Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa
File:                     3230302e39302e3136302e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          xAftabu7j035I3cc6wGk6YQafo4+/QLSBKZ1eKqolTw=
Subject key identifier:   44:22:F5:DD:DC:8D:66:3D:4C:0E:B5:66:F9:28:94:83:22:45:4C:EB
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       44AA6AD90A83F6429B8FFF61D2AEE43113F83DB4
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:16:47 +0000
ROA not before:           Tue 05 Mar 2024 18:11:47 +0000
ROA not after:            Tue 04 Mar 2025 18:16:47 +0000
asID:                     16629
IP address blocks:        200.90.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:6a:d9:0a:83:f6:42:9b:8f:ff:61:d2:ae:e4:31:13:f8:3d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:47 2024 GMT
            Not After : Mar  4 18:16:47 2025 GMT
        Subject: CN=4422F5DDDC8D663D4C0EB566F928948322454CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:e3:01:ce:6f:ac:66:d0:50:a0:24:19:49:
                    19:f3:7e:8d:0b:5f:e7:d0:8d:f8:63:e7:e3:6d:bc:
                    bc:30:0e:e4:cc:a6:2e:e4:4e:09:ed:0b:6d:39:7b:
                    de:fa:07:3a:c5:1b:d3:10:8a:b1:8c:30:00:10:7f:
                    e6:ca:5e:66:16:3b:53:e3:e9:4f:0a:1f:33:0c:82:
                    ee:17:a3:36:cd:34:0f:3a:0c:c7:5e:73:4e:44:9b:
                    ef:ca:e8:8a:ce:6f:66:fc:9d:99:fb:61:cc:b4:58:
                    e5:5a:80:71:e2:73:a0:b0:e4:3d:60:1e:91:de:74:
                    6a:77:e5:3e:74:d1:8f:73:52:cb:21:e0:2b:3a:7b:
                    aa:72:72:ad:b0:30:06:5d:46:f6:04:c0:e2:ff:24:
                    a7:a8:55:6a:95:cd:39:06:1f:96:da:7e:4f:f9:df:
                    3e:eb:3c:8c:b4:09:21:43:64:73:e4:fd:3c:ca:0e:
                    dc:e0:68:e8:83:a8:c3:95:45:15:40:13:63:1c:16:
                    09:d4:de:6b:47:bc:eb:79:5d:07:e0:d4:a3:1b:a8:
                    3e:05:e7:67:cf:d4:4e:d3:88:e0:0f:ec:60:8a:d8:
                    68:e3:97:0c:d6:4f:07:c9:06:be:de:9d:5e:3f:c8:
                    70:63:bb:bc:ea:53:99:90:94:00:e3:a5:66:07:31:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:22:F5:DD:DC:8D:66:3D:4C:0E:B5:66:F9:28:94:83:22:45:4C:EB
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:fa:95:a1:ba:c7:ee:aa:44:8e:c1:a6:45:58:be:66:07:5a:
         6f:f0:c6:09:da:63:d5:48:c3:ad:fb:b5:58:cb:67:be:91:27:
         e7:e0:f6:2c:81:2a:b2:21:1c:f6:07:55:ab:7e:2f:d3:ca:c4:
         0e:b3:bb:25:aa:1a:0c:cc:8b:f2:dc:44:6b:03:7d:ab:23:ba:
         fd:c1:c9:e1:ff:ba:18:13:86:35:fc:70:c0:85:34:7a:d1:e3:
         0e:b7:71:30:4f:17:eb:83:43:6e:64:2d:b3:31:bc:ba:98:fe:
         52:a7:94:62:9d:d8:b7:70:30:cd:a7:b1:8c:3b:ce:fb:68:81:
         95:3e:4a:07:db:6e:cb:bd:f4:8c:39:4d:e2:f2:44:86:46:4c:
         c6:0e:c0:33:61:4a:dd:af:71:46:3d:89:fa:34:16:ea:18:a0:
         63:c3:39:0f:0b:f7:2a:10:f5:d6:22:03:10:f5:4e:c4:e3:fe:
         51:dc:9a:8d:6b:ee:17:ef:17:8b:53:a7:4b:17:1d:5d:06:60:
         7c:71:d6:8b:80:ce:af:a6:17:f9:03:86:0d:d3:69:a7:0e:a5:
         82:64:cd:a8:fe:72:92:98:e0:ba:ea:d2:a5:a8:00:24:cb:0b:
         84:6c:11:4f:ba:4f:df:d1:67:bb:3a:1e:24:76:51:21:cb:2a:
         f9:b7:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org