Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32322e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          VflgFr2Zc+UnXZZlGrs6OAbDB7W+JxKtBdz04dQrOkk=
Subject key identifier:   07:D3:94:A8:95:A7:E3:5D:11:96:9D:0B:37:D3:25:64:50:F9:BD:BD
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       5F6227AA55A12537853C1769E8B620B03900E205
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 18:09:33 +0000
ROA not before:           Tue 05 Mar 2024 18:04:33 +0000
ROA not after:            Tue 04 Mar 2025 18:09:33 +0000
asID:                     12684
IP address blocks:        200.89.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:27:aa:55:a1:25:37:85:3c:17:69:e8:b6:20:b0:39:00:e2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Mar  5 18:04:33 2024 GMT
            Not After : Mar  4 18:09:33 2025 GMT
        Subject: CN=07D394A895A7E35D11969D0B37D3256450F9BDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:b0:18:ab:03:26:88:f1:86:72:36:84:fa:
                    54:85:ac:0f:6c:32:c1:57:26:ae:ee:52:48:1e:5d:
                    03:94:46:55:41:d2:f5:8f:03:eb:be:2f:5f:e6:81:
                    36:80:9e:b6:1a:bf:f1:33:7c:45:ca:9e:b7:81:02:
                    6d:fa:e3:76:c6:b5:ca:b5:d1:19:ca:c2:22:d0:78:
                    81:db:32:23:e9:d3:93:f7:ee:3c:b8:28:d5:35:3b:
                    08:4f:f3:84:f3:05:8e:0d:1b:1d:d3:6e:28:ba:36:
                    76:c7:cd:13:79:ec:75:3b:78:46:2d:35:68:67:13:
                    33:cd:00:8c:82:11:31:62:8d:e0:17:b0:76:0b:a5:
                    bb:06:91:91:d9:f6:c5:a7:7b:58:f0:14:fd:4a:11:
                    be:a0:ba:93:d1:83:b0:ab:c5:26:c4:98:f1:cf:97:
                    30:9c:d2:92:01:48:de:7e:30:1c:1f:fb:74:2c:71:
                    6e:29:13:a1:ad:b2:67:19:41:ce:49:99:b6:82:68:
                    a5:f6:ce:b2:9c:19:18:be:62:c9:3b:ec:49:cd:39:
                    af:86:02:9c:e9:23:2d:6c:12:d9:4b:c5:ec:b5:9c:
                    de:f5:76:98:2f:8d:d9:1b:91:04:50:49:e2:4b:14:
                    98:d5:0d:77:65:80:7e:b3:b1:9c:59:fe:3a:52:6d:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:94:A8:95:A7:E3:5D:11:96:9D:0B:37:D3:25:64:50:F9:BD:BD
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:96:3b:f9:25:93:27:f0:8d:d6:cd:9d:91:67:d2:7e:ef:04:
         08:50:b0:93:a0:bb:27:7f:b7:b9:0e:49:0e:2f:61:d2:bb:7c:
         13:e0:1d:13:82:6a:82:31:a8:33:27:7b:cb:7a:16:ca:c9:6b:
         a6:f6:5b:1a:62:c4:69:16:74:87:12:ce:a8:00:c4:18:7c:ad:
         9c:f7:4c:f2:a1:58:7e:19:9f:c0:0a:ce:9f:dc:c9:52:7e:13:
         4d:a6:00:17:75:2b:e1:4a:6d:9a:dd:e5:29:b6:1e:13:9d:07:
         1d:e4:13:a1:6f:ec:6d:31:ee:2c:4e:d3:87:84:e3:bb:dc:d2:
         1e:ee:49:79:95:de:33:fe:f5:86:31:cd:16:a5:4c:f7:9e:2c:
         e2:fe:0a:53:eb:a0:3d:f5:69:f2:9e:38:21:6b:ed:27:e4:6a:
         00:36:7a:0d:97:f1:ca:22:8a:62:e4:ea:24:3e:05:67:b2:94:
         2d:2f:93:fe:63:16:13:3a:8a:19:72:b3:a8:b1:01:42:d4:38:
         75:f9:f8:32:75:45:2d:a4:6f:99:62:71:98:5d:1d:e3:4d:93:
         50:c0:6a:e3:72:86:f5:73:cd:e8:7d:82:72:7f:b3:f0:ba:20:
         23:17:bf:8a:4f:f5:ae:4b:d0:cb:13:44:13:ed:0e:3d:26:d1:
         d2:eb:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 22:59:57 2024 by rpki-client on console-ams.rpki-client.org