2:2D:3B:BE:33:B1:2C:2A:8C:40:9A:47:81
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138302e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:0b:7c:c1:93:b9:db:4c:02:76:7e:ae:d0:f8:da:7c:3c:
         70:0f:c9:c5:b1:69:d2:10:4c:53:ab:89:1f:ca:c0:e7:df:cf:
         67:0a:8c:ba:3a:ee:da:2d:2d:8a:b8:f7:fe:b5:58:89:e9:63:
         8b:80:c8:b6:89:41:f2:0f:b2:0d:7a:5c:2f:0c:f2:d3:9f:89:
         49:69:d0:6b:11:5a:80:ef:ae:f6:4c:c3:e4:e5:83:ba:0a:bb:
         99:90:39:39:0c:f6:c4:47:62:69:72:9d:51:44:63:fa:1c:b2:
         60:fe:35:e6:d2:0f:46:61:f1:4f:80:fc:a9:1e:9c:b2:f0:f9:
         a6:9a:30:af:12:ed:4f:8c:90:48:6e:84:d6:17:28:fa:9d:67:
         7a:17:db:1c:8b:7c:95:b1:fa:cf:64:f1:64:c8:49:6a:3a:0e:
         b1:46:1f:6c:a0:ef:a7:7e:90:02:24:34:dc:38:32:9d:ae:8d:
         07:4d:02:27:54:76:86:f1:a2:1f:0a:88:99:60:4f:54:85:82:
         61:d7:80:f9:b9:91:b0:be:5e:d1:9e:d5:1c:b0:d8:c2:24:01:
         02:1d:c8:45:cf:d1:7f:b5:67:4f:c4:31:58:bf:bc:4a:a7:86:
         cd:76:ea:d4:72:9b:cb:65:b7:dd:de:ad:15:ba:56:7c:a6:4f:
         0c:50:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org