Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130342e302f32322d3234203d3e2037343138.roa
File:                     3230302e35302e3130342e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          0CqbilsLvLQX73EFuLoK8L4eIWW5FvLuBKoJMB0kHb0=
Subject key identifier:   D1:EB:B8:63:56:2C:3C:1B:E0:D8:6F:04:61:13:DC:89:E0:25:8F:43
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       4506FB0E9BCF880A11F2CE6EC57E0AEC6D8FCDC6
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130342e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:47 +0000
ROA not before:           Tue 05 Mar 2024 18:11:47 +0000
ROA not after:            Tue 04 Mar 2025 18:16:47 +0000
asID:                     7418
IP address blocks:        200.50.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:06:fb:0e:9b:cf:88:0a:11:f2:ce:6e:c5:7e:0a:ec:6d:8f:cd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:47 2024 GMT
            Not After : Mar  4 18:16:47 2025 GMT
        Subject: CN=D1EBB863562C3C1BE0D86F046113DC89E0258F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:ab:98:f6:6d:4f:3c:b2:76:8c:58:ad:d0:
                    96:55:0c:45:c0:a8:3a:60:3f:08:64:37:99:72:08:
                    90:b2:41:be:81:1a:a8:0a:4e:1b:0d:f9:5d:6d:0f:
                    70:64:56:bd:95:7d:6b:d7:56:0e:ad:ae:ba:44:85:
                    28:dd:90:34:3c:15:ce:c5:33:5b:51:49:2c:c4:77:
                    3f:7e:bd:8c:52:6c:d6:bc:e9:1b:af:b9:61:52:cd:
                    6d:82:a1:52:8f:e5:76:f5:2e:e7:8a:93:a8:17:bc:
                    d4:d2:bf:a9:b7:9c:f2:43:30:7f:83:d8:54:25:3a:
                    7e:1f:79:cb:77:53:9b:e6:75:a9:e5:99:07:59:43:
                    fc:06:70:d3:b5:c6:2f:b3:4d:7a:fa:36:4f:6b:96:
                    18:00:0e:3d:e4:e1:6f:d0:43:ea:74:2c:cd:8e:fe:
                    2c:98:72:1d:ca:dd:ab:d9:01:ee:35:33:e2:5f:1d:
                    53:3f:dc:0b:0b:cb:3b:dc:89:d7:be:5d:e9:df:5b:
                    51:85:68:a1:4e:8d:6e:85:c2:85:be:e4:6a:83:5f:
                    79:a1:b0:c0:98:02:54:e9:e2:89:46:e2:8e:34:53:
                    e2:6d:96:25:b4:9a:3c:f2:f0:9d:9a:61:f7:61:09:
                    b9:1a:bf:82:ae:80:7e:c1:6b:5d:99:2a:fc:93:ff:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EB:B8:63:56:2C:3C:1B:E0:D8:6F:04:61:13:DC:89:E0:25:8F:43
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130342e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:d9:af:cb:89:3b:33:86:48:0e:07:a5:7c:ca:0f:b5:e2:
         75:0b:40:44:ce:be:91:4d:af:d0:95:63:3f:be:31:7d:00:f6:
         a5:aa:b4:c0:e1:a1:68:7b:1d:9c:08:48:a6:48:df:e7:48:89:
         18:da:c6:60:51:51:bd:da:5d:96:f7:d3:65:50:4a:ac:4b:b5:
         23:ec:56:03:91:ca:20:ff:5b:22:67:50:5d:27:ca:05:a2:5c:
         27:7b:dc:ce:e3:89:a0:87:4b:8b:86:39:59:1b:f0:a2:79:fe:
         1f:d4:12:15:54:6d:7c:c4:d2:57:5a:bc:ea:a1:8b:42:22:b2:
         98:9c:f5:b4:4c:6d:33:a6:bc:75:9f:6f:62:2a:6a:3c:54:50:
         9e:0f:d2:0c:6c:87:9c:2d:3e:ef:04:f2:2f:51:b5:66:6b:86:
         c8:bf:8c:8a:7c:59:e6:7b:e8:0f:cc:32:04:6b:bb:8c:d7:7e:
         07:2f:7a:54:d1:1d:f0:10:ce:4d:1b:e3:2f:74:77:f4:e5:01:
         8f:81:e5:83:1a:f8:ff:38:5e:ec:ab:67:bc:d2:92:9d:8e:ed:
         98:68:84:e3:a9:dc:92:59:c1:60:93:56:15:5c:b6:47:e8:96:
         8d:a2:4c:9c:8d:cb:db:1f:52:86:f3:0e:42:aa:58:e9:78:53:
         1d:18:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org