Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e203136363239.roa
File:                     3230302e35302e3132302e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          szH5n3KNFXRBZPO+sMedSLLB2hwLrvHZ1+RvnEomj90=
Subject key identifier:   25:F7:8F:99:68:87:32:D1:D3:54:CD:17:D7:2F:17:66:49:37:C2:C1
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5099D8CDF70C01B4F256107646867BAD9BD2E1A5
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:16:54 +0000
ROA not before:           Tue 05 Mar 2024 18:11:54 +0000
ROA not after:            Tue 04 Mar 2025 18:16:54 +0000
asID:                     16629
IP address blocks:        200.50.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:99:d8:cd:f7:0c:01:b4:f2:56:10:76:46:86:7b:ad:9b:d2:e1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:54 2024 GMT
            Not After : Mar  4 18:16:54 2025 GMT
        Subject: CN=25F78F99688732D1D354CD17D72F17664937C2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:8b:0e:72:49:1b:64:a4:0c:a4:42:cf:eb:
                    5f:25:61:d4:83:9d:a5:0c:a9:9e:ae:4e:06:21:37:
                    13:5a:56:81:6d:c3:b8:49:21:05:5f:0b:dd:47:95:
                    fe:7f:93:d9:b0:1e:67:dd:6b:4a:1a:b3:26:d4:2e:
                    8e:5c:32:d3:e1:99:7e:81:53:df:49:5d:e4:78:8c:
                    9e:fb:b2:2e:a0:fc:18:61:c8:9c:66:a3:4f:29:e1:
                    4d:3f:13:f5:c8:4a:4c:1a:19:3f:85:bc:2b:88:e7:
                    d6:16:4f:5a:25:18:d5:78:cc:92:0c:95:15:a5:2a:
                    ed:e8:fd:42:ff:e1:36:b1:5f:da:fc:db:ad:b8:8e:
                    d8:a0:cb:46:d0:49:ff:08:80:f0:d2:ba:8d:0f:b6:
                    8b:8b:47:91:94:54:1d:05:fc:e9:ca:89:34:81:a6:
                    3b:ec:8e:a1:2d:a6:35:3d:5a:46:38:4b:ff:2c:c4:
                    27:f1:2a:a9:41:11:5b:f3:cb:42:49:46:11:61:17:
                    21:68:2c:ad:87:8f:8b:1c:ab:33:e8:9f:b3:98:95:
                    0c:3b:b8:95:bc:cf:c4:8e:a8:6b:85:64:5a:75:fa:
                    81:ad:9c:a9:5d:2e:e5:21:53:0a:0b:bf:d8:41:9c:
                    92:c4:28:d3:94:2e:eb:53:b8:09:73:69:70:01:bf:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:8F:99:68:87:32:D1:D3:54:CD:17:D7:2F:17:66:49:37:C2:C1
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ba:30:1d:ab:63:a2:a8:b2:f9:47:8d:6b:fd:bb:46:26:9b:
         68:15:41:c1:00:0b:28:d4:8a:d5:89:9e:1a:70:fb:bd:e1:27:
         01:c5:92:b1:5f:b4:5f:1e:18:e6:76:17:41:7c:99:e1:51:5e:
         2b:34:7c:64:40:6b:4b:0c:73:46:96:d3:2f:47:79:0a:8d:eb:
         cd:c4:cb:6a:d0:9c:a4:d8:cf:2c:d0:6d:00:0a:44:fc:8f:45:
         86:40:3c:d2:ea:0f:17:ca:2a:e3:04:07:72:44:3f:7f:3c:af:
         a2:6c:ee:76:65:1b:3a:de:54:18:cb:4d:b7:cf:92:85:a0:03:
         51:7f:ac:b1:92:5f:61:72:39:9c:49:d2:74:f0:7f:e2:0c:85:
         5d:09:82:01:df:12:17:1a:3f:df:95:2c:2a:7a:e9:07:f6:a0:
         8e:8d:be:44:bf:3e:29:34:1f:fd:ce:be:a1:7c:69:53:d0:b6:
         a6:63:ee:1c:65:f2:00:29:cb:7a:1f:31:8c:55:d1:d0:80:cd:
         88:e5:c5:02:09:51:e9:4b:a5:b7:a3:22:72:5e:35:e8:4a:07:
         d3:89:03:cf:6e:23:58:91:3b:21:13:3c:68:7f:70:14:a8:0c:
         09:6f:c8:7b:91:03:2d:1c:eb:ee:3a:f9:c2:cd:2a:7b:8e:d8:
         c0:08:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org