Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa
File:                     3230302e33302e3133382e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          lsH/rolDXoybzHL5TJ6V6uJxSuTuYPyA6Aqbp6tEID8=
Subject key identifier:   DF:2A:61:26:41:23:E2:30:43:75:D1:B7:DE:A3:34:D3:77:9B:5A:D7
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       4BF7F8D228A52D390EBFAA8B3D63431462AA1F1F
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:06:23 +0000
ROA not before:           Tue 05 Mar 2024 18:01:23 +0000
ROA not after:            Tue 04 Mar 2025 18:06:23 +0000
asID:                     27773
IP address blocks:        200.30.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f7:f8:d2:28:a5:2d:39:0e:bf:aa:8b:3d:63:43:14:62:aa:1f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:23 2024 GMT
            Not After : Mar  4 18:06:23 2025 GMT
        Subject: CN=DF2A61264123E2304375D1B7DEA334D3779B5AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:4a:ca:85:b1:64:0d:57:a2:53:f7:ac:b4:
                    bd:e3:f7:45:c7:59:04:ed:11:ef:d5:79:f7:ae:56:
                    fa:6a:71:60:d6:ae:46:53:39:1a:c6:a2:9b:74:99:
                    c2:7e:07:77:60:6e:60:b6:0b:fb:0d:4b:23:20:e5:
                    67:99:c0:bf:67:29:a3:30:22:17:ca:d8:7b:64:0f:
                    ba:9b:fb:15:14:d4:d2:f4:2a:6a:ab:a0:a7:23:07:
                    7e:c4:1f:f1:c5:a7:d9:f0:a4:34:8f:40:e8:18:c6:
                    58:64:4e:78:b7:57:77:d4:79:01:b5:9d:2c:8c:6f:
                    c6:77:86:99:e9:d6:8a:77:50:06:87:d8:5c:84:c8:
                    8a:6b:3e:fc:5c:b8:60:e6:68:65:1d:6b:a9:1c:19:
                    50:71:62:19:33:56:b7:1f:52:a0:8f:0e:98:52:7c:
                    c9:fc:f5:2a:75:86:bb:f2:db:4c:e2:8d:89:d6:0f:
                    0d:91:f4:7f:f0:26:b4:c4:66:db:b0:dc:aa:b9:4b:
                    4f:76:5f:a5:94:2f:cf:db:92:98:cb:35:55:e6:f1:
                    76:38:3e:64:e1:65:83:75:b5:06:fc:8c:9d:ad:ab:
                    68:81:a1:f6:54:9a:cd:f2:97:74:90:81:f4:c4:a2:
                    78:21:68:42:b3:55:6a:74:b8:27:27:2f:d7:58:02:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:61:26:41:23:E2:30:43:75:D1:B7:DE:A3:34:D3:77:9B:5A:D7
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:7d:b0:03:3b:56:9a:59:8b:e9:50:e0:9b:7f:31:66:cb:
         b5:2b:bf:58:22:8e:ef:c5:3b:e3:f4:95:67:b1:98:d2:09:76:
         9a:95:11:36:06:e9:3a:fd:7f:93:71:ea:ef:88:d4:3d:4a:f2:
         6b:2c:1d:6e:3e:65:2b:9a:64:7a:60:15:8a:59:e8:8a:21:20:
         cf:a6:96:e9:95:4e:cd:2e:22:80:3e:39:a5:a4:d6:fa:7a:5e:
         ca:db:e3:60:8a:9a:4c:76:56:e9:5e:74:ed:6d:9a:df:e4:e2:
         6f:b3:93:f4:ae:7d:0f:5c:e3:ed:b9:2e:10:9d:c8:1f:81:8a:
         bc:06:69:65:22:9f:2a:bf:c4:29:5a:81:61:cc:37:de:16:31:
         d2:d7:91:02:a9:76:7b:a0:15:cf:a7:59:42:ea:6c:31:a1:1f:
         cf:1a:c6:c1:7c:d0:13:fb:bd:4b:62:1f:c2:eb:07:53:66:9d:
         76:99:f2:f1:c4:50:cc:a6:4a:25:fe:4b:d6:4b:b8:74:99:97:
         9a:19:38:b0:1d:3f:98:49:47:30:a9:6b:d9:19:cd:32:21:f3:
         4d:7d:17:47:1e:dd:c6:d5:2c:c0:d1:36:1a:20:00:b0:19:35:
         e4:de:05:91:aa:1d:8c:ed:ac:6b:7a:65:96:9b:52:70:db:0d:
         1f:87:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org