Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138342e302f32342d3234203d3e20323732313130.roa
File:                     3230302e32362e3138342e302f32342d3234203d3e20323732313130.roa (raw, json)
Hash identifier:          J39NZV0n6TluXJTTApLGqD6pMBhrM3HgszOZLdlSDs0=
Subject key identifier:   78:94:B1:F5:BF:0D:B6:66:5D:DB:01:5A:1A:64:8A:0F:90:24:30:97
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       62701EE2650C19CFB94E72791C7749BE2A3BBD1B
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138342e302f32342d3234203d3e20323732313130.roa
Signing time:             Mon 01 Apr 2024 19:55:00 +0000
ROA not before:           Mon 01 Apr 2024 19:50:00 +0000
ROA not after:            Mon 31 Mar 2025 19:55:00 +0000
asID:                     272110
IP address blocks:        200.26.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Dec 2024 04:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:70:1e:e2:65:0c:19:cf:b9:4e:72:79:1c:77:49:be:2a:3b:bd:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Apr  1 19:50:00 2024 GMT
            Not After : Mar 31 19:55:00 2025 GMT
        Subject: CN=7894B1F5BF0DB6665DDB015A1A648A0F90243097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:c8:3f:8e:4a:a6:bb:74:39:bf:c5:06:e3:
                    51:8b:24:ee:cb:da:ba:3b:f9:9c:8b:4d:c1:d1:06:
                    cf:c6:9e:ad:54:d7:9a:26:48:19:ec:82:01:61:53:
                    23:e5:3d:63:bb:b0:99:36:be:51:55:46:17:ef:5f:
                    f4:87:f1:5a:4d:af:e4:0b:0f:f0:8f:b0:c8:4a:38:
                    97:4f:8d:aa:cf:59:4f:c7:ab:fa:f1:ae:55:eb:a6:
                    82:ec:8d:a5:66:d3:c5:74:50:ae:3a:82:a8:53:55:
                    a8:cc:56:1d:81:1b:75:a4:46:a0:2b:d9:9f:d6:34:
                    58:ee:50:0f:da:96:4e:f8:b3:83:d8:11:49:27:59:
                    e3:1c:4b:3a:d6:15:3a:4b:08:fc:cd:d8:c1:c0:f3:
                    76:b4:49:f5:cc:34:a8:1b:09:fd:2f:aa:8f:48:c6:
                    72:cf:33:ed:26:f7:d2:e2:a8:11:8c:10:d9:12:90:
                    a1:9b:2e:3f:fe:9b:55:e3:12:96:77:74:23:1f:d9:
                    31:dd:e8:93:15:6d:27:ae:be:a0:57:fb:a6:cd:15:
                    d9:6e:fc:90:6c:d7:a0:4e:6d:86:c3:de:a5:51:e5:
                    e1:96:b7:c0:fc:99:e7:04:19:d5:5a:ed:d8:f2:79:
                    b1:d1:4b:84:63:23:f4:e0:1b:0b:4c:09:2c:a0:a0:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:B1:F5:BF:0D:B6:66:5D:DB:01:5A:1A:64:8A:0F:90:24:30:97
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138342e302f32342d3234203d3e20323732313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b5:55:87:b8:5c:8b:bd:34:02:8d:ef:4d:66:51:58:b6:3a:
         8b:3c:4a:22:59:d8:f5:4d:3b:4a:e2:c7:71:ea:a0:64:dd:8b:
         de:4e:79:29:58:68:7a:33:6c:89:6a:fd:ec:62:10:95:24:e9:
         63:11:ec:3f:14:68:02:b9:94:a6:5f:46:b9:a9:e1:33:dd:f2:
         a4:19:13:57:3d:7b:54:2b:c3:d9:40:23:95:88:c4:56:3b:13:
         30:6b:9c:af:03:03:25:36:c2:42:d8:ae:88:62:fb:7e:5b:23:
         56:53:3b:b9:5d:f7:f5:fc:2d:c1:08:56:60:61:eb:a4:18:c3:
         0e:e5:29:4c:03:70:1d:56:0f:a2:9b:d4:7f:eb:85:17:a7:9c:
         53:0b:08:8a:c9:94:f0:e5:5e:25:f3:4a:f8:4c:f5:e5:19:c5:
         7e:19:9e:27:bd:d0:c1:dc:38:44:d9:68:80:9b:83:89:f3:9a:
         db:fb:57:c3:c8:84:36:7f:9b:7e:a6:dc:16:5f:84:fe:00:37:
         db:06:ee:53:6f:89:62:70:91:85:0f:d7:11:12:64:ca:74:67:
         d0:6c:93:4b:91:6b:90:90:23:63:b6:75:c4:9b:a3:62:29:c3:
         90:6d:bb:d1:cf:86:cf:2f:f7:6e:a3:33:40:21:f6:1c:11:56:
         b0:c4:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 18:25:35 2024 by rpki-client on console-fra.rpki-client.org