Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/3230302e31332e34342e302f32322d3234203d3e203532323936.roa
File:                     3230302e31332e34342e302f32322d3234203d3e203532323936.roa (raw, json)
Hash identifier:          ougXvJiQERwq/+bin62FTfTRd/I+GUCPXs4/7BpekzM=
Subject key identifier:   31:2E:7A:A5:0D:7F:5A:9B:63:7C:8B:11:F6:4D:20:83:5B:C7:3B:76
Certificate issuer:       /CN=7D5AB6A5FFF2037A75F7B80ACAB831F23545E080
Certificate serial:       6C2F94E1AB8C54460F11265C3F43CE065676FEF8
Authority key identifier: 7D:5A:B6:A5:FF:F2:03:7A:75:F7:B8:0A:CA:B8:31:F2:35:45:E0:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/3230302e31332e34342e302f32322d3234203d3e203532323936.roa
Signing time:             Tue 05 Mar 2024 17:52:24 +0000
ROA not before:           Tue 05 Mar 2024 17:47:24 +0000
ROA not after:            Tue 04 Mar 2025 17:52:24 +0000
asID:                     52296
IP address blocks:        200.13.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2f:94:e1:ab:8c:54:46:0f:11:26:5c:3f:43:ce:06:56:76:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5AB6A5FFF2037A75F7B80ACAB831F23545E080
        Validity
            Not Before: Mar  5 17:47:24 2024 GMT
            Not After : Mar  4 17:52:24 2025 GMT
        Subject: CN=312E7AA50D7F5A9B637C8B11F64D20835BC73B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:28:f3:f7:0e:3c:39:39:30:b5:55:c1:0e:
                    0f:58:3b:34:58:12:b4:b4:09:e5:5f:72:6e:0a:c9:
                    5a:73:a1:c0:40:e9:c1:c2:3f:74:17:33:43:6b:55:
                    58:a8:36:1e:de:0e:0c:bb:c0:7d:d2:a3:39:a7:1d:
                    4c:3f:4a:cc:73:01:f5:d6:eb:e5:e6:14:95:a4:5b:
                    80:70:07:ab:a8:13:f2:11:6e:fe:31:f9:cc:6f:d7:
                    c1:cd:93:e5:35:1b:b3:4a:38:ae:dd:b8:e4:9f:36:
                    62:6b:94:2a:f1:eb:bf:de:3b:0f:6f:5e:38:ec:6f:
                    8c:d8:ac:0d:80:e0:04:6a:82:d4:a6:d3:20:27:1d:
                    6e:3e:46:fa:98:3e:bd:77:1b:6e:62:34:99:cc:93:
                    55:f9:3a:25:f4:9f:12:e5:95:4f:7e:24:4e:91:27:
                    c7:5b:78:21:82:ce:1d:0d:cc:52:cb:29:57:ab:38:
                    37:03:ee:af:59:1b:1e:ef:30:6b:7b:14:65:cb:bf:
                    73:f9:8c:87:d4:81:17:ce:8b:6b:2e:c8:b4:02:4f:
                    39:10:a4:e1:14:a8:3a:e9:38:f3:54:5d:3d:ea:eb:
                    4d:46:a9:20:d4:19:86:f7:0c:c9:c0:e9:49:aa:5d:
                    58:90:b8:62:8a:5e:e4:aa:ea:47:0d:f8:61:aa:00:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:7A:A5:0D:7F:5A:9B:63:7C:8B:11:F6:4D:20:83:5B:C7:3B:76
            X509v3 Authority Key Identifier:
                keyid:7D:5A:B6:A5:FF:F2:03:7A:75:F7:B8:0A:CA:B8:31:F2:35:45:E0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/3230302e31332e34342e302f32322d3234203d3e203532323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:da:8b:d7:cb:cc:73:f6:14:e1:43:e4:f2:e0:6b:d2:d2:c4:
         74:38:b7:7c:51:3d:3b:1c:4f:22:a1:8c:a5:48:26:b7:b8:87:
         22:f1:49:3f:09:cf:53:65:79:74:66:43:14:77:dd:17:c2:29:
         8d:e3:fb:58:12:8a:61:dd:84:df:3a:a7:dd:4f:0b:96:a3:6d:
         c7:e8:18:46:0a:d3:63:93:f8:e7:14:a2:92:3c:2b:41:36:7a:
         2a:e3:6e:3d:2c:b2:8f:c0:94:bc:f2:76:f9:64:2d:aa:74:33:
         41:9c:98:c5:0e:5a:c8:96:0e:29:4e:73:f1:7b:4c:39:6b:f9:
         b6:22:f6:e7:91:b4:97:84:af:6c:f1:e2:79:ab:6a:fb:55:0c:
         86:fc:26:d7:97:0f:e4:dc:9c:da:05:3d:d3:59:38:5e:dd:09:
         b1:82:d7:5f:77:4c:6b:ef:c5:b5:be:6e:7c:8d:48:85:cd:9c:
         cc:e3:e6:45:01:2d:bd:1f:3e:57:8b:64:4f:74:a7:36:da:fe:
         fd:a4:c0:7a:c9:4c:8d:ab:ed:97:76:6d:b4:f1:99:d5:35:08:
         8a:a1:ab:f5:c9:cc:25:ac:23:ca:7c:b6:bd:a6:73:9e:41:e0:
         b9:6a:19:5c:fc:74:c4:20:08:c0:fd:49:00:6c:96:7d:82:23:
         65:01:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org