Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa
File:                     3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          ya0seQ635k+cyGnJOlmqP2heAB64ljzHEj3Z54UMInU=
Subject key identifier:   7A:22:8F:EF:AB:04:B0:32:DA:CE:F9:B7:FF:49:FE:C7:7F:A4:4D:E2
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       735FDD498922B45F42E3D5E718BD7BD91BBEF904
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 18:06:27 +0000
ROA not before:           Tue 05 Mar 2024 18:01:27 +0000
ROA not after:            Tue 04 Mar 2025 18:06:27 +0000
asID:                     262197
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5f:dd:49:89:22:b4:5f:42:e3:d5:e7:18:bd:7b:d9:1b:be:f9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:27 2024 GMT
            Not After : Mar  4 18:06:27 2025 GMT
        Subject: CN=7A228FEFAB04B032DACEF9B7FF49FEC77FA44DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:41:ea:6e:d5:90:5c:0d:db:f8:5d:b4:44:
                    ed:74:24:cc:1f:13:ae:1a:70:49:28:88:ac:64:2f:
                    ea:4a:b2:eb:96:07:4e:7f:11:7d:a9:6d:ac:0a:9f:
                    0d:6d:b5:9d:2a:80:b3:d4:00:5e:e4:15:63:cc:86:
                    02:21:28:d5:0d:0f:86:24:08:36:06:af:8f:2c:ad:
                    32:2d:9e:0a:b6:60:b0:4e:55:14:a0:68:c1:89:31:
                    ee:f8:4d:a8:95:fe:b0:d6:f9:dc:24:cf:ca:17:50:
                    8e:48:4e:4c:8e:6b:24:d6:61:ec:c1:11:cb:99:71:
                    cd:30:b9:38:98:6c:a1:37:d0:6d:44:6e:0e:b7:51:
                    bb:0c:4b:60:ef:ec:d9:77:f8:9b:b7:61:bf:e9:d0:
                    21:35:e8:19:8d:8b:39:55:a0:fd:72:84:ab:96:4f:
                    e2:d0:6a:26:61:2b:d1:dd:30:78:9f:34:a2:41:f0:
                    68:69:de:9a:1f:9f:11:9a:10:4e:50:63:65:8f:7c:
                    6d:17:87:1f:85:e9:42:61:ed:13:ac:f6:33:63:4d:
                    52:88:47:a4:4c:b1:8a:df:6d:2f:42:66:db:a7:f8:
                    7b:2b:ae:bc:d6:b2:bb:fa:bf:8f:1b:d3:8b:15:42:
                    19:9c:f2:c0:14:aa:d3:cc:d1:cb:66:ce:5c:71:1e:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:22:8F:EF:AB:04:B0:32:DA:CE:F9:B7:FF:49:FE:C7:7F:A4:4D:E2
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5b:0e:f9:5a:d4:e2:47:89:e9:13:97:60:f2:f3:77:28:b5:
         24:59:4f:7c:e7:31:e9:6e:aa:c9:46:ee:24:81:f1:55:e2:34:
         c4:7e:68:56:71:f2:0e:9c:c9:08:7a:5d:bb:2e:0e:d0:f6:92:
         bb:87:a2:83:51:5f:c7:22:7b:2b:df:67:45:5b:bd:d4:4f:81:
         a7:91:69:56:cd:8b:6b:b3:42:88:ab:73:68:40:2f:76:aa:f9:
         74:e4:7f:6f:08:b6:fa:9b:d4:a3:42:94:ae:58:5d:55:34:18:
         22:5d:b1:b6:e1:8b:9c:3d:80:2f:72:10:f1:85:ab:2e:d9:6b:
         8a:78:42:9d:2b:c0:4b:08:c5:4f:75:9b:10:d1:a6:30:16:6a:
         67:86:78:33:e5:1e:04:2d:b1:99:e7:38:79:09:a8:1b:0e:a0:
         7c:86:a2:6a:ce:5a:1f:f2:0f:4d:be:bf:68:e6:7b:71:01:29:
         47:34:16:57:8c:25:fe:e8:4a:27:e8:6a:4d:71:c3:f8:ff:2c:
         c0:27:18:e0:5d:7b:6d:74:12:77:fb:67:2d:05:13:54:4a:da:
         5a:f0:a5:ac:3e:7e:fe:47:20:74:2a:53:df:21:52:1b:4a:0e:
         3d:f1:07:50:d8:31:b4:49:19:9b:ed:74:51:df:3d:21:47:b8:
         28:64:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org