Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31382e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e31382e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          jWsPuj3tIVxdx8QGuJzURGDEL4TMtUXcBra+X9mnlBM=
Subject key identifier:   BA:71:3B:DB:27:D7:38:76:58:FE:52:9D:A9:E0:FB:6D:1E:51:1B:46
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       02C2D104F3E94252F1D0F1C8FE9C8A20F04D40F5
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31382e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 18:09:31 +0000
ROA not before:           Tue 05 Mar 2024 18:04:31 +0000
ROA not after:            Tue 04 Mar 2025 18:09:31 +0000
asID:                     12684
IP address blocks:        200.89.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c2:d1:04:f3:e9:42:52:f1:d0:f1:c8:fe:9c:8a:20:f0:4d:40:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Mar  5 18:04:31 2024 GMT
            Not After : Mar  4 18:09:31 2025 GMT
        Subject: CN=BA713BDB27D7387658FE529DA9E0FB6D1E511B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:04:b2:f0:74:b7:af:e6:91:81:5e:08:d6:
                    3a:22:fe:b3:f4:ee:b1:03:27:3b:0e:20:38:60:1d:
                    e6:1f:d6:31:79:ca:87:52:8c:17:75:5c:ec:fa:08:
                    d0:9b:7f:66:f6:3d:03:2a:9a:95:92:3f:8f:fb:91:
                    3d:64:53:23:94:7a:92:6d:1d:8d:2d:96:98:c7:f3:
                    b8:91:99:8d:b4:ce:72:a3:0d:66:c0:c3:d4:89:50:
                    c0:84:7c:f3:3b:67:65:44:79:47:5c:18:fa:13:b1:
                    32:de:97:7c:d5:74:2d:39:ff:ca:87:57:4d:7d:50:
                    4c:e6:15:07:02:71:75:d0:d0:9a:6a:de:df:5a:7e:
                    1e:42:04:f6:6a:6f:49:6b:a9:7c:a0:6a:76:b4:15:
                    4b:f5:10:92:9a:d7:f4:45:43:ec:02:05:98:bf:ef:
                    98:a1:a6:d4:9c:b3:69:4a:9e:be:27:83:6f:81:37:
                    92:a7:95:7d:e0:1d:c3:c3:a3:3e:2d:06:79:42:ac:
                    a2:bb:45:fb:77:92:cd:89:4f:60:36:ea:42:88:fd:
                    9f:66:2e:ca:33:1f:24:8b:3a:8a:b4:21:a4:b6:30:
                    3f:a3:9d:f2:f0:de:5b:dd:48:6f:5e:1f:48:01:23:
                    cd:f3:31:b3:92:85:0e:d7:98:19:c3:52:c0:fb:94:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:71:3B:DB:27:D7:38:76:58:FE:52:9D:A9:E0:FB:6D:1E:51:1B:46
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31382e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:8e:97:9e:14:b1:4c:e0:0f:96:38:8c:74:52:3e:76:03:ba:
         3b:de:7d:5c:11:e2:db:ad:2f:01:c4:11:65:3b:98:bf:cf:0e:
         b0:60:0b:6f:3f:41:67:10:c1:30:b6:74:d4:e0:6d:2a:32:af:
         6c:f3:5c:f3:02:1a:a7:ae:46:e0:b5:3c:e1:86:12:4c:c7:78:
         79:41:58:f7:6a:14:ca:c1:d3:9e:1a:f2:57:17:4e:e6:ca:26:
         ce:09:6c:fb:ed:d6:3e:ca:0d:6d:e2:2d:7b:3a:c6:bb:76:9a:
         2a:7e:f6:fb:ad:f7:7c:d9:c0:bd:d3:28:39:6c:a9:60:07:7b:
         48:0a:c0:00:24:38:43:65:e4:f7:60:a4:43:59:59:5d:52:c4:
         ed:4e:28:31:c4:33:26:9c:7d:35:7e:ea:04:71:8f:89:bd:8d:
         96:dd:78:53:f6:eb:24:29:60:0b:64:f3:d9:33:a2:58:6f:a9:
         7d:bc:49:88:5c:e0:be:d6:c3:6d:31:32:ae:99:ce:8d:e2:6f:
         14:33:cc:d3:0b:90:86:dd:ff:af:95:68:40:98:01:90:df:80:
         6d:2b:17:d0:50:6e:4b:7d:6c:04:a5:6c:b7:40:42:fa:c3:3c:
         a7:1c:01:ec:8f:c7:04:f1:9f:c0:b7:39:cd:31:da:c4:a7:08:
         e2:54:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org