Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138362e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3138362e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          w8AWC3oUHwG+taqDG6SpSkz0lcdTx6XaSPdgVjKq2Co=
Subject key identifier:   53:08:C7:FE:94:D7:35:E0:1A:7A:90:BD:B3:BB:56:F0:70:D2:9C:B3
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       227A01E0EC3E1133628F2E8E21AF2CCAB1A41770
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138362e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:28 +0000
ROA not before:           Tue 05 Mar 2024 18:01:28 +0000
ROA not after:            Tue 04 Mar 2025 18:06:28 +0000
asID:                     20299
IP address blocks:        200.30.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:01:e0:ec:3e:11:33:62:8f:2e:8e:21:af:2c:ca:b1:a4:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:28 2024 GMT
            Not After : Mar  4 18:06:28 2025 GMT
        Subject: CN=5308C7FE94D735E01A7A90BDB3BB56F070D29CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:ec:1a:01:1f:25:b7:8a:c7:da:6a:b7:d1:
                    c3:13:63:c7:43:e1:ce:4b:8f:b4:02:58:4c:21:fc:
                    db:6a:96:11:9f:f7:da:a9:35:f9:3b:00:0b:90:a8:
                    5b:34:8f:7f:a6:bf:61:5a:97:88:29:79:b4:d7:69:
                    06:fa:68:98:0e:21:5f:f0:a0:d7:1c:3f:02:a3:8d:
                    1d:d1:cf:32:da:82:1e:ed:6a:1f:8f:30:be:84:db:
                    62:c7:27:1b:ff:48:e4:3d:77:be:2a:54:b3:6c:dd:
                    4d:f0:6a:06:ab:26:2f:0e:f8:fd:a7:04:b9:c4:2a:
                    fc:c0:69:22:5f:4d:b7:25:15:1b:34:07:38:76:1e:
                    de:2b:21:d6:76:18:52:c1:07:f1:04:2c:e4:b3:01:
                    5c:c1:73:17:98:24:d2:5e:60:09:70:5d:f2:ae:cf:
                    18:7d:c5:4c:3f:87:3e:5f:81:12:70:e2:e8:bc:8f:
                    3e:d0:b3:af:c1:ed:d2:5b:1d:34:35:a8:66:4d:f5:
                    c0:e6:33:d8:33:f1:6c:8a:98:1b:f6:91:c4:f8:ec:
                    b5:a1:d8:7d:c1:5a:19:44:68:0f:af:0b:3f:6e:4d:
                    e8:27:40:0e:b6:6f:9b:a1:ef:0e:5e:d7:63:e1:f2:
                    2f:68:c5:e0:5c:ec:4d:69:ae:4d:1b:0d:0f:88:d8:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:C7:FE:94:D7:35:E0:1A:7A:90:BD:B3:BB:56:F0:70:D2:9C:B3
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138362e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:48:20:ec:cb:66:c9:6e:d9:c2:8f:7c:11:5c:76:e6:11:
         a4:12:ea:a9:25:2a:99:b1:0b:67:5e:a0:63:6c:8d:11:03:43:
         78:1f:d8:e6:e1:a5:90:d4:73:6b:d3:7a:38:00:bc:c2:fa:36:
         29:b0:66:ba:80:0a:06:c9:70:29:49:6e:46:65:c1:ac:44:4e:
         ef:0e:81:ad:26:a0:70:46:dd:21:73:9f:12:f3:f2:20:85:ad:
         e8:7c:72:f9:a7:a1:d2:51:01:0a:85:89:9e:6a:3e:2e:cc:62:
         29:c2:a3:e2:e8:1a:dd:be:4d:3c:90:52:83:42:58:68:8a:22:
         5f:49:aa:09:66:1e:47:45:bf:ee:95:8b:d9:12:4d:f7:02:8d:
         dc:b9:fa:d0:8e:21:30:c5:45:77:e7:61:58:e6:9e:7c:3f:2a:
         17:36:47:0b:7e:ce:2b:20:9e:c0:4e:bc:6f:e5:8d:c6:28:f0:
         67:0e:f3:8a:58:8c:ee:05:26:f5:4c:73:d2:8b:c1:2d:7a:53:
         f6:e2:c1:6b:f9:a2:cf:b1:d2:17:b1:54:fe:62:c6:1e:77:2a:
         2d:61:65:0d:6b:41:0c:00:5c:12:d7:fc:c4:3f:0b:9d:68:25:
         5d:6f:c1:4b:5d:34:0e:23:1a:bc:5e:3c:ab:dc:26:54:24:08:
         cc:b1:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:25:22 2024 by rpki-client on console-fra.rpki-client.org