Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e203136363239.roa
File:                     3230302e35302e3130302e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          TQE75cp35lz85gVbysavIKnE5lKVAKHVGG5n5YN+fpw=
Subject key identifier:   BE:FB:E1:D4:0B:4A:57:51:07:38:9D:82:8B:9B:A0:FF:9F:C8:FF:2F
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6FA037377C87DCC01450098C8F0AA9725C1ECD6E
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:50 +0000
ROA not before:           Tue 04 Feb 2025 19:55:50 +0000
ROA not after:            Tue 03 Feb 2026 20:00:50 +0000
asID:                     16629
IP address blocks:        200.50.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:37:37:7c:87:dc:c0:14:50:09:8c:8f:0a:a9:72:5c:1e:cd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:50 2025 GMT
            Not After : Feb  3 20:00:50 2026 GMT
        Subject: CN=BEFBE1D40B4A575107389D828B9BA0FF9FC8FF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:b6:0e:d5:78:d9:57:8a:c6:07:e9:9e:b3:
                    37:a5:21:e6:bc:f1:01:bc:47:52:3b:aa:be:a2:1e:
                    9d:8a:6b:9f:87:ec:e5:54:16:ff:f8:55:73:7b:ef:
                    75:dd:60:69:24:34:67:31:be:12:7b:7d:69:65:2c:
                    6d:3d:ae:77:36:b1:b3:18:ae:b0:16:b4:bb:6b:99:
                    e4:52:cd:02:c5:08:fd:29:f6:3b:81:f9:73:f2:13:
                    c7:d9:72:73:54:67:7e:fe:7e:0a:77:de:43:bb:46:
                    9a:c6:e0:e3:d4:05:c7:d2:14:33:1b:66:62:ec:f8:
                    73:94:d0:8b:34:20:79:32:02:32:14:47:d4:e8:d5:
                    5a:d0:a2:ff:17:fc:be:af:32:44:1d:4c:e6:f4:85:
                    19:88:b6:f4:1a:fb:52:d3:41:ca:39:74:1b:53:06:
                    c5:db:10:77:ed:80:27:a0:03:bb:f9:ca:c2:6b:e9:
                    ee:79:27:86:0e:ce:d9:21:e3:bf:36:d7:d3:8a:37:
                    c7:52:37:34:0d:37:1d:5e:c1:8a:4b:5d:1c:cb:0a:
                    17:91:4c:47:27:8b:68:02:c3:2e:df:73:56:b0:79:
                    76:97:0a:e3:45:55:47:80:cd:4b:2d:bd:25:c8:cd:
                    dd:f5:98:31:0f:78:a4:9c:20:83:aa:e6:18:d9:e0:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:E1:D4:0B:4A:57:51:07:38:9D:82:8B:9B:A0:FF:9F:C8:FF:2F
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:5a:72:8d:8e:78:63:8b:8c:85:74:ef:7b:bd:cb:05:8c:
         75:6b:11:fd:7e:99:f8:0f:c2:a7:2c:6f:54:8c:5b:cd:1b:c3:
         2a:79:29:46:fa:af:bb:a1:99:68:33:be:ef:1c:fd:32:6b:a8:
         4d:c2:18:b0:ce:e1:3b:95:3f:46:b5:ab:ce:d5:59:fa:52:7a:
         8b:ab:e6:9f:29:0c:bb:04:70:e9:e9:a0:28:f1:7f:54:ea:7f:
         2c:08:b7:35:c1:95:88:ea:b7:90:af:50:0f:d9:58:70:45:a9:
         91:51:e0:c8:09:eb:48:b4:f2:75:72:55:27:47:87:fe:07:59:
         6f:c7:cc:fb:eb:64:76:82:2b:60:d4:53:48:e6:f6:1c:20:ad:
         33:ad:72:a3:c1:48:62:83:61:a6:46:cc:4e:90:82:1d:fa:92:
         b7:81:8c:83:77:69:2d:c9:1a:28:47:f1:8e:b3:a5:27:ae:a7:
         70:f1:77:a6:d0:9a:3e:51:2e:2f:e0:9c:a7:d1:fd:35:43:d4:
         c3:e7:fe:df:fa:bf:26:95:16:42:85:10:03:a8:01:93:6e:07:
         2a:2a:72:f2:02:99:63:c5:3c:0d:2f:66:fe:35:5f:4f:07:46:
         89:4b:02:8e:25:bd:7f:08:79:e3:c7:d5:98:7f:37:29:c7:f1:
         9f:be:6a:59
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUb6A3N3yH3MAUUAmMjwqpclwezW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNTAyMDQxOTU1NTBaFw0yNjAyMDMyMDAwNTBaMDMxMTAvBgNV
BAMTKEJFRkJFMUQ0MEI0QTU3NTEwNzM4OUQ4MjhCOUJBMEZGOUZDOEZGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uLYO1XjZV4rGB+meszelIea8
8QG8R1I7qr6iHp2Ka5+H7OVUFv/4VXN773XdYGkkNGcxvhJ7fWllLG09rnc2sbMY
rrAWtLtrmeRSzQLFCP0p9juB+XPyE8fZcnNUZ37+fgp33kO7RprG4OPUBcfSFDMb
ZmLs+HOU0Is0IHkyAjIUR9To1VrQov8X/L6vMkQdTOb0hRmItvQa+1LTQco5dBtT
BsXbEHftgCegA7v5ysJr6e55J4YOztkh478219OKN8dSNzQNNx1ewYpLXRzLCheR
TEcni2gCwy7fc1aweXaXCuNFVUeAzUstvSXIzd31mDEPeKScIIOq5hjZ4G8tAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvvvh1AtKV1EHOJ2Ci5ug/5/I/y8wHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzUzMDJlMzEzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgyZDAN
BgkqhkiG9w0BAQsFAAOCAQEAKdJaco2OeGOLjIV073u9ywWMdWsR/X6Z+A/Cpyxv
VIxbzRvDKnkpRvqvu6GZaDO+7xz9MmuoTcIYsM7hO5U/RrWrztVZ+lJ6i6vmnykM
uwRw6emgKPF/VOp/LAi3NcGViOq3kK9QD9lYcEWpkVHgyAnrSLTydXJVJ0eH/gdZ
b8fM++tkdoIrYNRTSOb2HCCtM61yo8FIYoNhpkbMTpCCHfqSt4GMg3dpLckaKEfx
jrOlJ66ncPF3ptCaPlEuL+Ccp9H9NUPUw+f+3/q/JpUWQoUQA6gBk24HKipy8gKZ
Y8U8DS9m/jVfTwdGiUsCjiW9fwh548fVmH83Kcfxn75qWQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:35 2025 by rpki-client