Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203131303134.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203131303134.roa (raw, json)
Hash identifier:          MkcmyLZxB5cNslWAeLP1MLJcJco1/O/XGSQ8A04tuls=
Subject key identifier:   90:4E:7F:DA:C4:EA:A3:EC:68:53:8A:47:E0:23:A6:0E:A3:8B:51:76
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       17F1AFA69BFD5E34D55E41EA6466D082CFBD5583
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:37:06 +0000
ROA not before:           Tue 04 Feb 2025 18:32:06 +0000
ROA not after:            Tue 03 Feb 2026 18:37:06 +0000
asID:                     11014
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f1:af:a6:9b:fd:5e:34:d5:5e:41:ea:64:66:d0:82:cf:bd:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:06 2025 GMT
            Not After : Feb  3 18:37:06 2026 GMT
        Subject: CN=904E7FDAC4EAA3EC68538A47E023A60EA38B5176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:f3:dd:82:15:e2:2a:1d:30:65:81:1d:75:
                    6f:66:54:e1:ee:14:c2:95:43:a4:ac:e1:23:bd:b2:
                    d0:dd:9c:28:64:c9:ea:56:d3:6e:47:7b:e9:f5:99:
                    ed:98:94:85:1f:01:8a:f9:62:5d:b0:f5:c2:48:8e:
                    8a:b2:17:bd:87:88:c1:fd:65:20:96:01:78:1b:bc:
                    cc:1f:82:70:ea:4a:38:b8:7d:69:77:d6:59:33:64:
                    f2:67:22:95:c6:eb:64:c2:f4:22:fc:f2:87:ea:9e:
                    e9:6f:88:b8:61:c1:06:85:06:f5:82:70:60:cf:bd:
                    5b:1e:1c:10:99:4e:ca:83:be:b6:0e:1f:e6:ee:94:
                    53:9b:af:7e:61:3f:86:93:05:7a:2e:ba:cf:3f:f1:
                    4d:b6:76:23:92:53:50:7a:3a:8d:de:ec:e3:34:09:
                    6d:a6:88:63:24:c3:26:f7:56:7f:29:7c:0c:72:42:
                    7b:03:85:e0:b3:bf:8e:ba:70:50:55:1f:4a:4c:ec:
                    2c:92:21:a0:9a:b5:b5:4d:30:74:1b:5a:dd:b8:35:
                    d0:ab:37:a4:0f:32:aa:23:83:26:08:76:22:09:db:
                    c9:99:88:2b:d2:4e:b8:15:76:a5:32:05:84:dd:88:
                    24:34:4a:a0:e5:b2:56:9f:4a:5a:06:e9:52:ca:a4:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:7F:DA:C4:EA:A3:EC:68:53:8A:47:E0:23:A6:0E:A3:8B:51:76
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:1b:1b:ef:3c:69:9e:a9:2a:92:4a:76:b7:b3:ab:4c:0e:
         62:af:22:17:48:44:25:5f:f1:20:3f:ee:6f:46:c9:58:12:40:
         89:00:2d:b2:94:32:29:2c:ad:76:9e:b2:b1:70:e9:ef:18:59:
         52:fd:aa:ef:f4:ba:85:f0:b8:5f:54:14:2a:a5:c2:36:33:b0:
         5e:5c:be:bd:24:67:68:a1:06:a7:37:fa:5f:1b:15:8e:d7:3f:
         98:7c:28:2d:ef:b3:c5:c1:90:da:12:ed:ff:bf:4a:13:fe:5a:
         d2:9d:60:7b:08:14:ea:64:e7:6b:aa:ef:4b:5e:40:b5:dc:24:
         c0:31:e5:7b:1e:11:98:cd:06:59:90:6a:6f:9f:6e:46:e6:b0:
         41:a9:c1:37:c1:53:59:13:9b:d5:db:46:99:fd:e0:86:74:cb:
         94:aa:c8:ec:c6:9e:a8:d7:31:9a:76:32:d3:00:fa:be:ba:d5:
         d1:ee:35:ab:7f:41:58:73:76:f4:76:f3:e6:ca:14:fa:1f:8f:
         6b:20:3b:5c:42:0d:bd:35:79:7f:ab:ce:ae:97:12:76:03:f8:
         6e:e6:1b:5a:d8:4c:3d:ab:49:92:cb:f9:b4:45:72:68:99:89:
         49:89:a3:79:68:d1:62:ec:d9:21:09:24:93:b4:ed:59:cf:d5:
         35:1b:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:41 2025 by rpki-client