Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3138392e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          W/ZIXBoHtNh8nsmKiKxAvklBB89nhO2fjnFYRGXlq4U=
Subject key identifier:   54:9F:39:4F:BF:37:1B:F4:64:3D:41:87:41:35:6F:9D:8C:48:68:B0
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       2624E219382B98A7F5DEBE84BAB6D8BF08A839C5
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     20299
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:24:e2:19:38:2b:98:a7:f5:de:be:84:ba:b6:d8:bf:08:a8:39:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=549F394FBF371BF4643D418741356F9D8C4868B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:f2:73:33:37:4c:cf:95:7d:7d:3b:55:33:
                    b2:d7:52:f8:4c:41:25:7d:1f:67:07:7f:4a:ae:38:
                    39:98:c2:94:f6:16:f9:e2:28:24:14:7f:29:b6:07:
                    09:13:d7:cf:74:c8:bf:17:cb:e7:3f:e5:76:75:6f:
                    f9:47:a7:64:bc:80:a2:64:0f:46:09:98:56:58:55:
                    a6:78:06:44:e1:6a:c3:76:47:00:79:d6:64:f5:c2:
                    57:55:a4:1c:af:07:61:43:bc:7c:4f:62:f8:50:9f:
                    8f:5b:37:5f:65:1a:e4:c6:36:29:74:c2:bc:ae:9e:
                    6b:6f:33:64:f2:e5:e2:34:9d:fd:de:ea:02:d8:92:
                    dc:34:79:87:c0:ee:3d:b5:f6:9c:4c:90:8a:8d:cc:
                    c1:41:ab:81:b4:10:b2:17:1b:c2:b6:3d:55:c8:e3:
                    4c:44:33:35:21:6c:92:3f:82:07:a4:94:f8:03:ee:
                    78:d8:e5:40:7d:f0:28:1a:43:3c:8e:0a:23:43:e9:
                    70:e9:9a:72:e8:30:1e:03:07:37:ce:ee:9a:14:13:
                    fb:95:bf:c7:6a:45:ef:1a:32:b4:2d:57:36:58:8f:
                    c6:e0:ce:ad:f5:cc:95:c0:a3:f9:07:14:9a:40:16:
                    f6:47:93:b1:49:0d:b8:bc:7d:5b:ae:61:20:1b:eb:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9F:39:4F:BF:37:1B:F4:64:3D:41:87:41:35:6F:9D:8C:48:68:B0
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:db:df:20:54:e7:e4:1a:6f:98:fc:ef:3a:89:15:43:9c:28:
         16:c1:c2:ac:46:57:de:52:f3:b3:dd:31:6a:9f:2a:77:ea:8a:
         11:26:7d:8f:52:fb:e2:66:a4:8e:b2:e8:7a:6b:01:c3:a6:25:
         a1:3a:10:5a:a7:81:7f:6a:b1:0e:93:d9:a2:ab:4b:4f:6f:b8:
         d2:c1:6d:16:92:1c:78:58:38:b5:ef:bb:39:30:9f:1b:7c:54:
         62:43:1c:d8:9d:ff:f9:70:76:26:7b:65:2f:5e:24:9b:78:57:
         94:b6:0a:37:13:cf:1a:51:ea:cb:7a:18:28:03:0e:e4:22:4b:
         46:89:94:27:17:40:7d:d0:29:6f:73:57:81:c0:5d:1e:39:a2:
         1f:dc:4e:73:6d:18:bf:a8:58:3f:2c:15:35:19:9d:b7:36:45:
         a7:3c:88:e6:53:30:65:ff:2f:57:1b:ce:28:08:06:17:9c:05:
         2d:11:4b:ec:96:74:03:e7:d1:88:06:1d:62:bf:3d:db:ce:fc:
         2f:eb:ef:69:13:04:b0:fa:eb:75:73:5a:70:68:ef:ed:bb:4d:
         b3:43:b4:e4:c8:2f:2d:b4:bc:38:a6:41:c5:9b:ae:92:8b:5d:
         35:a3:25:66:9c:bc:d0:dd:8c:90:92:66:be:69:63:72:64:e3:
         37:bb:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org