Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136302e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3136302e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          cjGlXcyHgP2YoHbPeyZX6D6l/yY6Ex+Sbpql9hwvaIk=
Subject key identifier:   DD:7B:8F:D7:6D:7D:1C:69:86:6A:13:36:65:4F:E6:97:B8:90:A9:FD
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       0BF3A60AD586E8EA27BFA42441D98505173115FF
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136302e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:24 +0000
ROA not before:           Tue 05 Mar 2024 18:01:24 +0000
ROA not after:            Tue 04 Mar 2025 18:06:24 +0000
asID:                     20299
IP address blocks:        200.30.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f3:a6:0a:d5:86:e8:ea:27:bf:a4:24:41:d9:85:05:17:31:15:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:24 2024 GMT
            Not After : Mar  4 18:06:24 2025 GMT
        Subject: CN=DD7B8FD76D7D1C69866A1336654FE697B890A9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:5a:00:21:97:d2:30:7c:a6:f2:0a:18:8d:
                    0f:02:b7:bc:da:44:cb:f4:e2:8e:da:51:79:ee:ec:
                    9b:7a:9a:72:6d:52:06:41:98:e2:72:16:cf:b4:52:
                    84:59:86:36:1d:3d:c9:b1:65:f1:c9:b6:5c:15:ad:
                    ae:13:8b:06:5c:45:a4:78:b3:a9:b0:fd:9e:f9:56:
                    d6:f8:d4:17:d9:45:95:3f:80:25:f7:47:c6:23:9d:
                    1e:a8:f4:0c:99:88:c8:d8:7d:f5:ca:2c:59:07:cb:
                    29:dd:ec:0b:63:4b:f1:bf:17:ce:0a:03:f6:ca:97:
                    bb:c2:e9:93:9d:dd:89:51:44:87:a5:a8:57:40:23:
                    a2:6d:85:3d:b8:06:3b:46:10:d5:5a:a5:c7:82:45:
                    8e:ee:76:1e:d5:62:85:2c:0f:55:10:2b:69:e1:0f:
                    87:06:cc:8b:3c:42:7e:dd:93:87:a1:a0:d9:71:76:
                    5c:7b:ca:e5:30:02:3e:0d:f0:6e:3c:a6:57:bb:8c:
                    c0:a1:82:b3:16:7d:a1:d0:88:7a:a9:07:39:25:47:
                    ed:e2:54:34:be:71:31:00:92:c1:4d:b0:37:03:5d:
                    c5:a6:7e:d5:e0:ee:ff:56:ae:0c:93:9b:f2:a1:d7:
                    f8:f6:10:97:14:ce:cc:b6:0d:a8:14:6c:9b:47:c7:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:8F:D7:6D:7D:1C:69:86:6A:13:36:65:4F:E6:97:B8:90:A9:FD
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136302e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:65:bb:84:fc:a1:fe:20:df:dd:0c:3c:eb:b8:bf:6f:d2:
         f8:cb:74:2f:6a:9b:e8:33:2d:98:5d:9c:ec:38:af:3b:83:95:
         b6:0a:69:a9:2e:80:24:2a:13:67:dd:e5:d1:30:44:8b:3e:aa:
         f0:cc:49:ef:87:77:86:48:21:56:c8:1b:bf:2d:a0:7e:26:a4:
         9d:e0:f7:7e:f3:5a:e0:92:0f:8a:12:13:07:09:54:b1:f8:c4:
         84:60:a2:df:27:f6:48:32:27:47:2f:97:8c:f1:5d:75:01:8e:
         50:c7:f5:a6:70:39:95:19:ac:d8:7d:e1:ed:c0:2c:47:f5:89:
         3a:8f:ee:10:b1:91:df:c3:a9:ae:5b:4e:96:3c:97:ad:d0:81:
         23:7f:b8:e7:95:66:5f:03:0d:a0:9d:3a:60:65:1b:8d:6e:6e:
         a8:97:15:5d:43:03:19:72:3d:fd:fe:c5:4e:c0:1b:12:54:e7:
         0d:4f:1a:56:95:03:ec:4b:51:9c:de:c4:63:ad:20:88:d4:d0:
         85:7f:32:ae:e5:4f:ff:28:e4:66:8b:a2:4f:67:b6:a7:c3:e4:
         ba:06:f6:85:e9:e5:a1:61:00:cf:c4:dd:f1:4c:f9:9e:a0:b0:
         11:60:16:56:92:2f:c5:bd:e7:c4:3d:78:4a:78:18:17:fa:7d:
         57:af:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org