Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e203135333131.roa
File:                     3230302e39302e3137362e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          wN1CHYfNE8JtQHZ9f8PvSzVR++YKhWDHW7spOhldV4o=
Subject key identifier:   B3:D8:08:09:A3:33:8F:35:12:34:60:14:7A:F9:EC:66:6E:DE:3E:40
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       4CC005E0BE5F344F96A7D214F2E71A4258CB5C43
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 20:01:05 +0000
ROA not before:           Tue 04 Feb 2025 19:56:05 +0000
ROA not after:            Tue 03 Feb 2026 20:01:05 +0000
asID:                     15311
IP address blocks:        200.90.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c0:05:e0:be:5f:34:4f:96:a7:d2:14:f2:e7:1a:42:58:cb:5c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:05 2025 GMT
            Not After : Feb  3 20:01:05 2026 GMT
        Subject: CN=B3D80809A3338F35123460147AF9EC666EDE3E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:09:98:52:41:40:a2:ea:ec:ce:4a:50:67:
                    ac:f8:ee:2a:6b:c9:c5:f5:3c:21:fe:31:5e:40:cd:
                    14:3f:fd:3b:31:8b:31:8f:c5:00:a1:ee:72:3f:0b:
                    66:41:40:2a:09:01:6c:de:e8:2e:76:ec:ff:4d:6e:
                    5e:3b:12:53:ec:59:f6:60:ae:05:f4:39:cb:e4:95:
                    8e:8b:21:5e:9d:c0:9a:c6:56:f2:4d:5c:49:15:de:
                    11:80:b1:86:47:d4:a8:19:53:dc:2a:54:9b:ac:b0:
                    9a:02:7b:f7:c4:b9:55:07:2e:f5:62:20:97:5d:fa:
                    1c:26:7d:b6:6a:1d:61:81:d9:b1:ff:59:85:59:a7:
                    cc:bb:09:10:ab:23:66:95:a4:9e:a3:49:ad:ce:93:
                    3e:a3:ec:6d:fa:de:ba:51:d4:ff:78:f8:7d:b6:8e:
                    d9:90:7e:b6:42:f2:65:0c:eb:d3:63:fb:da:e9:37:
                    9d:81:a7:7c:b4:b7:85:ca:2c:42:80:d2:c6:a3:f8:
                    a1:c1:a3:f1:8c:02:bc:42:10:28:e3:fc:c5:02:8b:
                    82:25:b3:73:fb:0b:36:76:06:83:c3:99:23:d0:ea:
                    b7:9e:27:8f:dc:7e:6d:d0:e6:10:4b:1c:12:f3:43:
                    ea:d3:aa:12:fe:25:de:4d:40:98:b7:95:d4:40:0f:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:08:09:A3:33:8F:35:12:34:60:14:7A:F9:EC:66:6E:DE:3E:40
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:51:c2:63:13:a8:40:2a:a2:8f:a1:14:01:b8:d0:f8:ae:14:
         bd:30:f4:7a:a0:bc:d4:31:9d:48:eb:5f:14:00:eb:66:5b:76:
         9e:54:41:17:ad:76:b1:27:62:95:52:9c:f9:a1:17:a2:db:b7:
         e2:34:03:29:8a:08:88:c0:ee:64:e8:53:05:5d:06:c5:ea:14:
         06:35:dd:db:2e:2b:9d:5e:dc:cd:c0:7a:11:c5:9c:eb:7a:d8:
         bf:18:4a:bc:eb:80:00:43:d1:16:f6:33:8e:f5:96:53:66:c9:
         c5:cf:fa:0b:a2:9e:ae:ce:cc:d0:fb:1e:5c:68:7a:d7:4d:2e:
         dc:d6:be:7f:8b:44:5e:48:46:74:84:c8:9d:d6:1a:03:b2:bb:
         60:6b:32:c7:29:fc:28:d8:04:d5:16:fb:70:76:84:1b:3a:e7:
         54:31:3e:a6:32:52:a8:f1:97:e7:00:b0:3a:a7:da:bf:0e:36:
         19:97:1b:0e:c2:f4:43:e5:3d:92:5b:ff:b8:39:e5:15:45:7b:
         48:fd:ba:cc:d2:e2:3f:b2:89:12:0f:0e:f6:6f:5c:50:d3:b3:
         bd:4b:63:aa:fd:c9:3c:4f:b9:79:15:c7:f1:e8:7b:d8:e0:01:
         de:62:0d:70:89:6f:d2:72:80:db:55:0a:a6:69:2e:9b:aa:6a:
         3a:a3:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:38:06 2025 by rpki-client