Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133362e302f32332d3234203d3e203233333833.roa
File:                     3230302e33302e3133362e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          VQPbL96cF6BD0qbX2B68Z8sT/p6XfhMbdc2qTbhLgY4=
Subject key identifier:   C8:F3:3F:06:9D:9C:11:F8:C7:4A:06:5D:01:E9:A0:91:3B:22:0F:6E
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       4E179A98841AF7BB20A7246EE380DC3EE9D35812
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133362e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:06:21 +0000
ROA not before:           Tue 05 Mar 2024 18:01:21 +0000
ROA not after:            Tue 04 Mar 2025 18:06:21 +0000
asID:                     23383
IP address blocks:        200.30.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:17:9a:98:84:1a:f7:bb:20:a7:24:6e:e3:80:dc:3e:e9:d3:58:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:21 2024 GMT
            Not After : Mar  4 18:06:21 2025 GMT
        Subject: CN=C8F33F069D9C11F8C74A065D01E9A0913B220F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:a4:66:6a:98:42:c5:67:8f:b5:f8:08:92:
                    85:95:0a:fc:6f:bb:f6:cd:9a:43:59:c8:19:f7:ef:
                    67:31:d4:36:4c:ca:6f:67:d1:4a:e7:bf:70:c6:b6:
                    b6:7f:a7:98:f0:c8:9a:90:44:b8:49:49:29:28:bd:
                    1d:4a:c2:b1:ac:c0:21:f7:7d:da:b6:96:a3:9f:0e:
                    5e:cb:56:49:0f:52:75:81:ff:08:7b:73:60:27:f3:
                    a2:0a:a0:35:2c:9d:9a:53:39:c9:97:7b:a1:61:4b:
                    e7:d1:80:fe:a1:68:43:a0:25:08:42:e4:f2:56:83:
                    c6:a2:c9:ea:79:30:23:ac:8d:a9:dd:26:1b:fb:4b:
                    ba:a1:53:f6:f7:4d:0d:b3:51:64:ab:2b:8d:bf:94:
                    a7:fa:ce:00:3f:41:ef:16:1c:1b:7f:2a:b6:b2:59:
                    cd:29:1b:b7:48:19:79:ba:65:48:d0:d3:ac:d1:71:
                    00:ec:b6:2d:55:b3:7a:06:b5:e3:6d:fc:d3:52:b9:
                    da:bd:a5:91:31:7a:d9:6c:7d:94:0a:ea:bb:2d:94:
                    2c:80:04:d6:a0:58:f6:32:51:ff:f3:68:b7:51:28:
                    da:0f:91:5c:d5:b4:1a:27:48:50:5f:5f:7d:94:58:
                    15:89:41:a0:90:45:ee:3c:60:80:8d:66:9d:a4:5a:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:3F:06:9D:9C:11:F8:C7:4A:06:5D:01:E9:A0:91:3B:22:0F:6E
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133362e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:d1:30:d5:79:1e:d8:20:6a:21:9d:d8:a7:53:c2:d1:f4:
         a6:41:b7:b3:7b:cb:dd:af:14:77:a2:62:5e:64:e7:9e:18:cd:
         28:29:09:5c:a1:20:62:cf:00:4d:30:c9:e3:30:fe:76:88:65:
         91:74:98:05:fe:5a:46:aa:3e:8a:50:1d:e5:9e:9e:d7:78:31:
         e8:96:20:bc:94:1a:ce:70:71:b5:f9:61:c4:54:06:d0:0a:62:
         eb:0e:08:ab:52:27:70:cb:67:56:e2:46:b8:a8:de:32:a4:91:
         79:ac:82:b0:f8:49:00:33:93:db:f2:c7:1f:b1:36:de:c4:50:
         b7:f8:24:64:00:a9:00:16:e7:e5:b1:8e:79:99:d7:bb:4c:a6:
         37:f8:56:33:96:2f:4a:6f:9f:39:38:08:94:3b:7a:1f:23:02:
         73:ed:77:b3:71:0c:fb:d6:a9:ae:22:39:50:e4:71:3b:f7:ef:
         93:62:9d:1d:da:19:04:8b:ab:3d:c4:e3:8c:eb:0f:f3:da:da:
         6a:57:02:38:65:ab:1b:97:86:14:3b:cc:c3:57:7f:b1:c5:51:
         c0:31:b2:10:57:64:ab:9e:57:df:3e:de:b2:e2:12:ae:3e:69:
         9d:45:71:10:0d:d7:5c:03:e8:45:ca:1f:89:3f:60:f1:1d:13:
         a4:e0:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org