Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138392e302f32342d3234203d3e2037343138.roa
File:                     3230302e34322e3138392e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          AZeMXOLzSGvPg7DnR134YZeXvoz+6s41wwngSzg59WA=
Subject key identifier:   B6:2C:C5:4D:46:7E:A1:0F:01:83:73:16:BF:23:B4:B9:D2:EB:BD:F7
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       2F353B7FDC29EE5FC5C4548C0A50F1041BE1E377
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138392e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:58 +0000
ROA not before:           Tue 05 Mar 2024 18:11:58 +0000
ROA not after:            Tue 04 Mar 2025 18:16:58 +0000
asID:                     7418
IP address blocks:        200.42.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:3b:7f:dc:29:ee:5f:c5:c4:54:8c:0a:50:f1:04:1b:e1:e3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:58 2024 GMT
            Not After : Mar  4 18:16:58 2025 GMT
        Subject: CN=B62CC54D467EA10F01837316BF23B4B9D2EBBDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:ee:ba:79:b8:2d:79:c5:c4:ef:32:1b:f5:
                    f5:ea:cd:05:7c:cb:0d:c2:61:a9:9e:01:85:37:af:
                    13:9a:ee:d2:7a:88:d6:1c:8b:89:76:95:16:79:fd:
                    d8:65:0d:3f:59:a9:b7:05:2e:24:8f:f1:3c:45:b7:
                    0f:36:b3:1d:33:4c:97:f9:31:0f:60:84:2f:b6:1c:
                    85:75:cd:05:6a:a9:73:80:a6:0d:30:1b:f6:9f:cb:
                    5f:b1:b3:8e:e0:2f:06:4c:ff:c7:a6:b9:f5:8d:a3:
                    5e:6c:38:e8:ab:a6:34:37:b0:b7:7d:e4:56:d7:bc:
                    4b:08:7b:6a:69:48:3f:22:a8:9c:e4:7c:aa:e0:e8:
                    67:37:d8:48:75:be:61:37:e8:68:8a:5f:92:a6:03:
                    84:36:ed:b5:09:69:e4:38:1b:62:91:d1:a2:be:9d:
                    b3:76:13:5f:0c:8d:ba:81:60:26:5d:11:f0:6f:0f:
                    a0:d0:5f:a5:7c:5e:1c:7f:68:74:95:a7:98:dc:55:
                    6d:cc:4f:d8:b4:ae:8f:06:aa:09:31:1c:9e:c6:bc:
                    85:1b:4e:32:cb:78:0f:22:78:6f:d8:56:77:f5:23:
                    75:17:be:75:f7:ff:a6:cf:f7:3d:cb:d9:64:de:93:
                    c2:c1:28:7f:7a:6d:5b:01:b1:ef:a4:8c:bc:b7:4c:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:C5:4D:46:7E:A1:0F:01:83:73:16:BF:23:B4:B9:D2:EB:BD:F7
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138392e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:b2:98:d4:33:b4:7f:d7:9f:e4:1a:f7:e5:ca:3a:81:96:
         70:13:c4:e1:8c:f2:fa:91:8a:12:e5:a8:9a:6c:7d:eb:60:e5:
         bc:c9:1e:aa:a0:0d:05:a6:08:09:28:c3:f5:da:d6:db:a5:c7:
         75:30:00:14:19:85:47:a5:d1:84:70:4b:72:0f:80:93:5c:76:
         42:83:8a:38:da:f3:1c:30:4c:eb:a3:cf:ba:b1:4f:f6:70:65:
         c6:86:df:d1:5c:95:9a:41:81:ca:8f:dd:c1:7b:d6:3e:c1:7c:
         54:58:52:de:7b:53:ff:0f:ca:a9:19:0b:7d:24:fb:57:a8:1f:
         57:8e:0a:41:45:c2:3f:fa:93:03:7d:86:a8:e1:94:b4:ce:9c:
         36:ad:2a:6b:da:b6:77:e3:65:d0:fc:de:c3:58:40:e1:b6:da:
         7d:4e:64:aa:a9:7d:81:52:ef:62:98:c5:60:a5:44:f5:8b:95:
         68:ab:1c:b1:f3:cc:f8:e2:7c:45:65:94:88:9a:da:86:a7:10:
         45:a9:80:d4:c4:17:da:c2:b6:5b:ce:f3:a5:ec:c8:41:87:7b:
         37:f2:7d:17:80:94:53:64:a1:db:29:17:e5:a1:ae:a1:b4:96:
         17:7c:ad:a6:8c:7f:dc:13:b2:d2:f0:72:a8:e6:13:e3:ce:be:
         25:2d:c3:36
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULzU7f9wp7l/FxFSMClDxBBvh43cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODExNThaFw0yNTAzMDQxODE2NThaMDMxMTAvBgNV
BAMTKEI2MkNDNTRENDY3RUExMEYwMTgzNzMxNkJGMjNCNEI5RDJFQkJERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0O66ebgtecXE7zIb9fXqzQV8
yw3CYameAYU3rxOa7tJ6iNYci4l2lRZ5/dhlDT9ZqbcFLiSP8TxFtw82sx0zTJf5
MQ9ghC+2HIV1zQVqqXOApg0wG/afy1+xs47gLwZM/8emufWNo15sOOirpjQ3sLd9
5FbXvEsIe2ppSD8iqJzkfKrg6Gc32Eh1vmE36GiKX5KmA4Q27bUJaeQ4G2KR0aK+
nbN2E18MjbqBYCZdEfBvD6DQX6V8Xhx/aHSVp5jcVW3MT9i0ro8GqgkxHJ7GvIUb
TjLLeA8ieG/YVnf1I3UXvnX3/6bP9z3L2WTek8LBKH96bVsBse+kjLy3TLLxAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUtizFTUZ+oQ8Bg3MWvyO0udLrvfcwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzQzMjJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczNDMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIKr0wDQYJ
KoZIhvcNAQELBQADggEBABpfspjUM7R/15/kGvflyjqBlnATxOGM8vqRihLlqJps
fetg5bzJHqqgDQWmCAkow/Xa1tulx3UwABQZhUel0YRwS3IPgJNcdkKDijja8xww
TOujz7qxT/ZwZcaG39FclZpBgcqP3cF71j7BfFRYUt57U/8PyqkZC30k+1eoH1eO
CkFFwj/6kwN9hqjhlLTOnDatKmvatnfjZdD83sNYQOG22n1OZKqpfYFS72KYxWCl
RPWLlWirHLHzzPjifEVllIia2oanEEWpgNTEF9rCtlvO86XsyEGHezfyfReAlFNk
odspF+WhrqG0lhd8raaMf9wTstLwcqjmE+POviUtwzY=
-----END CERTIFICATE-----
Generated at Fri May 3 03:08:36 2024 by rpki-client on console-ams.rpki-client.org