Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa
File:                     3230302e31332e34322e302f32332d3233203d3e203532323735.roa (raw, json)
Hash identifier:          YDW+iUNp2br2Pm35/TRylkcRjqfQHdkkO104RE0kNAM=
Subject key identifier:   46:D5:84:3E:FF:89:CC:EB:D6:B5:BE:7E:FB:C4:24:E3:C2:07:8E:13
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       0F420CCDA3842FD051A7009CD79344F77DEEBF2E
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa
Signing time:             Tue 05 Mar 2024 17:41:38 +0000
ROA not before:           Tue 05 Mar 2024 17:36:38 +0000
ROA not after:            Tue 04 Mar 2025 17:41:38 +0000
asID:                     52275
IP address blocks:        200.13.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:42:0c:cd:a3:84:2f:d0:51:a7:00:9c:d7:93:44:f7:7d:ee:bf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:38 2024 GMT
            Not After : Mar  4 17:41:38 2025 GMT
        Subject: CN=46D5843EFF89CCEBD6B5BE7EFBC424E3C2078E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:7f:92:36:d1:97:b0:4f:b2:b8:7b:1d:44:
                    a8:d5:91:38:93:e2:46:5e:8c:9a:26:96:0e:f0:da:
                    2f:7d:91:80:bf:b5:4b:60:9a:04:d8:b2:48:c3:ab:
                    aa:62:41:d4:8b:29:d5:d6:da:76:f3:91:47:b4:a6:
                    b8:4b:d8:c9:5f:05:03:e5:33:0d:ee:25:18:5b:31:
                    d7:90:9b:af:86:84:32:8a:87:39:1c:9f:8b:65:31:
                    82:71:9a:27:ff:7c:88:36:7c:ea:01:bc:6a:4a:8a:
                    71:00:0a:76:5a:31:ff:96:ee:47:bd:25:23:4e:2b:
                    03:09:f0:95:18:bc:59:20:b4:d4:1c:79:0b:52:23:
                    6b:65:4d:34:d7:94:c1:23:56:86:87:a7:8f:21:7f:
                    ae:60:98:8a:1e:c2:53:a0:31:34:19:1f:13:bd:19:
                    ff:f0:22:c8:80:f6:49:71:4a:d6:61:fa:4d:8d:f5:
                    01:01:e1:f5:6b:c7:0f:23:e0:b0:a0:22:96:6a:fc:
                    89:6e:21:31:75:c9:27:82:e6:ac:6c:e9:75:77:f1:
                    50:c9:91:f6:01:47:1f:35:d9:b9:9f:46:cd:9e:0a:
                    f0:9d:71:13:71:b4:25:21:8d:8b:8f:09:77:e4:4f:
                    b4:46:3c:16:5c:f0:69:aa:c5:89:e8:78:bd:84:40:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D5:84:3E:FF:89:CC:EB:D6:B5:BE:7E:FB:C4:24:E3:C2:07:8E:13
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:32:44:66:cb:46:5e:f7:70:3c:73:f6:92:3c:79:1e:41:b1:
         30:7e:c3:68:44:66:7c:4c:ce:ac:71:df:4e:c9:e4:34:5c:fe:
         d9:3f:a1:0c:0d:32:9d:75:c2:93:05:b7:16:7d:60:d4:5e:77:
         0c:b1:d7:de:fc:25:d6:e3:2e:2b:bc:be:10:5e:8e:96:b4:22:
         66:88:3b:c6:a9:8e:0a:f7:dd:aa:4a:c8:97:8d:31:f7:3f:64:
         3a:95:4b:9f:f0:77:5d:d6:20:24:72:8c:6d:e8:64:b2:66:3d:
         e3:a9:b8:cb:b0:a2:66:a1:ba:e8:31:79:dc:b8:ad:cb:9e:08:
         9d:55:b0:cb:52:ef:41:b4:cc:60:fe:c4:3b:4f:1f:82:11:2b:
         1b:81:67:69:b4:2e:0a:24:fd:3f:18:59:66:46:f5:ef:61:2f:
         8c:24:c0:22:aa:34:86:a9:df:3f:84:39:f0:d1:14:85:99:92:
         b4:c7:1a:f7:fd:2d:d6:c6:02:4d:4a:5f:96:35:f5:2a:b6:92:
         9b:84:a6:0c:bf:ea:32:d7:67:64:3e:44:fb:18:7b:99:af:8e:
         8c:29:b6:16:09:93:53:e0:d5:37:4f:4f:b3:e4:d6:15:af:e6:
         5a:e7:cc:0a:20:7a:b4:37:1f:a0:9f:05:65:49:0e:6a:f4:aa:
         e6:b2:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org