Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135372e302f32342d3234203d3e203233333833.roa
File:                     3230302e33302e3135372e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          +1ywMDMW7WF2AxF4ahfh93pGDSz4N6dC3teTiwPs1uc=
Subject key identifier:   9A:18:1A:7B:6F:E5:88:D8:43:38:03:DC:E9:5F:03:38:87:B4:2E:1D
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       25338D46C2249AD148132A44DAC82BB63B713772
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135372e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:06:30 +0000
ROA not before:           Tue 05 Mar 2024 18:01:30 +0000
ROA not after:            Tue 04 Mar 2025 18:06:30 +0000
asID:                     23383
IP address blocks:        200.30.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:33:8d:46:c2:24:9a:d1:48:13:2a:44:da:c8:2b:b6:3b:71:37:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:30 2024 GMT
            Not After : Mar  4 18:06:30 2025 GMT
        Subject: CN=9A181A7B6FE588D8433803DCE95F033887B42E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:92:43:b5:89:69:ca:90:e9:58:b1:ba:61:
                    de:81:6b:ed:40:fe:17:e0:84:73:d6:20:ff:3b:5a:
                    e8:e2:02:07:be:6c:54:69:c8:c4:d7:a4:68:d4:55:
                    f4:89:3a:51:9f:6f:45:11:26:c5:de:30:cc:e7:77:
                    ca:c5:90:50:33:35:63:1f:db:19:86:7c:8c:dd:2a:
                    74:45:e3:d4:b2:46:90:c3:72:8a:f4:4a:69:6e:b8:
                    23:4e:c8:f0:ad:75:91:3e:a6:76:7e:43:67:1d:38:
                    81:11:f8:08:d2:69:48:95:3a:27:26:b1:3a:4a:4f:
                    63:45:de:23:07:2c:27:7b:b2:c0:22:ed:7a:19:42:
                    b9:4e:3b:8c:31:48:85:c1:90:0a:16:74:6c:30:bb:
                    8d:77:92:6a:0d:71:6e:36:04:00:8d:ec:2f:8a:28:
                    3a:ad:5b:37:df:4c:59:00:ef:31:0e:d7:d2:77:78:
                    96:9c:ac:9d:54:c8:67:b2:06:41:c9:3e:1e:2b:45:
                    77:5a:45:fc:45:07:f0:55:ee:db:53:88:0a:f7:d0:
                    ea:e4:88:3d:46:2c:6b:1a:0a:45:cf:39:ed:d2:c9:
                    54:4d:8e:21:fd:b1:f3:0f:9a:8e:ba:ac:bc:a3:8a:
                    c7:76:77:ef:d9:5a:f3:6e:9b:59:00:20:0e:84:b5:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:1A:7B:6F:E5:88:D8:43:38:03:DC:E9:5F:03:38:87:B4:2E:1D
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135372e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:28:5b:84:c4:af:94:72:c6:ce:b8:5e:95:a8:8e:83:57:
         83:df:3c:dc:33:2b:fd:63:ed:10:0b:22:68:b6:1f:91:04:85:
         5f:c1:76:a9:43:21:e0:f8:78:f2:b4:1b:90:c0:79:86:55:a4:
         ac:18:d8:6e:ff:c1:08:91:8a:43:31:15:7a:e6:d0:1b:d7:6b:
         6b:66:d2:57:c4:a6:b7:73:82:e8:e4:d9:b3:90:7e:23:2f:c0:
         cc:70:04:39:1e:e4:ef:5d:83:03:69:7c:69:85:c8:8c:b0:76:
         3f:81:8d:58:63:45:ef:58:b3:76:d0:66:f6:ef:17:89:bb:92:
         09:84:4c:d2:f5:29:11:99:4f:22:32:39:b2:42:d0:b7:65:1d:
         e0:1b:f2:04:23:8a:56:5b:ad:f7:78:12:e5:78:02:2e:d0:83:
         8c:72:b2:1e:22:28:37:1d:c1:d3:5a:41:83:bb:5d:1c:e9:67:
         0e:4f:2e:17:85:96:5e:7b:04:28:f9:a3:06:4c:2d:cf:15:94:
         d0:e2:57:6d:78:66:d1:05:66:4f:a6:2b:f6:72:89:ce:5e:85:
         1e:95:41:ec:c3:73:a4:3e:b1:22:3d:4e:3b:28:9c:74:2e:d0:
         02:5c:db:cd:51:da:73:4e:98:1a:61:95:12:3e:ca:5b:02:2a:
         ab:e0:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org