Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137312e302f32342d3234203d3e203237373733.roa
File:                     3230302e33302e3137312e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          oKZla33h0uybDnVclEw0qVIrOncZbYtNTpmf2D6eK1M=
Subject key identifier:   3B:24:1C:44:69:87:16:5C:B3:5F:27:CA:55:F1:E5:A3:AC:6A:E3:3A
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       74938669949A9FD296C81F633911B17662216622
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137312e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     27773
IP address blocks:        200.30.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:93:86:69:94:9a:9f:d2:96:c8:1f:63:39:11:b1:76:62:21:66:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=3B241C446987165CB35F27CA55F1E5A3AC6AE33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:de:4c:f6:52:4a:dc:1b:04:d4:5c:76:33:
                    55:45:c7:93:bb:78:34:41:fb:88:45:fd:44:33:61:
                    3d:91:6f:37:27:8a:04:dd:3b:37:f1:d3:f3:49:d0:
                    14:c8:42:60:6e:9a:7c:26:a2:c3:75:79:92:12:5b:
                    9a:97:13:38:a4:fa:4c:3c:a8:5e:eb:8a:62:2e:50:
                    17:60:c6:e2:e9:ae:d4:51:7e:77:c7:11:49:e3:4f:
                    f1:1f:5a:bb:87:26:3e:d5:a9:b3:8d:5f:39:da:ff:
                    8d:3c:d0:d8:00:b0:2a:9a:87:a9:02:9d:e1:2c:3e:
                    0b:22:2f:0f:2e:fc:f1:46:90:92:0d:6e:a0:53:b6:
                    11:18:82:b2:51:18:37:53:f4:68:f2:44:1d:38:4d:
                    24:c1:f1:7d:e4:2c:0f:5a:2d:ca:d9:99:52:ed:0c:
                    23:0c:c6:10:a9:c7:e9:aa:4e:03:e8:15:2e:ea:a6:
                    bb:5f:ae:c9:fc:60:81:84:c6:8f:2e:8c:6b:67:93:
                    e3:20:19:12:ac:a2:05:44:1b:b1:4f:bf:8b:b6:3e:
                    be:7f:77:30:1a:4e:43:0b:21:f8:42:5a:d0:d7:f3:
                    33:b5:f6:99:82:cd:25:b8:1c:bd:eb:bc:7e:81:15:
                    6f:20:f8:f5:07:8d:03:16:47:bd:8c:9c:ef:e2:4f:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:1C:44:69:87:16:5C:B3:5F:27:CA:55:F1:E5:A3:AC:6A:E3:3A
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137312e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7c:d6:eb:a5:60:d7:9d:cc:71:26:bd:22:e4:c3:07:a6:54:
         6a:98:90:c6:95:0e:15:a9:a0:94:32:eb:f5:2b:57:d6:b4:2f:
         72:f5:88:7e:c0:ba:ff:f1:61:cc:8f:eb:a6:07:ec:d8:25:e8:
         a4:9b:bf:b6:4f:97:87:06:d9:ab:ac:ec:ca:f1:05:52:83:36:
         78:83:cf:3c:38:ff:41:44:9c:db:6b:a0:89:81:bd:35:59:0a:
         5b:c6:22:0b:f1:eb:4d:cb:dd:7d:9d:ed:85:67:aa:b8:7f:52:
         1b:b9:da:a6:7e:07:e4:f9:56:65:43:68:a3:31:da:4b:5f:48:
         85:38:cc:c4:c6:d2:93:10:69:9f:03:e4:77:76:fb:dd:4d:81:
         31:bd:ee:83:c4:f5:9f:c5:b6:9d:f6:f5:30:54:eb:92:40:b6:
         e4:98:c7:6f:d9:3f:6f:68:b9:2f:22:8a:ba:ba:05:a5:1c:65:
         69:bc:8a:02:4e:96:e6:49:bb:1c:f5:78:f3:97:11:aa:ce:6b:
         55:16:47:c7:52:47:fa:74:1e:b9:7a:56:56:99:48:e3:1c:86:
         f6:29:4a:f4:dc:88:35:2e:04:ff:8f:24:42:aa:cb:e0:c9:41:
         9b:0d:69:33:ab:2d:ca:71:5b:6c:e8:ea:93:76:2c:65:9c:a9:
         4c:cb:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org