Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137302e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3137302e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          StGItglJOMGDO/g8S6d0v3YHFa0bA3JkB5isqrazJ5Y=
Subject key identifier:   D7:A8:B8:B4:98:2D:03:03:B6:6D:D0:F7:44:D4:D6:51:C2:3B:80:53
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       3D877A8CECE92EBECB9FC82902AA7B0505A7B9A1
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137302e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:06:32 +0000
ROA not before:           Tue 05 Mar 2024 18:01:32 +0000
ROA not after:            Tue 04 Mar 2025 18:06:32 +0000
asID:                     27742
IP address blocks:        200.30.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:7a:8c:ec:e9:2e:be:cb:9f:c8:29:02:aa:7b:05:05:a7:b9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:32 2024 GMT
            Not After : Mar  4 18:06:32 2025 GMT
        Subject: CN=D7A8B8B4982D0303B66DD0F744D4D651C23B8053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:56:21:23:2a:82:0e:47:c3:8c:b9:3a:de:
                    f0:51:36:0f:1c:c4:a2:13:14:77:b1:6b:2f:22:a7:
                    1d:dc:14:b8:c4:ea:80:39:27:75:a0:39:58:8d:80:
                    eb:af:ee:57:48:9c:2d:0b:5c:1a:fd:e4:9e:c6:f8:
                    75:3d:8f:60:bf:03:34:91:60:9c:97:dd:85:06:13:
                    70:1f:67:77:fe:31:35:cd:b2:09:e9:10:1a:e8:74:
                    fe:6b:ad:fd:06:e4:cc:a3:c3:b9:63:f0:f6:b8:d1:
                    be:2e:0e:ec:d2:14:a4:55:b7:a2:2f:a8:17:73:f9:
                    1d:5d:b7:80:9b:ef:50:6b:21:84:71:80:fd:ba:78:
                    c6:b6:6a:8a:19:aa:95:22:2f:cc:11:38:21:c6:9b:
                    d9:18:31:fc:a0:7e:e7:ad:34:40:aa:38:a0:19:ea:
                    0f:dd:7b:70:f8:e3:38:6f:37:2d:48:35:bc:29:5c:
                    fd:d0:48:f2:e2:69:98:d2:3c:43:c8:aa:e7:6c:00:
                    10:b6:53:2f:43:53:d3:5b:47:83:82:b3:99:35:71:
                    a1:29:e9:50:b4:01:b2:95:ef:ab:02:7a:f4:31:b7:
                    13:3f:43:80:ad:84:67:40:48:23:46:69:1d:a5:34:
                    2c:55:5a:be:8d:79:9d:de:40:63:b8:9c:e8:2c:a3:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A8:B8:B4:98:2D:03:03:B6:6D:D0:F7:44:D4:D6:51:C2:3B:80:53
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137302e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:fc:98:6d:12:ff:6e:cd:3e:fe:97:fb:78:7f:5d:11:be:
         51:e8:30:38:85:02:01:78:6e:29:bf:30:5e:18:f6:83:fe:e5:
         e8:88:b7:0d:ed:c8:b9:01:d5:fd:e6:1b:97:e8:f7:32:1d:47:
         62:4e:3b:ad:48:dd:af:7c:13:a5:fd:5f:8b:04:f1:0f:5b:e1:
         7f:1a:a5:39:d3:0d:10:f4:3f:50:41:34:79:24:a2:cc:a9:31:
         84:87:77:2f:3a:d1:21:2a:1d:57:84:ec:5e:db:fb:90:ef:85:
         ba:9d:22:9b:ef:c6:bc:3f:4f:36:cf:5c:65:10:84:97:d9:88:
         bd:81:48:98:1d:91:22:4a:08:b0:91:17:0a:cc:a3:18:0b:54:
         94:0b:51:0e:fd:09:2a:96:d8:ac:e4:74:c5:7c:f7:38:66:80:
         0b:93:e5:25:9e:03:af:54:cd:2f:d6:31:d0:5d:18:e5:ab:d7:
         63:4c:1e:cf:c8:40:f3:2a:d3:ef:ec:4e:97:7c:3c:95:9d:40:
         fc:28:e2:4b:61:99:df:dc:e3:de:56:73:b1:bc:51:4f:41:d6:
         5f:23:eb:75:1b:c3:b3:e8:bb:54:d7:cc:27:97:1d:d7:72:df:
         f8:8a:21:69:8f:ca:f7:1c:85:25:85:6c:47:a4:c5:76:9a:c1:
         9b:9b:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org