Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203130343831.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203130343831.roa (raw, json)
Hash identifier:          cn5qPfR1yAFfg+b4G8fEx6LmHuFZAazSrxq3F8Cx02s=
Subject key identifier:   D1:AD:DA:3A:48:B1:A3:55:6D:63:CE:3A:60:87:42:83:4C:EC:67:2B
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       5A52FD078F2B4DD22D81139F4432BFFB928C344A
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203130343831.roa
Signing time:             Tue 05 Mar 2024 17:41:29 +0000
ROA not before:           Tue 05 Mar 2024 17:36:29 +0000
ROA not after:            Tue 04 Mar 2025 17:41:29 +0000
asID:                     10481
IP address blocks:        200.13.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:52:fd:07:8f:2b:4d:d2:2d:81:13:9f:44:32:bf:fb:92:8c:34:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:29 2024 GMT
            Not After : Mar  4 17:41:29 2025 GMT
        Subject: CN=D1ADDA3A48B1A3556D63CE3A608742834CEC672B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:4c:f7:09:ff:91:31:35:d3:2f:b2:b1:eb:
                    1f:42:c0:90:9f:e3:df:b6:c6:26:c6:85:e9:72:40:
                    dc:cf:9b:13:d2:b1:4e:f7:0d:38:b6:c6:77:5f:01:
                    cd:a8:76:71:93:b0:c7:3a:00:e1:f1:db:93:9d:57:
                    1e:d0:5c:c5:a6:ef:9b:72:c0:ae:70:92:b6:2d:de:
                    f9:ce:87:cb:99:04:58:c8:7e:16:91:dd:e3:2f:c6:
                    b3:0c:ee:e0:0b:d4:90:ab:46:f3:32:86:2c:2c:c2:
                    62:0f:5e:09:68:02:ec:a3:49:50:a9:01:bd:9c:35:
                    53:48:98:5c:82:0a:1d:85:a9:51:95:1e:58:90:b3:
                    69:e0:00:b3:1e:02:40:4a:6f:57:be:24:43:60:20:
                    8c:da:a5:1f:ac:34:63:12:03:49:6a:55:11:0f:1e:
                    f0:d6:18:0b:34:c9:c2:9a:b6:62:cc:b4:1e:dc:51:
                    93:33:8f:28:ec:ef:60:57:b8:04:a7:7c:03:07:2e:
                    ae:f4:4a:9e:43:d7:13:95:24:c3:ac:a8:50:5e:ff:
                    c0:a2:10:a7:9e:5b:11:21:49:e7:02:8c:0f:ac:6f:
                    05:4b:3f:2b:98:2f:41:f9:55:4e:5d:d7:be:69:ea:
                    2f:89:71:2f:ac:84:08:cb:93:ea:d1:2b:d8:cb:d0:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AD:DA:3A:48:B1:A3:55:6D:63:CE:3A:60:87:42:83:4C:EC:67:2B
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:d8:83:c9:f5:8d:65:eb:40:f3:8b:18:4c:48:35:29:eb:
         af:fb:69:fb:4a:ce:8d:86:70:eb:0e:29:5a:51:c5:f7:a3:22:
         19:0c:81:08:53:e9:52:c2:04:80:de:ef:71:7e:59:29:a6:7f:
         00:f0:88:01:69:a7:2a:06:08:16:41:7e:ff:47:1f:49:ab:a0:
         bd:d9:f1:c3:52:ce:ef:ec:3c:a3:76:45:50:fc:c4:4c:87:90:
         ea:d0:3a:bd:1a:9a:19:fd:07:eb:8a:c6:16:88:c7:49:4b:8f:
         ad:23:21:88:df:ec:11:0c:2f:0f:0a:1a:3e:6f:07:34:82:50:
         98:46:31:16:7c:25:ed:9e:49:38:d7:5e:8a:03:f9:aa:10:67:
         48:b1:ac:14:bb:40:ae:8a:80:a9:04:98:98:c6:db:5b:d7:19:
         3d:b9:88:b4:b6:1e:4b:57:ea:b5:0d:0b:e1:72:57:1c:b1:a5:
         63:6e:06:b8:76:65:0c:ea:77:aa:08:50:28:50:6e:b7:68:32:
         31:91:b1:58:25:4f:b4:02:21:5b:d6:ad:08:8c:bb:54:a8:af:
         24:90:fe:66:eb:f5:d6:de:3e:e9:42:74:d6:e6:c2:2d:ee:4d:
         c9:a6:82:29:be:2f:ba:97:a5:a3:fd:54:de:bf:bf:1c:9e:f9:
         3e:35:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org