Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e2037333033.roa
File:                     3230302e31332e34322e302f32332d3234203d3e2037333033.roa (raw, json)
Hash identifier:          l3V+EOxIeJYZrH/jUZ59LQ7661dTWkuWWSgnkiKBjM8=
Subject key identifier:   C9:63:E9:E1:AF:56:AE:DF:C9:25:FE:2A:0B:CE:0E:49:3D:24:5C:46
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       04FEF822C84F6A9C897809C3307E7EF3B5B5A3BE
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e2037333033.roa
Signing time:             Tue 04 Feb 2025 18:37:10 +0000
ROA not before:           Tue 04 Feb 2025 18:32:10 +0000
ROA not after:            Tue 03 Feb 2026 18:37:10 +0000
asID:                     7303
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fe:f8:22:c8:4f:6a:9c:89:78:09:c3:30:7e:7e:f3:b5:b5:a3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:10 2025 GMT
            Not After : Feb  3 18:37:10 2026 GMT
        Subject: CN=C963E9E1AF56AEDFC925FE2A0BCE0E493D245C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:02:bb:52:f2:0c:12:a5:93:72:71:bd:ae:
                    60:d6:25:8a:ed:7d:af:92:8b:7c:5d:66:c4:6f:0a:
                    c6:31:50:43:17:f1:59:2a:2b:87:73:2c:94:cd:47:
                    4f:11:70:b7:68:00:16:f5:7c:e4:8c:67:77:ec:02:
                    77:43:3f:26:7d:e2:e2:c5:bd:68:02:4b:19:1d:28:
                    1e:50:1e:b4:8e:c6:4f:05:7a:54:95:4f:91:3a:30:
                    a7:8a:56:d5:38:bc:36:b2:73:b0:ac:b8:1c:87:32:
                    66:63:b8:57:98:11:b7:7e:55:fb:56:93:ae:d4:4c:
                    d2:0d:c4:77:96:ba:19:d9:99:79:5f:30:e9:dd:87:
                    45:43:f4:c9:4c:78:93:81:34:d5:31:17:46:fd:7b:
                    f2:96:3d:fd:34:b9:cd:b6:88:8f:37:fb:3f:f1:0f:
                    25:90:04:47:38:b7:b3:0c:8f:e7:06:29:34:95:f4:
                    20:de:66:93:df:c4:74:9b:ec:9c:53:cc:4d:35:6f:
                    0b:c5:77:e9:4c:12:89:90:0a:0a:fb:23:bb:1b:04:
                    13:63:5d:ab:41:19:30:65:2a:24:04:2e:af:46:8e:
                    f7:f6:71:00:9e:e3:ac:04:89:68:3a:93:2e:01:95:
                    e7:d7:80:04:49:1f:41:4b:5d:1c:b2:d2:8a:bc:a2:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:E9:E1:AF:56:AE:DF:C9:25:FE:2A:0B:CE:0E:49:3D:24:5C:46
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:4c:81:51:08:06:fc:e4:12:39:d4:aa:09:cc:fe:50:d5:
         4b:1b:f7:5f:67:d2:27:df:32:29:ee:ba:a9:ef:c1:dd:88:06:
         b3:84:9a:ff:8a:d9:99:97:70:e1:31:cc:e7:ef:01:16:3c:2d:
         4a:bc:e5:c8:db:55:aa:fe:0a:51:20:a2:8e:58:84:ee:ad:c1:
         a4:70:7b:ed:39:6c:28:24:24:58:c3:48:8d:cd:36:99:dc:3e:
         56:4c:44:1d:69:f8:af:07:4d:2a:01:50:ad:3c:ab:dd:f2:f3:
         a5:b8:71:cb:a2:79:b3:8d:ef:55:d8:1e:d6:ff:1c:63:6f:b3:
         dc:9a:c5:8a:92:2e:ce:1a:1b:c3:21:28:57:e2:3d:73:85:68:
         15:14:a5:fe:6a:d5:56:c7:15:7f:92:c6:3c:0a:c3:d3:17:8e:
         16:d2:ff:8c:c2:da:1e:9d:d9:06:f3:6b:e2:41:2c:0e:e7:09:
         db:6b:cf:60:de:70:6e:11:e1:11:2c:90:c8:19:95:53:02:93:
         dc:db:8d:0e:18:c7:a3:7a:3f:4e:53:4a:b0:3e:9c:e4:2c:08:
         c6:2e:7c:ff:86:2f:36:96:34:29:9e:c6:23:90:60:69:55:86:
         a4:f7:9a:46:16:01:c8:2d:4b:ad:5f:fb:a3:db:de:86:a0:40:
         c3:a3:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:28 2025 by rpki-client