Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3137362e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          QCIXkdAguqr8/VIyJrmWMbu597rFiM0Hhr2fbddO20I=
Subject key identifier:   2E:FE:3E:94:5E:7B:82:17:96:26:B7:FD:E9:50:12:4C:F8:1B:FB:92
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5EDD537F3D0220018E82102755538C211457D60A
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:00:55 +0000
ROA not before:           Tue 04 Feb 2025 19:55:55 +0000
ROA not after:            Tue 03 Feb 2026 20:00:55 +0000
asID:                     7418
IP address blocks:        200.90.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:dd:53:7f:3d:02:20:01:8e:82:10:27:55:53:8c:21:14:57:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:55 2025 GMT
            Not After : Feb  3 20:00:55 2026 GMT
        Subject: CN=2EFE3E945E7B82179626B7FDE950124CF81BFB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:01:73:aa:6c:76:9a:7a:c3:94:34:06:cd:
                    0c:c1:a6:fd:2c:97:32:35:bf:96:4e:e8:aa:0e:19:
                    eb:c5:d8:bc:b2:e7:0e:ea:92:e3:02:7d:c5:d6:d2:
                    8e:d4:b3:89:d1:5b:9a:f0:57:dd:e4:4f:df:02:4a:
                    31:e0:37:60:9d:97:28:00:a1:2e:1d:9f:7d:32:8e:
                    3a:ba:77:fc:2a:a4:7d:50:b0:ef:b7:6c:0f:60:4b:
                    5c:eb:74:8f:53:95:f0:9b:ce:46:2d:0b:50:30:3d:
                    11:93:94:bc:65:8b:9d:79:5d:68:5a:c9:22:5d:e1:
                    21:53:a9:f3:48:27:f0:e3:dc:00:14:75:d0:79:94:
                    76:1a:61:24:33:b1:56:64:9b:14:d7:ae:22:58:82:
                    10:07:05:6b:bf:71:16:7b:dc:4a:89:38:e9:4d:63:
                    ae:17:d9:30:4a:dc:ef:54:25:44:9e:5f:01:0d:0b:
                    a6:42:75:92:ff:6c:8d:62:17:d7:6b:2a:e6:7c:45:
                    98:64:dd:5d:01:7b:ae:74:40:21:68:d4:99:7f:e2:
                    a1:e4:29:61:de:72:05:f5:16:31:ab:97:0f:de:1d:
                    c4:79:50:a4:6f:8e:fb:f5:68:8b:50:85:c9:b7:e3:
                    22:e1:37:a5:63:f4:7d:44:49:c9:5d:41:02:3a:a1:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FE:3E:94:5E:7B:82:17:96:26:B7:FD:E9:50:12:4C:F8:1B:FB:92
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:22:41:f9:4e:53:18:ed:9e:39:02:5f:e3:51:eb:f3:84:3d:
         bc:16:96:bf:75:4f:89:38:b4:8e:15:cd:52:9d:6b:25:e9:57:
         99:38:24:68:2a:79:fe:cf:a7:de:af:21:3d:b0:92:54:ac:9d:
         6b:b9:10:8e:59:c4:ec:3e:e5:55:89:f2:3b:e5:86:81:8e:19:
         1a:bf:32:a9:a3:6f:c3:af:9d:cf:e1:c5:8c:99:7c:1b:62:35:
         37:c9:45:9e:60:c5:a6:3b:31:92:d6:ad:91:25:3b:c5:b6:72:
         6b:36:fc:30:ef:a4:85:aa:6f:79:5c:bf:4b:55:10:ff:44:fe:
         a5:66:4a:b2:22:8a:95:8c:00:5c:a8:fc:3a:fb:ac:a1:54:96:
         8e:34:03:7e:a4:95:5b:29:3c:6f:6a:25:67:05:b7:cc:b0:80:
         5f:d9:79:38:6c:f7:d8:0d:c2:87:0a:50:70:4b:7c:ac:3d:0c:
         af:a2:51:a0:be:cc:43:3c:e9:47:51:c1:f4:ef:7c:74:5f:b4:
         3d:02:82:01:08:a5:49:f4:ea:7a:ad:df:b8:91:2e:4a:13:96:
         82:2d:f4:c3:e7:09:34:a5:5d:82:2a:f7:99:3d:69:9b:27:e0:
         7b:49:de:e4:24:90:0f:a3:62:82:37:bb:01:61:3a:67:f0:5c:
         dd:92:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:53 2025 by rpki-client