Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135362e302f32332d3234203d3e203233333833.roa
File:                     3230302e33302e3135362e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          lxNqC1krvdVdEAb3uFtCzgLKBn3n3Dc20Okqqm1FWo8=
Subject key identifier:   21:DD:68:EA:FD:98:3F:B0:3C:EF:9B:72:EC:F1:E1:80:DC:08:57:19
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       01F1ACDDE447A819428ED1C30A0AF8512ACD6FEB
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135362e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:06:26 +0000
ROA not before:           Tue 05 Mar 2024 18:01:26 +0000
ROA not after:            Tue 04 Mar 2025 18:06:26 +0000
asID:                     23383
IP address blocks:        200.30.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f1:ac:dd:e4:47:a8:19:42:8e:d1:c3:0a:0a:f8:51:2a:cd:6f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:26 2024 GMT
            Not After : Mar  4 18:06:26 2025 GMT
        Subject: CN=21DD68EAFD983FB03CEF9B72ECF1E180DC085719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:e2:28:ef:b8:a9:ad:46:d5:98:68:9f:ab:
                    62:5b:4f:1c:e6:a6:c4:1b:a6:eb:c9:b5:f1:20:85:
                    7e:70:27:13:c2:b8:93:5d:bf:f4:a8:b9:c6:08:90:
                    00:2b:8c:87:5f:3a:6b:ec:ba:73:27:05:7e:4f:03:
                    a6:77:34:92:f0:ff:b3:ed:a5:48:bc:e9:99:14:13:
                    f2:7c:c6:6c:45:38:a7:4d:49:11:6d:64:23:0b:4c:
                    85:8b:40:7b:04:4e:35:29:0a:cd:72:66:b3:58:28:
                    31:35:82:89:e6:69:a8:41:97:1c:f2:ed:07:f6:a3:
                    39:22:23:c2:82:07:9d:ba:24:78:c7:ee:d4:52:83:
                    4a:5c:51:b0:f4:64:3e:1a:d5:31:c5:7c:8b:7b:26:
                    64:43:8b:af:83:40:93:b6:0c:79:90:01:bd:7e:26:
                    dc:f5:49:bb:34:cf:b4:46:57:23:69:0a:22:0f:87:
                    89:19:7b:f2:1f:c8:23:7f:43:b4:c5:93:38:c0:01:
                    89:3e:14:49:3e:32:8d:ee:23:ca:7d:f3:5f:e5:9e:
                    cc:4f:db:38:18:ba:03:12:e7:8e:bd:82:e2:54:b3:
                    c4:a8:fe:d8:68:a3:c0:5f:a3:af:1e:4a:18:2c:30:
                    60:03:2e:6f:74:c0:75:7f:c7:27:34:0f:67:5a:f9:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:68:EA:FD:98:3F:B0:3C:EF:9B:72:EC:F1:E1:80:DC:08:57:19
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135362e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:46:05:c7:b2:77:b1:50:25:0f:56:d0:d1:7f:27:2c:f4:a0:
         2a:fe:14:cf:f8:cd:d6:c4:a6:f4:aa:b6:e3:55:af:7f:2b:a7:
         e4:8d:97:61:0a:cc:69:60:f1:c1:44:4d:b4:dc:17:cf:6b:f0:
         42:29:6c:0d:8d:cd:a6:c9:1c:06:21:cd:40:9c:0f:bb:85:e4:
         f9:40:4b:cb:26:9f:7e:35:83:34:19:22:fa:a9:f7:7e:5c:d7:
         ee:7b:9e:16:f4:31:67:c9:12:70:1f:ee:e8:cf:97:06:55:90:
         e6:fa:02:04:31:4a:3c:c6:00:da:63:87:71:cb:74:88:bf:d4:
         13:7c:34:d6:35:a6:c9:72:dd:d8:99:d6:b3:cd:06:21:ec:1e:
         8b:05:6e:22:7c:48:39:37:de:4f:c1:44:6d:42:ad:d1:cd:96:
         81:03:0c:13:f0:a8:01:c9:84:1f:25:ee:01:49:8d:08:a3:db:
         bd:ea:24:58:a9:52:fc:ff:75:60:2b:3d:78:85:04:74:ba:31:
         14:78:88:e1:8c:d7:97:f1:bc:ce:ca:bc:69:56:43:e2:ea:e7:
         c2:45:31:d2:3a:b5:22:f3:d0:f2:ee:54:e5:92:ca:5a:70:77:
         ee:aa:bf:06:57:8a:ed:1e:ed:ec:da:b6:49:59:b4:95:94:14:
         1e:b6:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org