Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133352e302f32342d3234203d3e203233333833.roa
File:                     3230302e33302e3133352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          tTdEdIs1EVEO+sH6KvC5sYDsdOebMAokMl7WPOJik9c=
Subject key identifier:   30:E0:84:2D:CC:82:2B:96:1D:F7:DB:47:19:A5:81:81:40:21:CF:43
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       1A65D9F374A93D2D594FFFBE3448CDC427943E69
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133352e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:06:28 +0000
ROA not before:           Tue 05 Mar 2024 18:01:28 +0000
ROA not after:            Tue 04 Mar 2025 18:06:28 +0000
asID:                     23383
IP address blocks:        200.30.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:65:d9:f3:74:a9:3d:2d:59:4f:ff:be:34:48:cd:c4:27:94:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:28 2024 GMT
            Not After : Mar  4 18:06:28 2025 GMT
        Subject: CN=30E0842DCC822B961DF7DB4719A581814021CF43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:61:b2:2c:64:d9:c5:f5:7f:a0:df:7f:18:
                    b0:3b:34:a9:7e:fe:ac:0b:2b:99:ac:79:76:7f:b3:
                    a1:df:a2:ee:71:96:53:44:6b:02:ec:64:85:c7:c9:
                    1c:86:64:b8:5a:62:63:33:1b:e9:31:52:de:fc:6a:
                    54:9e:59:be:7c:67:44:69:11:98:a1:ba:b2:fb:5f:
                    e3:76:c8:68:20:57:51:d0:ba:51:08:e1:68:d8:32:
                    a5:d3:7c:2c:c5:92:2b:e7:b4:ae:ed:bd:4e:7e:de:
                    b6:79:37:54:b1:ee:bd:47:d8:68:52:7d:52:50:74:
                    91:c1:b0:c7:3c:f6:d2:c2:c2:39:0e:ac:3f:1a:b0:
                    67:af:5b:be:a6:20:23:98:d4:07:c0:df:b7:c6:49:
                    9b:57:4d:75:fb:91:df:4e:a4:ea:48:da:d1:d2:5e:
                    ff:7c:ba:be:b2:9c:e3:71:25:4d:a2:a8:9a:a9:91:
                    dd:3e:a6:9c:9c:07:34:21:f7:89:4c:45:72:ef:16:
                    89:c2:b2:01:00:9f:b3:8a:53:57:0b:06:64:87:34:
                    3d:bb:cb:40:9e:91:1f:23:93:f6:db:b5:bd:74:88:
                    c8:2e:73:7e:c5:0d:81:d8:8c:15:c1:64:f5:5f:bc:
                    5a:a2:30:1c:19:c4:75:7b:d1:dd:aa:47:af:98:16:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:84:2D:CC:82:2B:96:1D:F7:DB:47:19:A5:81:81:40:21:CF:43
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133352e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:b1:ee:2a:f0:e6:4d:b8:08:fe:e8:ea:28:69:68:92:9c:
         29:36:35:7a:e2:6f:98:eb:c3:f7:9d:f1:3a:df:99:5b:b3:f9:
         6a:0b:92:40:42:f7:bf:bb:ce:f6:bb:d1:21:43:96:a1:b8:6b:
         cb:e4:26:fa:e3:56:fb:b8:28:3a:91:6e:26:4a:ae:f6:46:c6:
         1b:93:7e:c5:f2:1b:ab:f6:69:c6:30:68:0f:31:e3:8f:e4:46:
         f8:e6:4a:f4:70:91:c4:d9:4d:e9:df:54:76:5b:f4:f3:dd:92:
         e9:71:18:ad:7d:3e:d4:9d:59:ff:bf:97:77:63:52:b4:95:73:
         9a:17:8f:48:90:3c:f4:ba:95:70:86:b3:64:60:93:c1:51:d9:
         3b:ef:84:fc:53:61:7b:7e:68:05:9b:ad:3a:76:2d:bd:e2:44:
         a9:f9:8f:a9:1c:18:25:d7:55:96:9e:52:69:b8:c3:b7:02:f1:
         d1:37:f9:e9:fd:4b:44:0b:f6:99:bc:c5:d6:04:cd:e2:84:52:
         ce:49:f9:bf:e5:dc:a3:dd:05:fe:6c:6c:ab:84:06:11:cb:19:
         b9:d6:82:b4:81:62:0d:59:c3:24:71:ca:57:bb:00:f8:de:f7:
         05:00:bb:37:cb:52:c4:0c:10:8d:fd:14:27:c3:6d:b9:07:a6:
         c8:01:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org