Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa
File:                     3230302e31332e34322e302f32332d3233203d3e203532323735.roa (raw, json)
Hash identifier:          hKajImXsHWe0VOSNK5Xv/vSa9ql+7zm/E51cHJllOOU=
Subject key identifier:   D3:F1:2E:22:A1:98:F1:24:84:5C:8F:DF:91:41:D3:AD:07:CD:53:80
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       3ED03F6377CB8E398B6CD1E018737F49C87152FC
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa
Signing time:             Tue 04 Feb 2025 18:37:13 +0000
ROA not before:           Tue 04 Feb 2025 18:32:13 +0000
ROA not after:            Tue 03 Feb 2026 18:37:13 +0000
asID:                     52275
IP address blocks:        200.13.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d0:3f:63:77:cb:8e:39:8b:6c:d1:e0:18:73:7f:49:c8:71:52:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:13 2025 GMT
            Not After : Feb  3 18:37:13 2026 GMT
        Subject: CN=D3F12E22A198F124845C8FDF9141D3AD07CD5380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6d:58:40:66:3f:1d:4f:65:a0:5c:27:24:45:
                    a5:9d:cf:31:ba:b3:24:d1:53:a6:d6:60:16:70:0c:
                    77:63:51:92:0b:f8:bc:31:97:5d:da:e6:35:d8:c4:
                    c5:b4:55:5b:4b:18:7e:3b:ac:96:fb:a0:ac:65:d7:
                    28:75:43:1c:44:79:65:05:4f:8f:b6:cf:25:9e:48:
                    94:06:01:3f:a9:6e:4b:88:79:c9:5a:e5:da:69:64:
                    25:9a:44:22:06:fc:2b:60:7d:85:85:4f:30:d1:cb:
                    9a:35:86:d5:73:40:9f:f4:bb:0c:6e:bb:19:1f:d6:
                    b3:ee:b5:db:2a:24:2e:e1:7c:75:8f:8b:0e:31:35:
                    b1:5b:80:c3:9f:88:ee:e0:5d:20:28:01:db:f5:c6:
                    12:22:a5:e5:e1:81:9b:8b:4a:87:b7:eb:5b:fc:de:
                    be:84:e8:13:b6:1a:49:a4:da:90:7e:d7:07:d7:97:
                    12:b7:3d:5b:f4:87:08:dd:b9:7a:1d:32:61:3e:00:
                    7c:84:08:77:09:f0:a0:be:32:70:1d:c7:8a:1c:46:
                    5b:ba:11:f5:d7:48:b0:9e:b0:05:73:7a:c7:5f:2d:
                    f9:e6:07:50:2b:66:51:ac:64:7a:cf:34:f2:b3:4f:
                    20:97:7a:bc:70:f2:da:21:56:7d:89:14:7c:7a:1f:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F1:2E:22:A1:98:F1:24:84:5C:8F:DF:91:41:D3:AD:07:CD:53:80
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:77:68:32:ef:dc:75:c3:70:00:b5:83:a1:e5:f0:5e:39:
         95:eb:33:5f:33:ff:6d:4f:bc:cf:fb:60:34:d6:84:d4:14:cf:
         76:1e:30:e3:ef:eb:41:9b:2f:3a:32:df:25:f3:8d:87:c9:b7:
         06:5b:34:4f:e7:29:d0:05:bb:3b:62:f1:0c:1d:67:8e:97:41:
         da:5f:ee:35:f1:f5:9a:f3:9d:40:37:b6:6e:c3:67:87:07:c5:
         11:55:5f:7b:c5:ce:ff:d8:bc:ad:4f:c6:06:c8:7c:8f:52:2d:
         ee:c6:b9:89:99:07:81:d2:04:4d:22:63:65:6d:d0:43:c7:0c:
         7e:97:35:68:89:d5:2a:5d:92:99:dc:4e:4e:9d:29:11:b1:09:
         58:22:9d:3c:0b:4e:ec:d7:66:93:88:51:d6:04:90:1a:84:a7:
         b7:7c:80:3a:cb:2b:29:4a:c8:0e:f7:54:11:e4:1e:ca:25:86:
         5f:92:e0:52:73:6c:a6:54:36:5f:0a:15:cd:32:30:f3:ac:2f:
         36:37:51:78:f9:b8:02:0c:46:70:ed:4c:1a:19:c1:12:f9:db:
         eb:53:86:be:c6:90:2d:12:9b:d0:57:84:a1:e8:65:98:f7:d2:
         ea:46:78:d5:9d:c1:3a:37:5b:d8:77:4a:c2:69:96:5f:9b:2c:
         12:5d:20:2c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUPtA/Y3fLjjmLbNHgGHN/SchxUvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNTAyMDQxODMyMTNaFw0yNjAyMDMxODM3MTNaMDMxMTAvBgNV
BAMTKEQzRjEyRTIyQTE5OEYxMjQ4NDVDOEZERjkxNDFEM0FEMDdDRDUzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJbVhAZj8dT2WgXCckRaWdzzG6
syTRU6bWYBZwDHdjUZIL+Lwxl13a5jXYxMW0VVtLGH47rJb7oKxl1yh1QxxEeWUF
T4+2zyWeSJQGAT+pbkuIecla5dppZCWaRCIG/CtgfYWFTzDRy5o1htVzQJ/0uwxu
uxkf1rPutdsqJC7hfHWPiw4xNbFbgMOfiO7gXSAoAdv1xhIipeXhgZuLSoe361v8
3r6E6BO2Gkmk2pB+1wfXlxK3PVv0hwjduXodMmE+AHyECHcJ8KC+MnAdx4ocRlu6
EfXXSLCesAVzesdfLfnmB1ArZlGsZHrPNPKzTyCXerxw8tohVn2JFHx6H5pDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU0/EuIqGY8SSEXI/fkUHTrQfNU4AwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzAzMDJlMzEzMzJlMzQzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIDSowDQYJ
KoZIhvcNAQELBQADggEBAHibd2gy79x1w3AAtYOh5fBeOZXrM18z/21PvM/7YDTW
hNQUz3YeMOPv60GbLzoy3yXzjYfJtwZbNE/nKdAFuzti8QwdZ46XQdpf7jXx9Zrz
nUA3tm7DZ4cHxRFVX3vFzv/YvK1PxgbIfI9SLe7GuYmZB4HSBE0iY2Vt0EPHDH6X
NWiJ1SpdkpncTk6dKRGxCVginTwLTuzXZpOIUdYEkBqEp7d8gDrLKylKyA73VBHk
Hsolhl+S4FJzbKZUNl8KFc0yMPOsLzY3UXj5uAIMRnDtTBoZwRL52+tThr7GkC0S
m9BXhKHoZZj30upGeNWdwTo3W9h3SsJpll+bLBJdICw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:58:42 2025 by rpki-client