Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203131303538.roa
File:                     3230302e31332e34322e302f32342d3234203d3e203131303538.roa (raw, json)
Hash identifier:          JZ2fTFCYq6Kvd0yZoe0Q5zE568d4ZqhfOSEBBncgFlg=
Subject key identifier:   0A:44:6E:CC:93:D8:30:61:BA:5E:72:38:D4:A1:20:ED:07:6D:A1:E2
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       79E318FDDC54BA869BF75CDC2B9D6872B6FE150A
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203131303538.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     11058
IP address blocks:        200.13.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e3:18:fd:dc:54:ba:86:9b:f7:5c:dc:2b:9d:68:72:b6:fe:15:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=0A446ECC93D83061BA5E7238D4A120ED076DA1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:4c:fc:9a:bf:02:29:00:0f:8d:6d:ba:78:
                    9c:e6:9e:c8:50:67:75:2c:7a:c2:5e:0e:25:48:ee:
                    89:e2:0c:51:92:2f:c7:17:f0:70:c7:6c:d1:67:4e:
                    56:ef:be:dd:24:60:d7:ad:4d:a9:bb:52:fe:c5:88:
                    32:c2:56:46:91:f3:3d:1c:c8:87:8a:ef:c1:1e:2a:
                    c2:55:46:a1:e4:bc:2c:d1:31:76:70:2f:c5:41:23:
                    d8:5f:60:15:13:da:3d:be:5e:bc:6f:81:d3:47:fb:
                    bd:b5:cc:64:fb:0c:5a:b0:8f:7b:ff:8d:96:03:08:
                    b1:34:d5:51:1e:4e:77:63:b7:98:53:29:bb:f7:17:
                    9f:57:a3:93:61:ad:45:74:32:29:3b:24:3d:e5:d0:
                    ff:b4:e4:b7:b6:8c:5b:9a:8c:98:95:30:18:6b:15:
                    ed:66:63:48:7f:14:0c:fc:aa:4d:f3:b2:80:31:15:
                    e9:0b:bb:80:16:73:4f:89:cf:35:f5:8d:4b:00:e2:
                    f1:5c:d0:79:96:56:00:1b:af:7f:a0:4d:c3:66:d2:
                    ab:55:9c:a6:1f:e6:1a:83:bb:38:ab:d0:4e:7d:1e:
                    1c:42:65:89:6f:c7:c3:01:f1:f5:dc:e8:00:e1:43:
                    4b:94:c2:f8:d2:6d:fe:ef:8e:19:28:31:6c:24:de:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:44:6E:CC:93:D8:30:61:BA:5E:72:38:D4:A1:20:ED:07:6D:A1:E2
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203131303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a5:0e:65:b2:eb:5a:14:fd:e4:76:20:4b:69:a7:14:92:bf:
         b7:4a:4a:a3:89:39:b8:0a:f5:3b:25:5d:cd:d3:fe:6f:4c:2a:
         7a:a3:05:97:14:22:71:25:69:c0:3d:6f:7d:f9:51:53:07:b2:
         43:b7:f4:92:14:c7:2a:67:88:66:0a:f2:00:3e:25:77:23:73:
         ba:7c:08:0b:fc:38:c2:1e:c9:4f:f3:e1:4d:d9:4d:3a:6f:a1:
         91:6e:a7:ca:92:1e:f6:83:98:09:1b:2a:d3:e2:b0:89:51:d7:
         64:3e:ef:0a:0c:7b:45:73:7e:df:bf:53:a1:83:64:1b:e1:0c:
         fe:a6:d7:ad:3a:a2:a3:fc:ef:bc:1d:b9:8a:3d:28:6e:1f:ac:
         6f:1e:48:aa:0f:b1:12:74:f7:4e:7b:64:88:ec:06:93:85:77:
         83:f1:8d:a6:d2:ca:60:18:1a:c8:a2:44:c1:b6:83:c4:b7:49:
         1d:e0:ec:a5:80:9b:53:52:81:e0:63:f2:c5:93:52:f8:00:8d:
         6f:28:b2:2e:4d:0a:1f:64:e9:58:2d:fc:8c:c1:e9:d3:8f:40:
         16:c0:14:7b:32:a5:56:da:c0:4b:62:b9:0c:5c:43:bf:81:c5:
         64:f5:66:03:a0:9a:1c:a1:0e:d5:0e:cd:8c:93:fb:98:df:90:
         ee:2b:55:b9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeeMY/dxUuoab91zcK51ocrb+FQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNDAzMDUxNzM2MjhaFw0yNTAzMDQxNzQxMjhaMDMxMTAvBgNV
BAMTKDBBNDQ2RUNDOTNEODMwNjFCQTVFNzIzOEQ0QTEyMEVEMDc2REExRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRuUz8mr8CKQAPjW26eJzmnshQ
Z3UsesJeDiVI7oniDFGSL8cX8HDHbNFnTlbvvt0kYNetTam7Uv7FiDLCVkaR8z0c
yIeK78EeKsJVRqHkvCzRMXZwL8VBI9hfYBUT2j2+XrxvgdNH+721zGT7DFqwj3v/
jZYDCLE01VEeTndjt5hTKbv3F59Xo5NhrUV0Mik7JD3l0P+05Le2jFuajJiVMBhr
Fe1mY0h/FAz8qk3zsoAxFekLu4AWc0+JzzX1jUsA4vFc0HmWVgAbr3+gTcNm0qtV
nKYf5hqDuzir0E59HhxCZYlvx8MB8fXc6ADhQ0uUwvjSbf7vjhkoMWwk3sIXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUCkRuzJPYMGG6XnI41KEg7QdtoeIwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzAzMDJlMzEzMzJlMzQzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzEzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDSowDQYJ
KoZIhvcNAQELBQADggEBACSlDmWy61oU/eR2IEtppxSSv7dKSqOJObgK9TslXc3T
/m9MKnqjBZcUInElacA9b335UVMHskO39JIUxypniGYK8gA+JXcjc7p8CAv8OMIe
yU/z4U3ZTTpvoZFup8qSHvaDmAkbKtPisIlR12Q+7woMe0Vzft+/U6GDZBvhDP6m
1606oqP877wduYo9KG4frG8eSKoPsRJ09057ZIjsBpOFd4PxjabSymAYGsiiRMG2
g8S3SR3g7KWAm1NSgeBj8sWTUvgAjW8osi5NCh9k6Vgt/IzB6dOPQBbAFHsypVba
wEtiuQxcQ7+BxWT1ZgOgmhyhDtUOzYyT+5jfkO4rVbk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org