Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135342e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3135342e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          RqzDgahoT1teYnEZ+D8Mk6Y/1VNfb74cJ/rhiwx3cSo=
Subject key identifier:   B8:6D:20:EA:95:D5:C1:84:23:10:36:C5:AD:97:C3:0B:F0:9A:8B:C1
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       237EF26796508AFA64D35A05D6BA99825085C76F
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135342e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:29 +0000
ROA not before:           Tue 05 Mar 2024 18:01:29 +0000
ROA not after:            Tue 04 Mar 2025 18:06:29 +0000
asID:                     20299
IP address blocks:        200.30.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7e:f2:67:96:50:8a:fa:64:d3:5a:05:d6:ba:99:82:50:85:c7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:29 2024 GMT
            Not After : Mar  4 18:06:29 2025 GMT
        Subject: CN=B86D20EA95D5C184231036C5AD97C30BF09A8BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:5d:a6:d2:51:17:d0:85:7e:94:b8:59:16:
                    75:82:b1:c5:9b:3f:01:ba:fa:44:a8:4e:3d:b4:dd:
                    83:87:50:9f:e1:5a:e0:57:05:34:69:20:e5:5d:31:
                    e5:a9:8b:54:07:c6:07:7b:c0:c8:41:d7:e7:99:71:
                    a6:2e:dd:04:e5:07:e1:e2:68:1a:55:83:62:8d:f6:
                    e8:66:8d:73:cd:66:26:d7:4f:11:ed:73:33:fe:b6:
                    1a:f0:e7:98:47:ad:d5:12:a4:03:aa:fe:6d:09:8d:
                    93:cc:ee:6e:ab:52:90:a2:ce:f2:f5:65:c8:8a:39:
                    87:87:2d:19:39:b5:7e:2b:c9:d1:3e:70:32:15:70:
                    01:db:a7:81:b0:9b:13:38:50:1e:74:8f:25:2b:0c:
                    c6:a2:c6:76:73:03:ca:f1:7e:24:0b:bf:c4:2b:3f:
                    78:25:a8:90:d7:ff:a2:67:e9:74:e0:7b:5c:7a:f3:
                    5a:56:e7:31:05:22:e1:d8:1c:ac:9a:11:18:38:29:
                    21:63:f6:ec:98:eb:41:ec:a5:ec:28:73:1b:ce:4e:
                    7c:a5:5d:40:25:9b:fb:a8:4c:76:41:c5:0e:ee:98:
                    29:e1:f5:fe:80:a7:24:69:49:ff:4a:e0:87:1b:6d:
                    cc:da:bf:b5:8f:80:64:78:14:2a:7f:f0:07:c1:61:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6D:20:EA:95:D5:C1:84:23:10:36:C5:AD:97:C3:0B:F0:9A:8B:C1
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135342e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:07:c9:34:9c:38:bb:70:32:24:11:94:c9:ca:a3:01:ee:e9:
         f1:6c:4e:c9:e5:bf:0f:a0:ce:97:37:c7:73:fe:cf:d6:3c:ef:
         b9:49:dd:ca:e5:93:16:58:d9:39:9b:47:f2:9c:4a:b0:bc:d1:
         85:13:5d:4e:f4:94:70:88:84:72:d0:7a:3c:6c:09:02:23:a6:
         bd:e5:d7:0e:2a:6d:cf:b7:cf:40:82:87:9a:d8:27:6d:b1:dc:
         85:2b:72:67:b8:f5:fd:70:e1:70:55:d0:ff:41:c2:55:df:6c:
         d6:8f:43:c9:d4:1b:9b:7f:d6:28:1d:db:6e:ed:d4:5a:32:6d:
         b3:95:21:de:da:e4:e4:05:d9:f3:b3:36:7b:00:92:20:85:7c:
         ee:39:32:5c:fb:f2:fa:1e:5a:de:8a:e5:84:4a:df:2b:78:2a:
         d7:17:e9:0d:c6:d7:09:6a:9a:86:a6:fa:4c:02:f1:f2:05:79:
         3e:76:4b:f9:75:1b:8c:76:cb:94:a2:dc:2b:ca:94:37:88:6f:
         0b:7f:c8:81:85:c3:47:cc:95:91:fb:01:35:37:93:6b:46:c6:
         bf:58:0b:cb:71:f0:12:f9:4a:ae:11:2c:44:39:09:bd:e6:ee:
         41:a5:f5:fa:63:5e:a6:c2:cd:a8:5d:75:80:67:b2:56:32:66:
         46:52:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org