Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136352e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3136352e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          3I1B8bAAshrlJkzRNLb8XcF5FSx1vygzntkmL7IQrME=
Subject key identifier:   20:84:45:9F:FF:AF:18:23:E6:DC:CA:C2:91:38:61:A9:88:75:9D:B0
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       421F4E0F70D870A4451E9CC3961842499616F4A7
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136352e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:06:28 +0000
ROA not before:           Tue 05 Mar 2024 18:01:28 +0000
ROA not after:            Tue 04 Mar 2025 18:06:28 +0000
asID:                     27742
IP address blocks:        200.30.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1f:4e:0f:70:d8:70:a4:45:1e:9c:c3:96:18:42:49:96:16:f4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:28 2024 GMT
            Not After : Mar  4 18:06:28 2025 GMT
        Subject: CN=2084459FFFAF1823E6DCCAC2913861A988759DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:0c:3f:e8:46:79:4d:51:01:19:ed:15:5a:
                    13:6b:9f:c4:5f:ce:39:f3:80:19:d4:72:d4:6c:73:
                    99:3d:85:e6:ea:16:12:84:c2:65:9c:0f:93:f5:fa:
                    37:ca:c8:b2:6b:27:b1:5c:b5:da:44:c8:41:19:c4:
                    d4:89:dc:8c:8b:4e:aa:40:6b:81:38:94:e8:35:0e:
                    88:11:df:ae:c0:17:76:88:ae:50:56:fb:0a:5d:74:
                    68:64:6c:2b:4a:ae:7e:33:ff:61:e1:2d:f0:5a:eb:
                    3e:05:23:07:39:87:40:00:00:88:15:9b:d2:de:7d:
                    17:8f:ab:dd:e6:3d:78:4b:7f:9f:db:f9:15:88:74:
                    ff:43:24:34:5f:a1:2f:3b:4b:9d:71:64:a0:af:12:
                    31:d3:a2:04:87:67:a3:6b:5c:f3:2b:0d:82:c4:3d:
                    24:c5:72:2d:02:eb:6e:9c:bb:d7:77:9f:a3:e9:2e:
                    c1:45:07:26:6b:bb:98:4c:f1:0f:a1:8e:c6:e8:62:
                    54:bd:d2:a2:a1:ed:2e:ef:b9:f3:43:4b:33:f8:b6:
                    ea:9a:e1:3e:15:53:1e:13:ea:fe:9f:be:ce:1d:c7:
                    c4:33:6d:21:c4:14:ae:55:6f:0d:f4:e9:91:16:9d:
                    28:a1:ae:4b:d3:3a:d8:cf:0f:9f:99:9f:1e:ff:6c:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:84:45:9F:FF:AF:18:23:E6:DC:CA:C2:91:38:61:A9:88:75:9D:B0
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3136352e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:40:f2:83:0b:80:1c:e0:3c:35:9c:81:f0:e1:82:96:82:
         49:77:ff:df:ee:85:34:f7:c4:92:ff:84:43:8b:01:ba:ff:27:
         03:0c:e1:ac:9b:f7:8f:ca:72:98:ee:8d:8b:4c:5e:d2:c2:3c:
         74:8a:08:76:13:74:aa:3b:dc:48:b0:d8:1c:b1:89:c3:98:ef:
         6c:67:8f:ea:76:0b:ac:81:36:d6:35:3d:72:c4:b2:7b:0e:94:
         1a:be:4b:e2:bf:95:ef:b0:f3:2a:fb:29:5d:d7:fb:4a:28:e5:
         24:ef:19:c9:b0:7c:56:86:56:66:82:b4:72:c9:57:06:0f:76:
         c7:6d:11:c9:f7:e0:6f:cb:ee:3b:79:a8:6e:0b:dc:41:c9:ba:
         ce:d7:ee:97:e0:71:56:d2:27:58:ad:4e:a4:38:2e:cc:6b:ed:
         ad:04:7d:a5:4a:5a:69:e1:14:78:63:57:50:5c:07:3b:bd:92:
         65:a7:33:d3:7b:42:80:85:17:af:8f:89:81:a2:67:34:30:e7:
         bb:3b:52:70:5e:2e:d7:12:9f:ee:dd:56:c1:41:97:3e:58:10:
         77:4b:6d:c0:81:7b:b4:c5:3f:4c:4f:3d:72:0d:6e:b9:a3:0b:
         33:74:ed:de:44:48:dd:05:3d:b7:b0:76:ab:e1:91:cd:54:60:
         f3:73:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 23:56:33 2024 by rpki-client on console-fra.rpki-client.org