Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138312e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3138312e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          TgVnCwggRgBD0yPRPRqu+VLTxs0JzKotkWgUYuD6S0s=
Subject key identifier:   0D:CA:B1:1F:B4:A6:98:37:4A:EF:AC:95:E8:3E:01:56:4D:B7:E6:6C
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       1D2B5B506C43E03739DBCE1C356C34F13AF70E88
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138312e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:21 +0000
ROA not before:           Tue 05 Mar 2024 18:01:21 +0000
ROA not after:            Tue 04 Mar 2025 18:06:21 +0000
asID:                     20299
IP address blocks:        200.30.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2b:5b:50:6c:43:e0:37:39:db:ce:1c:35:6c:34:f1:3a:f7:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:21 2024 GMT
            Not After : Mar  4 18:06:21 2025 GMT
        Subject: CN=0DCAB11FB4A698374AEFAC95E83E01564DB7E66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:ff:96:27:70:e1:4a:12:a9:a3:56:b0:8c:
                    42:26:79:5d:88:9b:ee:23:8b:90:de:e6:97:59:64:
                    58:cc:7c:54:29:63:18:49:50:9c:72:c8:4c:b7:5f:
                    6e:b8:12:8c:53:f9:83:92:48:1e:6b:49:cb:46:58:
                    d5:18:6c:a8:78:b0:4e:a4:d4:1f:52:2a:70:a8:cf:
                    a4:11:21:65:2f:c9:8e:75:11:9f:99:6e:b0:08:37:
                    23:c7:9c:d1:79:de:66:13:23:46:63:c1:6c:a1:eb:
                    e5:91:17:58:37:3e:03:ee:da:6a:b0:01:d3:c3:71:
                    a7:0a:d8:43:2a:fc:65:1e:15:72:b0:2c:73:8f:71:
                    ff:ba:6e:91:cd:eb:6a:ea:a9:e6:28:fa:38:7d:57:
                    fa:28:e5:a9:88:6e:88:39:13:f5:b3:eb:9f:60:b6:
                    6b:64:d8:51:a3:13:4d:72:e1:ef:14:32:9d:de:be:
                    34:a6:86:27:de:4a:f2:56:bd:70:f4:13:ed:ed:ab:
                    0d:45:d6:e1:ea:5d:12:f1:53:87:84:92:56:35:7e:
                    76:54:b3:81:4a:95:6b:6c:9d:6f:73:2e:46:e3:e1:
                    35:da:5c:50:1a:f5:b6:fa:70:c8:c0:69:07:ce:87:
                    33:c6:02:ec:d1:39:24:fa:67:13:5f:3f:d4:67:e7:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:B1:1F:B4:A6:98:37:4A:EF:AC:95:E8:3E:01:56:4D:B7:E6:6C
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138312e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:3e:49:60:20:2a:c0:6c:d4:42:32:d2:eb:ee:44:fc:ca:08:
         47:db:23:6f:19:51:2f:12:d5:00:39:2c:d2:4b:af:ce:36:d3:
         2a:ec:97:b6:0f:4b:23:5e:25:87:51:86:81:b4:59:40:ab:b8:
         7c:ee:b4:2f:aa:a4:d2:ca:72:5d:ae:b8:37:60:a9:24:00:5d:
         d8:44:73:60:dc:76:de:28:7d:27:21:69:e6:15:27:c0:f9:1c:
         d7:c3:9a:1d:4c:cc:72:61:45:60:af:e1:1f:5f:69:8d:4b:e7:
         ea:74:4b:77:f8:39:2b:5e:15:c5:1e:19:f2:c9:27:21:3f:2e:
         ac:d7:02:25:df:5f:41:be:f3:10:18:87:51:d9:10:21:9e:f0:
         de:ed:f3:31:9f:55:3c:08:52:d4:e8:72:e8:75:d9:b3:c0:38:
         3d:49:5f:69:1d:d9:c0:b1:a7:61:5d:ff:a7:88:3e:ab:db:a9:
         2c:0b:c1:dd:e9:2e:0d:1d:7e:5a:51:d1:5d:f9:2c:0b:92:a2:
         b5:5d:72:18:ac:6a:41:d2:cd:10:da:f6:5f:3a:cd:5b:df:2d:
         b1:4f:8b:b3:68:1e:4a:61:2b:c0:85:15:c4:68:a6:5b:4e:6b:
         5a:e2:4a:5a:b9:ed:4d:8c:89:ad:0e:05:1e:0a:e4:b1:de:3d:
         47:79:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:51:03 2024 by rpki-client on console-ams.rpki-client.org