Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e2037343138.roa
File:                     3230302e35302e3130302e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          JN1Es9dAtcPDaCdVY2NPniDPuyLjrXBPALoKq4sFOgQ=
Subject key identifier:   95:61:F6:16:A6:78:E4:77:55:29:46:A6:95:32:49:A5:5F:93:99:EB
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       285F55522A14DA2B58C5BB040B9849065D20ECD0
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:48 +0000
ROA not before:           Tue 05 Mar 2024 18:11:48 +0000
ROA not after:            Tue 04 Mar 2025 18:16:48 +0000
asID:                     7418
IP address blocks:        200.50.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5f:55:52:2a:14:da:2b:58:c5:bb:04:0b:98:49:06:5d:20:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:48 2024 GMT
            Not After : Mar  4 18:16:48 2025 GMT
        Subject: CN=9561F616A678E477552946A6953249A55F9399EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:d7:2e:5e:53:d1:fb:ef:5c:be:be:2d:7e:
                    b7:aa:4f:45:94:c1:e1:39:74:06:8a:79:e3:23:ad:
                    56:2b:10:ba:dd:ba:1d:6e:5b:84:53:4e:b9:ae:41:
                    3d:de:98:f8:f3:aa:20:00:f0:26:4d:5a:82:e7:69:
                    b3:05:e2:9c:5b:9b:9f:a7:94:c1:64:38:df:cb:48:
                    32:8c:ac:ff:d6:f1:05:98:89:eb:55:b6:74:f0:3c:
                    ed:96:b2:7b:e9:93:6a:a2:1d:49:a7:9c:d7:b1:91:
                    9a:23:79:e6:ae:e3:fd:2c:71:7d:53:c2:6b:7d:c0:
                    2f:59:cd:c9:93:dc:0e:01:1a:fc:87:33:62:38:f6:
                    e5:4a:81:4c:c2:56:20:23:9f:a8:69:e0:5a:0f:50:
                    77:64:b3:ce:24:8b:98:9a:b6:34:45:1e:7e:2b:5f:
                    d3:62:e3:48:72:ee:2d:ce:ca:68:9e:72:2f:1d:02:
                    ce:de:de:72:f3:08:09:3e:31:21:d1:b1:a4:3d:af:
                    fb:57:83:8a:a0:aa:5c:4a:3c:32:3f:ec:13:37:cc:
                    3c:3a:a3:04:1c:6b:82:2c:4a:62:48:07:3a:60:c7:
                    85:a5:b9:f6:c8:89:43:f1:6c:64:d6:30:62:23:9c:
                    46:ea:8d:79:50:65:ca:7d:14:7f:55:c7:00:b4:f7:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:F6:16:A6:78:E4:77:55:29:46:A6:95:32:49:A5:5F:93:99:EB
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:98:7c:8d:fe:ba:8b:b1:e0:0c:e4:ca:e0:35:02:2d:75:d3:
         88:9e:a5:48:08:9f:e6:09:ad:ca:07:a8:7f:02:7b:e1:4b:92:
         9c:f0:98:c2:ae:68:02:e0:29:63:1a:7c:da:c6:43:d3:68:76:
         37:e4:f7:cb:68:6c:9d:df:07:3b:8b:a3:db:28:38:2f:a8:fb:
         0f:d6:6c:05:12:c2:f7:ca:f9:47:d5:e7:8b:09:b9:fc:f1:b1:
         dd:42:c1:4c:48:f3:3a:6f:4b:61:7a:07:54:91:40:5d:f9:6a:
         89:9c:16:e6:17:0a:d9:f7:f9:4e:b2:6e:ea:71:b2:d4:3b:14:
         8a:9b:d3:b1:e2:28:a3:12:98:87:e6:4e:54:f4:5e:93:b2:c9:
         f3:45:b7:40:27:b2:de:d0:26:55:9f:a7:b4:b3:ec:27:d2:75:
         4d:f8:c9:e3:62:f6:c9:a2:8a:69:17:04:eb:4e:6f:31:f8:41:
         24:ac:fb:ab:d2:8a:ba:5f:3f:ae:b2:4f:1d:bd:76:41:2f:97:
         6e:d1:d9:97:73:d6:47:4e:e2:7d:de:d9:e5:56:40:f0:80:01:
         80:e6:fd:ef:78:15:45:0b:5a:c7:be:c4:22:aa:cf:60:6b:9d:
         a8:f3:e0:f8:60:00:d8:e8:1d:a0:ef:94:f7:ae:8c:c6:be:6e:
         97:e2:b3:6a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKF9VUioU2itYxbsEC5hJBl0g7NAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODExNDhaFw0yNTAzMDQxODE2NDhaMDMxMTAvBgNV
BAMTKDk1NjFGNjE2QTY3OEU0Nzc1NTI5NDZBNjk1MzI0OUE1NUY5Mzk5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiW9cuXlPR++9cvr4tfreqT0WU
weE5dAaKeeMjrVYrELrduh1uW4RTTrmuQT3emPjzqiAA8CZNWoLnabMF4pxbm5+n
lMFkON/LSDKMrP/W8QWYietVtnTwPO2Wsnvpk2qiHUmnnNexkZojeeau4/0scX1T
wmt9wC9ZzcmT3A4BGvyHM2I49uVKgUzCViAjn6hp4FoPUHdks84ki5iatjRFHn4r
X9Ni40hy7i3Oymieci8dAs7e3nLzCAk+MSHRsaQ9r/tXg4qgqlxKPDI/7BM3zDw6
owQca4IsSmJIBzpgx4WlufbIiUPxbGTWMGIjnEbqjXlQZcp9FH9VxwC097KzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUlWH2FqZ45HdVKUamlTJJpV+TmeswHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzUzMDJlMzEzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzczNDMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIMmQwDQYJ
KoZIhvcNAQELBQADggEBAGOYfI3+uoux4AzkyuA1Ai1104iepUgIn+YJrcoHqH8C
e+FLkpzwmMKuaALgKWMafNrGQ9Nodjfk98tobJ3fBzuLo9soOC+o+w/WbAUSwvfK
+UfV54sJufzxsd1CwUxI8zpvS2F6B1SRQF35aomcFuYXCtn3+U6ybupxstQ7FIqb
07HiKKMSmIfmTlT0XpOyyfNFt0Anst7QJlWfp7Sz7CfSdU34yeNi9smiimkXBOtO
bzH4QSSs+6vSirpfP66yTx29dkEvl27R2Zdz1kdO4n3e2eVWQPCAAYDm/e94FUUL
Wse+xCKqz2Brnajz4PhgANjoHaDvlPeujMa+bpfis2o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org