Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138342e302f32322d3234203d3e2037343138.roa
File:                     3230302e34322e3138342e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          g7DRNXAz8FGLjAcvj106ph3/U0IO1m1pa3UheEvBij4=
Subject key identifier:   FF:4A:8C:0E:44:31:90:AF:63:00:C6:56:6D:AB:00:DF:27:C9:5C:49
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6BFA886C35E16917E2F59D07B85C677F663EC028
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138342e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:45 +0000
ROA not before:           Tue 05 Mar 2024 18:11:45 +0000
ROA not after:            Tue 04 Mar 2025 18:16:45 +0000
asID:                     7418
IP address blocks:        200.42.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fa:88:6c:35:e1:69:17:e2:f5:9d:07:b8:5c:67:7f:66:3e:c0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:45 2024 GMT
            Not After : Mar  4 18:16:45 2025 GMT
        Subject: CN=FF4A8C0E443190AF6300C6566DAB00DF27C95C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:db:09:13:9f:33:d2:39:1a:79:b7:36:e9:
                    d2:be:2f:2a:67:a8:4a:46:fb:10:58:cc:cb:3c:57:
                    cf:ba:23:2c:01:a9:a6:a7:28:d5:04:90:24:6a:81:
                    16:25:95:cb:00:ff:c7:0d:9a:99:a2:d1:19:ce:b5:
                    c5:80:80:d1:a1:13:d4:70:dc:44:fd:7c:c5:fe:bd:
                    db:91:92:e8:80:f2:31:40:ad:71:60:23:5d:79:0f:
                    38:e1:43:0d:48:7e:35:9e:c1:01:f2:67:87:a9:a8:
                    a5:d7:3a:26:81:63:d5:f7:f8:9a:c0:d2:9e:12:21:
                    86:2a:c4:19:16:f0:cc:75:a4:7a:86:9b:51:a9:8a:
                    c1:96:20:bd:64:bf:2b:4c:12:50:9d:d1:c1:3e:55:
                    ff:46:f5:d5:18:28:da:3b:78:bf:2b:8c:a3:66:2a:
                    9f:f3:a4:1c:24:17:15:24:cc:07:92:bb:b7:56:2b:
                    76:4c:b5:9b:45:2f:a0:d6:39:b8:e9:d4:1f:92:4e:
                    a6:fe:a1:d1:ee:72:36:73:0f:8b:1b:e3:65:ea:3b:
                    c5:ba:48:36:cb:8e:9c:7b:12:8e:71:a4:56:a1:d5:
                    7e:b4:02:b0:63:87:39:d1:c6:16:1d:a5:9b:45:d2:
                    c5:19:df:5c:9d:76:b1:19:55:64:24:27:b1:9f:74:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4A:8C:0E:44:31:90:AF:63:00:C6:56:6D:AB:00:DF:27:C9:5C:49
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138342e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:44:c9:dd:4f:f0:2f:2f:96:9e:c7:3b:fb:5b:6d:54:0f:
         ee:bf:30:5d:c5:74:be:04:91:eb:f0:35:25:99:b8:de:7e:73:
         3b:98:ee:55:14:1d:53:0e:60:2d:dd:21:cd:d5:2b:bf:e3:e6:
         89:78:00:89:7d:cb:88:63:85:61:7e:c5:d0:b5:6b:a1:2f:ee:
         62:69:0b:b1:7f:f2:d7:24:43:61:d5:44:34:8d:ab:23:24:95:
         e1:5d:d6:b5:31:23:d6:83:5c:a5:47:18:4b:70:95:49:bc:cc:
         f7:fe:4b:83:b8:24:17:a1:c8:be:15:27:50:ec:18:83:c5:7d:
         c7:00:27:47:19:cd:ad:98:b0:38:fe:0d:40:1a:d5:a1:1e:aa:
         40:93:f4:00:e7:13:dc:31:61:51:25:28:e5:e5:51:b2:ab:21:
         9d:dd:55:e2:fc:26:d6:5d:e7:24:7c:70:74:07:99:e1:95:0c:
         28:bb:2f:31:57:e0:69:0f:2a:27:38:d3:e2:dc:28:21:ba:b7:
         53:39:1c:6b:86:cb:9f:98:0f:4b:5b:1d:40:53:f1:6f:e8:d1:
         5c:71:74:c9:f3:bb:9a:13:a5:c4:8b:7d:e7:6c:77:2b:19:bc:
         43:84:de:88:0a:48:a7:9a:8c:2d:12:0f:e2:9a:0c:04:70:9f:
         68:12:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org