Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134302e302f32322d3234203d3e203230323939.roa
File:                     3230302e33302e3134302e302f32322d3234203d3e203230323939.roa (raw, json)
Hash identifier:          MSl/gnl9a7orNCQ9vnu0bPIBA/QIr8AdrB5MGcv57J0=
Subject key identifier:   1B:C3:F7:C9:F2:5C:F6:7E:9B:A2:00:2E:FD:28:5B:50:9A:C6:3C:D4
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       3443A98FBDFD2C794DF12F7BBF88EC449847E1E5
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134302e302f32322d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:22 +0000
ROA not before:           Tue 05 Mar 2024 18:01:22 +0000
ROA not after:            Tue 04 Mar 2025 18:06:22 +0000
asID:                     20299
IP address blocks:        200.30.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:43:a9:8f:bd:fd:2c:79:4d:f1:2f:7b:bf:88:ec:44:98:47:e1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:22 2024 GMT
            Not After : Mar  4 18:06:22 2025 GMT
        Subject: CN=1BC3F7C9F25CF67E9BA2002EFD285B509AC63CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:16:ad:7a:85:6f:9a:99:0b:a3:f6:95:7c:
                    42:4a:d4:cc:33:18:3e:47:ff:10:4d:8a:81:a5:48:
                    a9:cb:30:fd:95:71:3b:0b:10:51:7d:18:b9:d3:dc:
                    b3:0b:18:66:25:17:6b:c3:f0:df:e8:f6:f7:9b:eb:
                    ca:3a:4c:3a:03:cd:5f:3a:1a:6b:c0:63:b9:35:bb:
                    07:fc:a4:29:d5:fb:c7:60:51:e3:31:64:a8:63:be:
                    97:67:da:9b:3f:cc:1a:45:b2:0b:0a:cf:8d:9f:54:
                    39:47:96:6e:bc:dc:c8:a9:5b:7c:c8:3f:be:4d:63:
                    15:41:27:0a:a4:c5:12:87:53:f6:77:ed:ff:69:9e:
                    8a:c9:ca:13:41:ae:00:4b:f3:5a:a7:01:f0:c6:04:
                    e4:1a:82:ad:54:7b:49:97:7e:30:fc:05:56:cd:8a:
                    2c:ad:bf:e6:23:0a:c7:3d:e7:92:34:f8:ac:b4:cb:
                    a4:aa:47:51:f1:25:06:a4:17:2b:a1:78:7f:df:25:
                    bc:48:c1:81:b9:f1:b9:fb:03:f4:57:39:fa:e3:61:
                    b4:3a:30:06:e5:07:10:e5:08:14:b4:f3:65:1d:26:
                    3d:e8:d5:da:f5:ef:c4:09:91:84:67:88:47:87:36:
                    26:d0:0a:e2:09:8f:16:23:5d:f6:b9:70:01:b3:7a:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:F7:C9:F2:5C:F6:7E:9B:A2:00:2E:FD:28:5B:50:9A:C6:3C:D4
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134302e302f32322d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:de:d2:0a:5a:56:95:47:09:ae:59:02:ac:54:2b:fd:19:
         ef:1d:d8:88:0e:ef:c4:dc:df:1e:10:e7:d5:c3:0f:39:67:ff:
         bc:41:5e:c4:f4:67:aa:77:6f:6c:64:bd:5d:76:67:8f:be:5f:
         dc:8f:54:d8:9d:37:92:d2:ec:8a:77:9c:80:53:4e:ff:10:7e:
         ed:8a:86:55:b0:88:bd:c8:75:1e:85:b6:b7:4e:00:46:f7:46:
         88:8b:d9:cc:99:93:2c:2d:2a:1a:5d:10:9d:37:bd:35:53:68:
         f7:41:54:fa:e9:18:67:10:3c:a4:cc:58:d9:31:70:0e:26:4a:
         89:de:5b:5a:ea:90:39:13:28:09:ce:e2:dc:02:4d:e6:a7:d0:
         77:20:c2:ae:52:8a:c7:6b:9a:1b:6a:5f:30:1d:01:dc:73:7b:
         0a:2a:11:1b:f7:ce:4e:67:38:a4:c8:b6:00:f7:2e:ff:3e:6c:
         c7:c6:96:7e:d3:ca:b3:00:66:41:67:53:33:eb:2e:89:22:a3:
         cf:0f:0b:54:dc:9d:8c:ac:73:c9:02:8d:ad:b7:36:9c:ab:69:
         10:b8:63:25:f6:65:0a:63:bc:0a:60:a5:af:55:a6:bb:9c:55:
         a9:20:33:64:6a:c5:31:c4:b0:d7:6d:11:72:0c:be:4e:40:5e:
         9c:0e:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org