Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e2033353439.roa
File:                     3230302e31332e34322e302f32332d3233203d3e2033353439.roa (raw, json)
Hash identifier:          3C9Z7x0Z97DRlnmJqrZJC/zo7rJAvgynoB52ZRgWWvY=
Subject key identifier:   40:6B:B4:01:26:A7:09:A9:D0:32:CE:7E:75:E3:F7:50:94:EB:86:AC
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       1617CA7C94C24B9ADC4EAB119DCAF02EAC14A85B
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:37:07 +0000
ROA not before:           Tue 04 Feb 2025 18:32:07 +0000
ROA not after:            Tue 03 Feb 2026 18:37:07 +0000
asID:                     3549
IP address blocks:        200.13.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 08:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:ca:7c:94:c2:4b:9a:dc:4e:ab:11:9d:ca:f0:2e:ac:14:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:07 2025 GMT
            Not After : Feb  3 18:37:07 2026 GMT
        Subject: CN=406BB40126A709A9D032CE7E75E3F75094EB86AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:1d:1f:e0:97:38:7e:4e:64:61:e1:cb:4e:
                    55:66:01:d5:64:20:42:83:c1:34:d0:d3:6e:d0:af:
                    8e:45:10:3a:f5:1c:d0:ef:cc:e7:47:33:ff:f4:83:
                    b0:d8:31:b4:73:bd:a9:73:d8:23:0e:4a:7d:90:01:
                    27:e5:96:af:76:24:d5:79:dc:3f:f4:07:16:27:5c:
                    91:c7:02:17:20:2d:3d:ef:9e:7a:aa:b8:70:8c:5d:
                    98:40:65:31:7d:b1:6c:cb:68:03:88:c1:db:b9:ec:
                    0a:56:b4:06:f0:9f:ed:a8:63:1f:b5:d3:a8:75:87:
                    c3:e0:96:26:f4:78:e1:57:47:43:b8:28:13:af:d9:
                    f5:aa:8e:c2:0d:c6:cd:6c:e2:96:9f:bd:8c:18:f7:
                    a1:46:91:4e:09:36:49:95:95:a1:14:26:fb:79:d5:
                    e6:84:2c:7f:a6:b4:85:ff:59:7e:0c:e8:7d:a5:1f:
                    69:5d:30:0f:1c:66:b2:68:d7:89:f1:6a:ac:87:81:
                    9d:a9:fb:f7:b9:3c:52:2d:fd:d1:5b:2b:63:d0:45:
                    2e:94:f0:a4:78:0c:c9:77:51:47:70:fb:82:62:cd:
                    33:27:47:64:76:78:7f:fa:79:34:ab:2e:42:f2:9e:
                    bb:8d:c1:5f:8b:d4:85:85:76:c1:a6:9b:da:e9:05:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6B:B4:01:26:A7:09:A9:D0:32:CE:7E:75:E3:F7:50:94:EB:86:AC
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b2:9c:12:f4:66:4a:e8:4b:41:80:0e:99:11:d1:a2:63:49:
         84:41:9f:14:31:86:a0:8e:41:1a:aa:1f:b3:84:3c:dd:1d:e8:
         ab:6f:d5:1c:e3:47:0c:23:4c:33:5d:3a:f0:49:a7:0c:2a:95:
         d3:1e:57:49:fb:b8:7f:cc:47:2b:79:39:b3:da:9b:bd:ce:64:
         01:25:75:3a:7c:80:02:e1:70:d1:2b:13:69:76:21:78:80:fa:
         88:15:bb:c1:e6:6e:e7:ca:3a:58:26:9f:77:d9:09:e0:8c:ad:
         91:f4:8b:26:80:dc:3f:b6:65:57:45:71:48:b0:9c:7b:41:e5:
         ed:1e:e1:47:47:aa:6d:d8:1d:a3:4b:9a:90:76:7f:a1:1a:e4:
         dd:ae:a6:8a:ac:38:43:e3:94:08:20:6b:a1:77:0f:71:ea:6d:
         a2:ac:fe:22:fb:42:ce:00:00:41:ad:dd:92:47:7d:89:5d:37:
         e7:67:9f:88:0f:82:61:04:08:fa:5d:e1:a5:51:d2:b2:24:3f:
         4c:14:22:17:21:0d:65:0b:49:ef:59:8f:a6:7a:10:5c:3e:0b:
         da:7f:69:db:1d:8a:ce:da:30:47:e5:81:6a:1c:47:18:64:0c:
         84:71:36:00:0f:80:ec:11:25:1f:94:4c:36:5a:43:16:7d:1a:
         38:14:11:01
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUFhfKfJTCS5rcTqsRncrwLqwUqFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNTAyMDQxODMyMDdaFw0yNjAyMDMxODM3MDdaMDMxMTAvBgNV
BAMTKDQwNkJCNDAxMjZBNzA5QTlEMDMyQ0U3RTc1RTNGNzUwOTRFQjg2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXB0f4Jc4fk5kYeHLTlVmAdVk
IEKDwTTQ027Qr45FEDr1HNDvzOdHM//0g7DYMbRzvalz2CMOSn2QASfllq92JNV5
3D/0BxYnXJHHAhcgLT3vnnqquHCMXZhAZTF9sWzLaAOIwdu57ApWtAbwn+2oYx+1
06h1h8Pglib0eOFXR0O4KBOv2fWqjsINxs1s4pafvYwY96FGkU4JNkmVlaEUJvt5
1eaELH+mtIX/WX4M6H2lH2ldMA8cZrJo14nxaqyHgZ2p+/e5PFIt/dFbK2PQRS6U
8KR4DMl3UUdw+4JizTMnR2R2eH/6eTSrLkLynruNwV+L1IWFdsGmm9rpBbyFAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUQGu0ASanCanQMs5+deP3UJTrhqwwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzAzMDJlMzEzMzJlMzQzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByA0qMA0GCSqG
SIb3DQEBCwUAA4IBAQBXspwS9GZK6EtBgA6ZEdGiY0mEQZ8UMYagjkEaqh+zhDzd
Heirb9Uc40cMI0wzXTrwSacMKpXTHldJ+7h/zEcreTmz2pu9zmQBJXU6fIAC4XDR
KxNpdiF4gPqIFbvB5m7nyjpYJp932QngjK2R9IsmgNw/tmVXRXFIsJx7QeXtHuFH
R6pt2B2jS5qQdn+hGuTdrqaKrDhD45QIIGuhdw9x6m2irP4i+0LOAABBrd2SR32J
XTfnZ5+ID4JhBAj6XeGlUdKyJD9MFCIXIQ1lC0nvWY+mehBcPgvaf2nbHYrO2jBH
5YFqHEcYZAyEcTYAD4DsESUflEw2WkMWfRo4FBEB
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:15 2025 by rpki-client