Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203232393237.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203232393237.roa (raw, json)
Hash identifier:          Zz7uMPTCc1FqukA+bBm4Z/xjVqcSd94C53N69qxndsc=
Subject key identifier:   F7:65:58:E7:A3:92:2E:D0:3C:79:23:EF:7E:53:15:C2:0B:ED:81:D9
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       2CAC160ED66A6C5836D2C23C74336A9D1EE56A76
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 18:37:18 +0000
ROA not before:           Tue 04 Feb 2025 18:32:18 +0000
ROA not after:            Tue 03 Feb 2026 18:37:18 +0000
asID:                     22927
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ac:16:0e:d6:6a:6c:58:36:d2:c2:3c:74:33:6a:9d:1e:e5:6a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:18 2025 GMT
            Not After : Feb  3 18:37:18 2026 GMT
        Subject: CN=F76558E7A3922ED03C7923EF7E5315C20BED81D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:1d:61:ba:b0:01:4c:28:dd:8c:f6:87:27:
                    89:c9:7e:92:24:b1:ab:17:fd:94:5e:c4:85:8b:94:
                    b7:7a:b7:06:88:f6:e3:87:ec:5e:27:37:00:fd:49:
                    18:63:e3:d4:e5:62:c2:fc:13:f4:aa:fe:09:66:67:
                    0e:14:ed:df:9f:3f:40:06:3f:57:fb:84:be:8c:fe:
                    60:ee:05:ba:d3:62:69:b9:19:85:bc:d4:bb:07:28:
                    31:60:55:e5:48:f6:e4:a1:12:f1:c3:f5:26:5b:c0:
                    e5:50:4e:96:47:c9:32:f2:7b:7d:e6:92:e6:b8:b4:
                    b0:a2:d9:d9:6d:ea:5d:32:70:9d:11:bf:3d:0a:da:
                    48:b3:bf:40:c3:0e:fd:d0:6d:62:ed:8e:a6:8c:ee:
                    56:1e:bb:cb:44:95:31:79:2f:48:86:9e:5b:36:86:
                    a0:5e:bd:d9:02:8e:6a:90:9b:7b:8d:09:a6:60:00:
                    08:75:3c:32:21:3a:0d:8f:4c:bb:b4:4a:e7:37:2a:
                    85:5f:a6:d3:eb:12:a0:b0:24:f1:35:a0:0a:ea:12:
                    47:45:24:6e:38:4c:d1:ad:3b:04:6a:9e:d5:b8:df:
                    91:6f:0c:ab:93:ce:61:07:79:d0:4c:13:57:c0:a2:
                    49:f1:07:4c:f8:b3:b8:39:12:53:f0:37:21:36:ed:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:65:58:E7:A3:92:2E:D0:3C:79:23:EF:7E:53:15:C2:0B:ED:81:D9
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:98:06:89:30:e5:17:23:50:16:c7:53:2a:f5:d4:f6:6b:1b:
         54:90:dd:cf:4c:12:4c:2d:58:d4:55:50:56:82:df:60:b6:f7:
         57:2a:31:f4:b3:a3:2d:a3:ce:7f:ba:06:37:6b:ee:7f:68:26:
         7f:f7:a0:ac:7f:63:93:7c:c7:87:cd:a9:e8:13:db:73:a5:77:
         99:2e:31:cd:a3:bf:df:fd:d1:76:70:95:36:38:43:9b:3d:ac:
         a2:78:1d:fd:d1:fc:0e:26:96:3f:73:41:b8:73:89:30:41:ea:
         97:90:f0:af:33:17:92:e7:8e:46:5f:9d:43:90:33:31:a4:92:
         64:da:32:2d:67:36:a8:67:f7:35:37:75:d1:ff:b2:bd:76:a0:
         60:84:64:c6:7a:0e:15:8f:f7:6e:7c:ce:cd:75:36:25:a1:f4:
         c2:c3:2c:90:b6:2f:2b:fd:4e:ba:62:1a:5d:51:1a:c5:f6:e6:
         91:ac:e0:36:f0:a2:bd:d7:08:7f:18:53:5a:76:54:a3:2c:f0:
         77:89:2b:45:97:d6:3e:b0:b0:bd:6b:75:3d:d4:76:94:b4:fb:
         53:9d:89:58:3e:5a:71:1b:09:bd:13:1f:fe:f2:07:15:4a:f1:
         a3:76:a2:5a:a2:60:49:f9:e0:31:9d:e8:ef:73:eb:49:c2:74:
         08:7b:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client