Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136342e302f32342d3234203d3e203233333833.roa
File:                     3230302e33302e3136342e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          P8p0/meSovhb9sWmLK3VpfJIeSLYeDVsPQKZOlPbUcU=
Subject key identifier:   49:1B:97:9E:E4:98:D8:37:E2:DE:E2:D7:18:B8:57:D5:6A:61:59:67
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       46C6363C36E4FCE675FEEDD685FDAB3110219D13
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136342e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:06:30 +0000
ROA not before:           Tue 05 Mar 2024 18:01:30 +0000
ROA not after:            Tue 04 Mar 2025 18:06:30 +0000
asID:                     23383
IP address blocks:        200.30.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:36:3c:36:e4:fc:e6:75:fe:ed:d6:85:fd:ab:31:10:21:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:30 2024 GMT
            Not After : Mar  4 18:06:30 2025 GMT
        Subject: CN=491B979EE498D837E2DEE2D718B857D56A615967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:78:9f:ad:2d:15:ec:26:0e:6a:04:48:cb:
                    f6:eb:c1:93:7a:bd:b6:16:18:1d:51:ed:69:2f:6d:
                    2a:93:cd:dd:5a:06:02:3a:31:e6:e6:27:9c:11:cf:
                    70:b4:0b:5c:0b:48:88:b7:ca:c6:f5:ad:d6:68:da:
                    57:1c:f5:ee:e7:11:90:c1:4e:65:21:27:a1:62:9e:
                    b6:a8:e9:be:cc:54:f7:5a:16:4b:41:4c:dc:98:c9:
                    43:f7:6d:13:56:db:df:37:7a:63:f1:6d:2d:4a:93:
                    47:37:ee:24:e8:e0:e9:33:5f:22:ee:77:1b:ce:f8:
                    b3:94:5e:1f:a2:ce:75:a6:68:68:0e:ae:46:54:84:
                    af:b6:25:9c:ec:1d:e3:c6:03:64:be:55:17:7e:4b:
                    2d:b0:cd:9f:c2:34:93:06:ac:ca:1a:c5:71:97:2d:
                    8c:57:8a:c3:2d:f7:95:d2:35:a1:15:b4:d3:f8:f6:
                    96:56:f5:b8:15:33:c8:8d:d0:1a:3d:ac:a4:00:cf:
                    6b:c5:0a:02:07:dc:f0:8c:5a:9c:bd:3a:4b:ce:54:
                    81:69:99:03:0e:8b:2f:98:fc:a0:5c:e6:29:2f:49:
                    0a:b2:44:79:f4:3a:7d:b6:7c:1a:bf:43:da:77:1d:
                    8f:57:b6:c2:66:5d:c7:67:24:10:52:35:0d:b4:83:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1B:97:9E:E4:98:D8:37:E2:DE:E2:D7:18:B8:57:D5:6A:61:59:67
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136342e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:0e:ca:a4:8c:f7:59:8c:ce:ee:e3:f5:61:64:ec:67:bc:
         93:12:14:cf:7f:08:a0:33:42:db:4a:7c:31:d8:5e:63:88:85:
         3f:df:7c:8a:56:58:23:0e:77:76:28:6d:3c:71:72:98:aa:9a:
         55:84:0e:92:19:3b:39:35:f4:be:2e:d1:ed:98:09:37:f1:fe:
         3c:90:23:ea:cc:92:e6:89:6e:01:50:30:65:01:1e:41:e6:20:
         55:ba:36:c5:08:44:af:0e:fa:26:15:86:60:fe:30:9b:4c:de:
         a3:8d:80:70:3f:79:1a:d0:51:f4:05:d2:d0:2a:b3:c1:8a:fa:
         bd:4e:67:65:ee:be:c2:55:a4:e7:40:8d:29:3a:6a:0b:ce:8c:
         a9:40:76:46:5a:86:7f:6a:99:f3:25:a7:e7:54:db:f0:30:c3:
         64:aa:2f:df:de:50:64:52:f8:a0:36:04:f6:4b:14:b5:85:c4:
         6a:ea:ca:89:12:e3:04:d6:3a:d6:32:11:84:b8:9f:6e:50:d2:
         47:78:5c:cd:c7:54:49:2c:0c:62:8b:70:15:c4:3d:ba:4f:95:
         3a:b4:2d:8d:21:30:16:da:59:62:0e:60:78:0d:59:0b:d8:00:
         6b:18:8e:05:73:64:8e:33:01:73:a7:1c:0f:06:21:53:8f:db:
         e7:a8:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org