Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31372e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e31372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          3o16TWqS6zU34PXOO+XNux2vFYQLrPkKkowM+TJxIP4=
Subject key identifier:   FC:A2:AE:77:93:B9:98:08:BB:3B:32:23:F4:37:AC:D9:5D:54:BC:2B
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       6F4498C2CE6A7258B17702085A3A7514D6169EA7
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31372e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 18:09:33 +0000
ROA not before:           Tue 05 Mar 2024 18:04:33 +0000
ROA not after:            Tue 04 Mar 2025 18:09:33 +0000
asID:                     12684
IP address blocks:        200.89.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:44:98:c2:ce:6a:72:58:b1:77:02:08:5a:3a:75:14:d6:16:9e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Mar  5 18:04:33 2024 GMT
            Not After : Mar  4 18:09:33 2025 GMT
        Subject: CN=FCA2AE7793B99808BB3B3223F437ACD95D54BC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:f4:54:77:93:5b:c3:d1:b4:33:ff:76:3a:
                    e8:41:ba:96:61:14:2c:90:1a:a2:25:e1:08:9b:1e:
                    a7:e8:67:0e:d6:60:ee:6e:55:e5:a7:b6:dd:1a:ac:
                    12:fd:88:15:57:8b:1b:22:2f:b8:db:9a:28:ce:75:
                    fb:c8:66:4b:ab:9c:f8:c9:2b:b5:28:f7:9b:51:27:
                    01:f4:cb:ef:88:c1:19:b7:30:90:a9:87:47:35:1d:
                    c5:a3:a3:c3:e7:0e:64:95:a5:d7:d6:a1:f8:2d:fe:
                    70:75:22:75:74:fd:5b:91:7c:aa:c3:f3:cb:e8:9e:
                    aa:9f:9c:e6:4c:19:46:70:8e:1f:ce:c6:14:10:5d:
                    3a:50:f3:f5:3a:d4:0f:37:a6:c0:f6:98:d2:99:bf:
                    25:05:31:8b:56:ef:8d:9c:40:09:ff:32:86:87:1f:
                    86:5d:e8:be:aa:a8:9f:11:d6:1c:e3:ec:fe:0c:10:
                    29:a3:84:7d:1c:ba:e1:29:2c:3e:d4:28:67:af:d7:
                    4d:37:d0:cf:d3:c9:dd:2f:a1:c3:fc:6d:b5:e6:54:
                    d2:38:6f:1d:4b:d0:56:7f:a7:64:26:7a:e2:65:c1:
                    40:bd:78:3b:d1:e4:1d:5b:44:9e:7f:be:66:e1:c9:
                    12:10:54:29:00:37:f6:4f:97:32:c6:f7:f9:b5:6f:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A2:AE:77:93:B9:98:08:BB:3B:32:23:F4:37:AC:D9:5D:54:BC:2B
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31372e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e5:e3:5a:32:b4:9a:fe:b2:55:e4:f4:77:f7:bb:08:28:c2:
         32:0e:c2:84:2e:16:56:de:6f:ad:0d:62:57:38:26:70:3c:6e:
         4e:88:3f:4d:d8:81:7e:65:75:c6:58:ed:85:c1:01:6c:47:f2:
         65:cb:f5:31:bf:96:10:f6:5f:fb:b2:b6:22:6b:d0:6c:0b:7b:
         7c:e6:95:50:0a:36:e5:b8:f5:85:b9:2b:64:d0:5f:e2:c4:3d:
         95:29:94:4c:a8:00:53:eb:36:57:6b:04:4f:61:ff:57:ac:10:
         84:24:7f:1c:4a:eb:08:1b:f7:0f:66:9e:96:5f:df:c9:f5:0b:
         3c:19:e4:15:08:62:55:4a:79:64:4a:a8:bd:c6:94:e9:df:7f:
         e0:a6:76:e5:f6:54:c7:4a:df:8e:32:e7:fe:c8:dd:f0:6e:15:
         ff:a4:6e:3b:9b:ee:bd:20:24:83:bb:1b:e1:ad:ad:a4:bf:63:
         ba:4c:a4:6d:b4:c8:ff:27:a5:ad:20:04:37:49:85:fd:ee:21:
         37:b7:04:d1:02:de:31:6a:7d:14:94:54:65:09:0e:1d:65:82:
         ef:d7:50:7f:61:06:f8:3f:1b:1e:07:a8:6a:10:07:9c:e5:a7:
         fd:1f:81:41:77:52:88:46:f2:a5:47:4b:3b:d0:02:42:ee:76:
         88:82:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org