Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203135313639.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203135313639.roa (raw, json)
Hash identifier:          K6CxkOU348MgedamqhpJ/s0Sp9LuZK09BGKn0mgBrAk=
Subject key identifier:   8B:7A:0A:2E:53:6F:B0:F7:12:02:6F:38:D2:1F:2E:6A:EC:25:92:1C
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       33DE4CF358C7F38D51942A28E128AFF553036B31
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203135313639.roa
Signing time:             Tue 04 Feb 2025 18:37:08 +0000
ROA not before:           Tue 04 Feb 2025 18:32:08 +0000
ROA not after:            Tue 03 Feb 2026 18:37:08 +0000
asID:                     15169
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:de:4c:f3:58:c7:f3:8d:51:94:2a:28:e1:28:af:f5:53:03:6b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:08 2025 GMT
            Not After : Feb  3 18:37:08 2026 GMT
        Subject: CN=8B7A0A2E536FB0F712026F38D21F2E6AEC25921C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:7c:b7:c7:ab:d3:ef:fd:e2:a0:e5:ec:f4:
                    79:a9:8f:e5:77:ef:e0:4e:a1:4d:3a:d3:97:09:03:
                    a2:6d:2c:7b:ef:0e:bf:90:ba:46:7c:b4:75:7d:25:
                    f4:17:53:06:09:96:de:f4:f1:73:32:00:78:f4:0a:
                    42:19:46:32:cc:f3:24:20:b5:fd:70:f1:28:d6:33:
                    f6:0e:84:b8:6e:02:c3:62:6b:5e:11:d7:fc:b2:e2:
                    46:4e:83:32:73:8f:5a:ff:63:53:82:8d:64:9b:b3:
                    49:38:70:98:76:9b:57:d9:fe:c8:aa:ac:f9:04:8f:
                    60:d6:60:fa:3a:5c:28:4a:9c:21:b0:af:5f:e0:46:
                    54:bd:25:ee:7f:3f:0d:b7:c5:59:25:90:f7:72:63:
                    ab:dc:ef:49:83:82:f0:65:b0:e2:29:52:88:4a:ce:
                    2a:f5:59:20:f7:86:df:06:bd:52:ae:31:e3:e8:6a:
                    66:27:c9:34:a8:ca:50:71:23:3a:4c:fc:20:f8:3d:
                    64:72:ab:3d:0b:26:8f:5b:f2:f3:a1:c7:b6:39:86:
                    6b:e1:de:a1:7f:9d:38:d5:65:64:f8:55:9e:4a:14:
                    7a:6f:42:47:72:47:96:c8:c7:6b:20:0e:cb:73:e4:
                    3a:97:3c:ee:f2:e9:e5:49:d9:b8:53:78:de:28:65:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:0A:2E:53:6F:B0:F7:12:02:6F:38:D2:1F:2E:6A:EC:25:92:1C
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:79:54:e0:60:ed:77:d3:cf:06:82:f2:32:59:87:b2:67:33:
         d3:d9:5d:27:89:5b:24:a2:c2:d2:ff:39:17:e7:87:c4:5f:90:
         fb:7f:5a:43:9a:d2:e4:40:dc:a6:85:f0:a6:45:13:17:51:f0:
         07:e2:f9:dc:1f:09:c6:f4:29:bd:20:35:d5:2d:86:5c:2e:1e:
         7a:0a:3a:cf:77:b0:b5:b5:36:1c:14:da:de:be:13:04:a3:e4:
         40:c7:0c:14:83:72:da:28:6f:4a:c0:29:e6:99:52:1c:7d:07:
         c8:80:db:1d:2f:0d:33:36:de:c0:46:4e:74:fd:4f:77:db:8f:
         54:57:e1:a9:5e:e2:c5:91:17:3f:99:e0:24:d5:5e:d4:fe:d1:
         35:d0:87:13:a2:90:a3:e2:63:dc:9b:9a:b3:8a:44:c0:b2:23:
         97:8a:3a:dd:d1:9f:fb:b3:00:1a:5f:d1:00:53:58:99:b8:d5:
         2f:ec:7b:fe:52:45:e5:49:f8:45:33:26:fb:df:65:d6:eb:e1:
         e2:c5:fe:f9:96:97:e0:d3:3c:df:81:fd:a3:d3:04:f0:46:7f:
         6b:3a:62:33:53:7a:67:6d:93:16:07:ee:bb:d8:ea:a9:72:0a:
         e9:d7:dc:78:ab:f0:86:64:2d:cf:e8:05:ae:15:87:e1:0f:9d:
         9f:85:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:34 2025 by rpki-client