Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203135333131.roa
File:                     3230302e39302e3136302e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          IHkhZT8xKNi91/2VARqRezso1UJ3XflBx58agRV2oTw=
Subject key identifier:   6B:91:2D:F5:E7:24:A8:B9:7D:B6:32:B4:A9:E0:B2:29:89:95:11:18
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       502F4D04AED3D19E87EDA48BD8FEC36D01B70809
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:16:48 +0000
ROA not before:           Tue 05 Mar 2024 18:11:48 +0000
ROA not after:            Tue 04 Mar 2025 18:16:48 +0000
asID:                     15311
IP address blocks:        200.90.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2f:4d:04:ae:d3:d1:9e:87:ed:a4:8b:d8:fe:c3:6d:01:b7:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:48 2024 GMT
            Not After : Mar  4 18:16:48 2025 GMT
        Subject: CN=6B912DF5E724A8B97DB632B4A9E0B22989951118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:9f:75:4e:be:d2:ff:d2:7a:64:08:5f:86:
                    cb:1d:69:d2:d8:96:1d:21:5f:64:0b:81:18:ab:7f:
                    9a:35:09:27:d3:de:36:57:0c:46:19:44:74:67:04:
                    f6:42:23:7e:dd:16:13:21:24:3c:89:38:eb:b0:84:
                    0f:d8:9e:22:b0:e4:24:7c:99:39:00:93:e6:44:e5:
                    4c:e5:81:ad:d4:c5:74:88:0f:9c:6c:02:29:19:01:
                    e0:25:b6:26:51:d6:f1:26:19:a0:f9:3f:a8:8c:ab:
                    aa:2e:09:a8:5b:fb:6e:55:c3:be:55:4b:aa:1c:22:
                    7a:58:3b:66:c9:5b:78:1d:17:c0:35:61:3d:56:70:
                    f9:df:54:d6:5a:70:76:21:5e:fa:0e:b4:4f:11:dd:
                    1b:5e:2e:e0:18:04:61:be:56:5b:d7:22:d8:73:46:
                    21:1c:53:4e:8a:56:64:9b:12:3d:43:f4:ad:be:b4:
                    4d:65:31:6b:cb:61:60:5b:3f:1a:bb:7a:08:12:51:
                    f3:d9:8c:4b:b8:cb:43:6b:2e:fb:2e:b7:8a:a6:16:
                    b7:6e:42:2e:07:16:16:d2:45:3d:69:f5:b6:e5:e8:
                    2a:45:2e:b8:8c:93:2b:41:a0:4e:bd:e3:5c:a8:4f:
                    50:c1:28:49:be:4c:24:dc:15:5d:bd:7d:59:e5:8b:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:91:2D:F5:E7:24:A8:B9:7D:B6:32:B4:A9:E0:B2:29:89:95:11:18
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:2b:e5:f1:77:c4:6c:6e:88:47:4e:8e:48:bb:f0:eb:4f:
         20:50:8a:3e:4c:82:15:d9:27:b9:27:15:bc:e0:07:a9:29:4a:
         37:0e:78:fc:62:71:9d:fe:9a:db:c4:f0:1a:c5:d5:22:88:1c:
         b2:ba:11:ac:25:88:50:5d:03:c3:f3:d1:92:e7:f4:ab:84:09:
         00:b5:c8:80:fe:51:68:a5:32:de:4d:d2:c3:14:3a:f3:47:48:
         c3:83:ff:cb:dc:17:a7:7e:d7:c5:c0:e7:92:49:6c:eb:0c:fb:
         53:23:61:47:09:ce:99:bb:e5:9c:81:13:df:0f:98:95:5b:2b:
         01:e3:10:3d:14:ec:79:1f:16:67:aa:db:33:10:c4:86:dc:44:
         3b:fc:00:46:08:9c:3d:52:a4:60:77:94:58:0c:0e:71:71:77:
         1f:82:12:1c:38:6a:83:19:a9:71:40:83:85:67:56:20:77:48:
         e8:29:5f:ea:a1:dc:2a:e3:f3:c3:d6:b1:bd:20:0b:62:93:4c:
         c1:a9:85:70:27:5b:ff:fc:d1:b4:c7:31:2f:b1:40:a1:5a:ce:
         8e:76:b9:69:49:14:56:3f:07:4f:80:01:d2:f2:96:74:44:cc:
         b6:ae:b9:94:fa:ed:57:5f:50:65:37:80:cd:d7:f5:39:db:5a:
         53:e0:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:11 2024 by rpki-client on console-fra.rpki-client.org