Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e33302e3139322e302f31382d3234203d3e203232303437.roa
File:                     3230302e33302e3139322e302f31382d3234203d3e203232303437.roa (raw, json)
Hash identifier:          yglRNmOA2gsMrCHBWLvk3pYdI1eaXLlkPjd/nUjySJ4=
Subject key identifier:   C8:EB:5F:15:23:58:22:F4:77:98:FC:EC:B6:6A:B9:C5:5E:48:C4:42
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       7A57927303E0D255FFFC47E9C5DB279406206F58
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e33302e3139322e302f31382d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:23 +0000
ROA not before:           Tue 05 Mar 2024 18:04:23 +0000
ROA not after:            Tue 04 Mar 2025 18:09:23 +0000
asID:                     22047
IP address blocks:        200.30.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 18:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:92:73:03:e0:d2:55:ff:fc:47:e9:c5:db:27:94:06:20:6f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:23 2024 GMT
            Not After : Mar  4 18:09:23 2025 GMT
        Subject: CN=C8EB5F15235822F47798FCECB66AB9C55E48C442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:b5:e5:51:7d:66:92:d9:c8:3b:66:e7:b5:
                    ae:80:7a:06:ba:af:28:44:da:50:4c:6b:37:74:12:
                    b0:cd:ea:40:06:2b:9f:40:0b:20:7d:e6:5a:2d:ed:
                    66:04:09:82:e8:d1:19:96:80:1a:c0:8d:97:28:d3:
                    1e:90:d3:de:39:ea:d0:bd:7b:cc:6c:22:c2:55:9a:
                    99:b5:cf:76:13:ba:a5:07:44:1f:0f:d0:67:26:4a:
                    4b:bb:21:55:81:d0:43:f5:cf:ae:2f:79:8b:0e:e0:
                    35:da:43:39:12:b0:5e:3b:4d:62:ea:39:7f:e7:ae:
                    26:ed:cc:e5:df:c6:2d:2f:53:b6:af:81:05:75:d4:
                    9a:1f:e7:73:f4:54:16:39:e8:58:29:f4:1c:16:44:
                    6b:ec:5e:0a:a0:6f:ea:97:41:f1:14:57:97:a6:ef:
                    84:8a:8d:73:37:ca:14:10:b1:8a:6c:d7:1d:6e:40:
                    7a:90:f8:a7:a5:26:40:cb:20:62:ad:ee:8d:35:0e:
                    02:16:3e:5c:02:d6:23:81:c7:71:47:b2:2d:18:48:
                    90:c6:56:e8:82:62:b9:2f:57:bb:d0:fa:6b:ba:bc:
                    fb:2b:8d:d4:89:af:bc:9b:2f:05:39:1b:16:9a:ed:
                    45:90:21:f1:0b:6b:d4:5e:a1:55:10:71:4e:e4:9e:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EB:5F:15:23:58:22:F4:77:98:FC:EC:B6:6A:B9:C5:5E:48:C4:42
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e33302e3139322e302f31382d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         be:79:65:b5:03:02:fe:0f:14:aa:da:52:b6:e3:86:3f:07:f8:
         08:1f:d4:97:f8:e7:82:30:7e:a5:5e:ba:e4:a3:b5:f2:78:9e:
         7c:1c:fa:f0:df:30:94:0e:11:f0:22:a0:46:3a:c4:1b:fd:49:
         30:36:ae:6c:28:c0:1a:43:f2:6c:0b:df:dd:f8:04:78:3c:0a:
         66:ea:3e:06:61:63:b0:bf:63:cf:32:1a:79:af:a5:78:e1:ff:
         2e:3d:79:d6:e1:7e:d4:4d:9a:a5:ee:a4:06:f8:cd:23:f5:09:
         b5:f8:f3:62:e2:d4:0f:29:8a:99:26:82:83:71:f9:30:45:e0:
         b5:54:79:a7:70:44:f7:90:f1:67:15:70:bd:4a:20:ac:98:9c:
         86:7c:71:b6:f4:46:b8:63:2b:f5:ac:ce:b2:64:3e:8e:2d:be:
         78:62:b6:dd:49:a7:5a:54:3f:bb:cb:de:0d:0a:f5:2e:78:77:
         47:c3:18:99:21:02:85:96:17:40:bc:b8:13:a3:ac:0e:9a:6f:
         de:d9:58:dd:e7:a0:c7:2e:4c:ac:9c:94:4a:7d:a0:da:cf:57:
         e7:ff:dd:3f:10:7a:38:af:a2:92:76:df:92:51:1f:99:cb:8b:
         b5:ab:71:21:8b:96:1b:e6:1a:0a:57:1a:c2:92:d7:45:49:0d:
         65:9d:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org