Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3139322e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          SsZrHoFikEbIBMFmsd1xjXGCUy2iOuMmkX4gs0kW4mY=
Subject key identifier:   C7:04:F4:EF:4B:CA:37:8B:E4:06:EA:47:18:88:D1:CC:90:1E:73:2D
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       661074343694E79F920198DB2CA522D17178ACCF
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:56 +0000
ROA not before:           Tue 05 Mar 2024 18:11:56 +0000
ROA not after:            Tue 04 Mar 2025 18:16:56 +0000
asID:                     7418
IP address blocks:        200.90.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:10:74:34:36:94:e7:9f:92:01:98:db:2c:a5:22:d1:71:78:ac:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:56 2024 GMT
            Not After : Mar  4 18:16:56 2025 GMT
        Subject: CN=C704F4EF4BCA378BE406EA471888D1CC901E732D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:1f:9b:07:e4:97:3b:6a:f6:e6:4b:38:43:
                    31:c6:8f:6b:ec:ef:a0:e1:0f:5e:e4:a0:99:fd:9b:
                    24:34:d2:3c:34:78:56:c3:5e:30:d4:e7:24:8d:c2:
                    eb:65:f0:e3:a6:08:20:f0:26:ab:8a:dc:99:81:0f:
                    70:fc:c3:42:3f:c3:84:e5:62:c9:79:82:ac:ce:8d:
                    56:40:a9:95:8f:4a:8c:35:74:2b:82:42:5c:3d:77:
                    ea:18:e6:5e:5f:54:31:c5:45:60:ec:eb:4b:6f:3c:
                    f1:0e:be:4e:a8:e0:66:d5:f2:b5:c7:72:09:0c:62:
                    ce:1c:0b:f2:13:af:41:68:ed:5f:47:01:b6:b8:c9:
                    8c:9d:d8:28:59:a8:3c:61:05:82:8b:ed:3b:b5:13:
                    88:a9:1d:4b:8c:69:d0:ef:66:19:d1:de:29:15:8c:
                    ad:81:38:6f:7d:e9:b8:a4:df:13:f8:df:12:21:ac:
                    d0:e8:c5:7f:77:c4:cb:90:f1:15:a2:5b:8b:08:f7:
                    01:20:a0:23:9c:c9:b0:2a:65:fa:82:10:e0:cd:5e:
                    22:26:b8:4a:f0:68:cf:7d:dd:75:61:58:89:6e:92:
                    5f:16:88:de:52:f8:eb:82:d0:e2:e5:ed:b2:f8:bf:
                    30:dd:2f:5e:2f:e9:36:c0:fa:e3:67:8b:6a:8a:59:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:F4:EF:4B:CA:37:8B:E4:06:EA:47:18:88:D1:CC:90:1E:73:2D
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:63:ba:f8:38:7b:81:a3:e4:85:78:00:52:c3:e2:db:a9:
         19:ed:5e:a7:d3:fa:b1:1a:f9:f4:dd:ad:3b:9c:8d:0e:a9:b0:
         9a:85:2b:a5:d7:83:a8:8d:65:22:94:85:86:b9:e5:74:dc:05:
         c9:91:80:29:f2:7d:a7:da:8c:3d:a1:dc:34:79:4b:36:98:36:
         67:41:eb:2e:ee:01:c0:18:b5:25:ed:38:1d:c3:c1:aa:00:3c:
         45:45:e9:78:1a:33:07:04:da:62:3f:a5:9c:ba:51:b9:72:68:
         77:ad:a7:86:4b:ff:e6:ed:c8:f0:e9:65:58:02:49:f2:f9:6d:
         3f:03:a2:9b:d4:97:16:96:67:63:fb:db:18:fc:f3:10:8c:9f:
         3b:f0:a9:bd:7e:ea:b1:1a:09:a4:92:81:7c:79:ca:08:eb:f8:
         23:c2:db:20:f6:94:41:8c:0c:5b:f4:92:21:b5:bc:97:f3:39:
         f9:ce:5e:cf:42:c9:51:d7:42:88:cb:a1:b5:37:7b:dd:e7:4c:
         66:9c:0d:77:ae:b0:f6:2e:40:e5:b5:83:de:bf:14:70:ca:d5:
         83:bf:69:fe:e6:57:c5:23:0b:d5:f2:be:e7:2c:dd:83:fe:c2:
         fe:96:7f:eb:70:88:ce:fc:7e:d5:e9:c3:4a:b4:ba:74:e9:ea:
         c5:e5:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org