Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3139322e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          DrFAaIycJAhV2OCn2MMguMyYBL38v3Nvv9FSnwXcuXU=
Subject key identifier:   AE:7F:D4:37:BC:63:E7:A6:4E:DB:6A:7E:8A:F3:71:C2:7C:A2:9D:04
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       294B627F81AA5C0FCC3A040D8E840D9932870E74
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:00:53 +0000
ROA not before:           Tue 04 Feb 2025 19:55:53 +0000
ROA not after:            Tue 03 Feb 2026 20:00:53 +0000
asID:                     7418
IP address blocks:        200.90.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4b:62:7f:81:aa:5c:0f:cc:3a:04:0d:8e:84:0d:99:32:87:0e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:53 2025 GMT
            Not After : Feb  3 20:00:53 2026 GMT
        Subject: CN=AE7FD437BC63E7A64EDB6A7E8AF371C27CA29D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:95:56:ae:fc:88:5e:d9:85:4e:95:72:d6:
                    5b:38:2f:37:06:16:18:70:df:da:b6:42:dd:fb:61:
                    42:b4:5b:7d:c7:63:1e:d0:34:51:76:99:16:e3:bb:
                    76:94:18:a8:be:17:d9:19:7b:a0:40:bb:2f:ac:74:
                    66:c7:4b:8e:9e:34:7f:a3:1e:59:7d:52:15:6b:8b:
                    b7:42:1a:c6:73:ab:8d:48:71:08:21:0c:f5:54:ae:
                    5a:e2:1b:6b:5d:67:fa:d6:d7:07:d8:a9:5b:85:0e:
                    0d:03:03:a5:98:4b:89:83:6d:bb:b2:7d:8d:30:6e:
                    ac:b2:ec:68:74:fe:15:f7:c8:66:c2:bd:60:31:a1:
                    43:a3:3a:9c:18:c2:b8:7a:9c:8d:35:3a:f4:2a:d1:
                    af:a2:a2:2b:d1:46:1d:c2:19:3f:f0:85:96:23:9c:
                    bd:6d:91:ef:12:24:87:b2:6e:6d:30:97:05:e6:6d:
                    10:e3:12:8b:bb:12:84:c8:e5:e0:2c:6f:c4:de:f6:
                    f3:6b:57:d0:1a:ca:40:a9:c0:39:f8:c8:6e:25:66:
                    6e:5f:19:ec:b9:84:6b:c3:72:0a:4a:ac:58:62:32:
                    4b:b5:29:29:7c:c3:7f:09:b3:e6:e6:94:a0:55:f3:
                    f7:26:0c:91:f7:03:eb:2f:e5:fe:cc:cf:ee:a6:9c:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7F:D4:37:BC:63:E7:A6:4E:DB:6A:7E:8A:F3:71:C2:7C:A2:9D:04
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:89:29:cc:20:a7:34:73:08:c3:50:6d:9e:08:bc:a3:4a:
         bd:e9:07:d2:0c:74:ca:2e:53:6d:1a:e9:d1:eb:2c:6f:b7:7a:
         9f:cf:6a:8a:c3:74:ef:16:3d:e8:d6:31:fb:d0:5e:3e:12:bc:
         9a:ae:3c:dc:30:52:b3:7c:b3:e9:30:0d:c7:65:26:8a:e8:2f:
         d2:3b:64:f5:4a:1f:ac:71:63:f1:9c:36:67:3c:53:b1:f5:1f:
         00:1f:d6:46:42:f3:5f:86:ea:8a:5e:99:35:11:9c:3e:0f:15:
         d5:70:25:82:af:af:1f:9f:ca:b6:f0:48:0d:da:57:db:95:3b:
         50:b9:17:f1:a9:4b:a1:e9:d9:fe:76:56:44:e1:f1:a8:5e:74:
         6e:0d:81:8a:1f:15:8a:23:8f:46:9d:bb:4d:3b:30:4c:61:bb:
         df:52:06:15:1b:73:e2:0b:03:11:45:0c:f5:83:8d:37:16:92:
         43:1f:d5:88:0f:05:d1:ff:c0:16:c1:5f:6a:76:e2:0f:1d:55:
         df:75:88:dc:d3:06:9f:cd:68:60:54:c2:90:8f:ae:3c:55:f9:
         a3:88:5a:d2:4c:d5:13:cc:43:d5:70:95:91:23:51:9b:89:8e:
         b3:9a:16:fd:69:1e:eb:63:48:43:cf:09:ec:19:44:91:09:1b:
         a5:b2:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:32:29 2025 by rpki-client