Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e20323131383636.roa
File:                     3230302e31332e34322e302f32332d3234203d3e20323131383636.roa (raw, json)
Hash identifier:          Cl2aqNQWRKsbGHGQDu/vUouFhe9cl4ZXUpdTMUKbzTU=
Subject key identifier:   8C:F6:C4:EE:9B:47:1F:61:6A:0B:E5:68:E5:4C:05:5B:34:F5:5B:26
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       2158809DFC48D140872B8339EA4E923E36D89CC0
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e20323131383636.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     211866
IP address blocks:        200.13.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:58:80:9d:fc:48:d1:40:87:2b:83:39:ea:4e:92:3e:36:d8:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=8CF6C4EE9B471F616A0BE568E54C055B34F55B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ac:bb:0d:0c:08:4b:21:0f:32:83:c3:15:7b:
                    65:03:85:9a:be:89:98:7b:f4:ee:8a:69:78:04:1b:
                    d2:9b:a4:93:f1:fa:81:34:b9:30:1f:e2:c9:94:a1:
                    58:38:8a:0b:0f:ed:51:63:82:1f:7e:4f:65:f6:a2:
                    ea:f1:7d:3f:82:2c:69:36:b0:ee:d7:ca:54:71:f6:
                    b0:65:1e:75:a4:c8:22:55:03:ca:ad:2a:24:98:4e:
                    54:52:fd:63:1d:1f:14:6f:71:70:26:5d:44:1d:5a:
                    a3:0c:8f:e3:7a:90:00:b9:32:0f:e4:42:b9:35:af:
                    20:c8:f0:fc:dd:69:04:80:ec:39:76:a1:05:4b:c0:
                    aa:5c:60:ba:dc:72:c8:6b:c2:1e:1a:84:ff:43:71:
                    46:6b:27:e0:92:29:f9:97:be:1b:c4:2a:e0:32:60:
                    d1:87:4e:a4:76:d0:3c:0d:eb:25:cd:ab:4f:bf:f3:
                    ea:e5:03:cf:35:14:cc:46:9b:37:a2:4e:05:6a:c6:
                    c6:cc:bd:e2:3d:85:41:6b:5f:5b:d3:1a:86:ba:cc:
                    43:03:0f:54:d1:9d:15:b3:c2:79:a1:0e:fd:05:d4:
                    f0:9c:79:35:0a:79:82:25:e9:57:19:91:c6:67:13:
                    cb:a9:a9:18:1b:88:31:3b:75:55:08:b5:6f:64:53:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F6:C4:EE:9B:47:1F:61:6A:0B:E5:68:E5:4C:05:5B:34:F5:5B:26
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e20323131383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:7e:09:61:f5:87:69:92:e2:94:f5:72:20:72:b6:0c:94:f9:
         76:cd:ca:67:8f:3c:5e:8b:54:64:e3:2d:bd:62:23:14:7b:07:
         55:90:3e:7b:65:de:e6:ce:5e:64:fc:24:18:38:cc:88:59:e7:
         11:e8:49:fe:2c:fc:7f:3c:04:7d:ec:7b:df:a6:4c:89:58:d9:
         19:90:4f:57:b1:26:bf:2c:1c:98:6e:65:40:b7:9f:10:68:01:
         5f:a2:e1:3c:ee:a2:bc:8e:a7:1f:02:30:d4:a1:9b:d7:ce:be:
         93:a2:38:ff:b4:98:c3:b8:d6:00:a9:b6:74:ce:e5:a2:c5:c3:
         a7:d3:a2:8d:aa:69:50:d3:15:4b:98:42:14:16:58:9a:aa:93:
         ad:af:08:e7:7e:f6:84:59:3b:cb:33:1c:d9:4f:9f:70:cb:67:
         ff:71:7a:86:6b:9f:2e:de:a0:d2:ad:41:e8:74:4f:21:6c:22:
         e4:e8:ac:97:74:df:36:0a:b0:f5:f3:04:34:54:83:d3:b9:08:
         e1:8d:f6:47:a1:95:1d:46:71:c4:de:6f:56:01:1e:61:96:ee:
         a8:48:56:54:8f:d0:dc:9d:54:fb:25:a8:e9:ae:0d:9c:ab:7b:
         8f:b5:bb:84:d0:b7:aa:3d:48:11:84:25:d7:2c:5d:41:01:4e:
         fd:9b:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org