Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20323133363930.roa
File:                     3230302e32362e3138352e302f32342d3234203d3e20323133363930.roa (raw, json)
Hash identifier:          Fa79schiViN2LtdP9dTStbF+5cmcXPNoql0dQAzl0TI=
Subject key identifier:   EF:20:5E:4B:15:C9:9B:E0:A2:D4:FB:1F:E7:F7:D3:C2:5C:4E:FB:EE
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       6958118DA4BFD111ECD6AC8772062D7B12357446
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20323133363930.roa
Signing time:             Sat 21 Dec 2024 16:10:00 +0000
ROA not before:           Sat 21 Dec 2024 16:05:00 +0000
ROA not after:            Sat 20 Dec 2025 16:10:00 +0000
asID:                     213690
IP address blocks:        200.26.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 12:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:58:11:8d:a4:bf:d1:11:ec:d6:ac:87:72:06:2d:7b:12:35:74:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Dec 21 16:05:00 2024 GMT
            Not After : Dec 20 16:10:00 2025 GMT
        Subject: CN=EF205E4B15C99BE0A2D4FB1FE7F7D3C25C4EFBEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:c5:29:28:23:6c:1a:b0:57:e0:ca:9c:da:
                    71:8f:5f:c9:3e:50:b1:4f:2b:16:d5:e0:ed:a8:ba:
                    6d:6b:f2:17:53:5b:ff:9a:c4:23:1d:b3:db:ba:1b:
                    53:c0:3d:7d:aa:a7:03:ad:91:d1:bc:04:1b:58:b6:
                    5b:06:5b:3e:f5:82:ac:c0:a7:19:1f:66:e7:40:4f:
                    89:31:fe:06:af:fb:02:8b:97:5d:9a:35:95:9c:05:
                    e5:98:7f:23:ee:e0:84:67:78:81:fa:35:dc:43:78:
                    88:6f:5b:ae:91:d5:d2:39:53:b1:3b:80:5e:d0:cb:
                    70:d8:83:09:33:21:34:16:96:65:a3:ab:0d:8d:4f:
                    26:fb:4a:cd:71:07:0e:2c:f8:d2:d8:34:1f:f4:02:
                    7b:14:17:58:91:34:10:77:c4:8e:1c:34:d6:91:2b:
                    44:66:77:36:12:14:c2:e8:17:c0:3c:1e:40:f0:15:
                    2a:81:a7:68:b5:9b:1e:31:87:9b:be:94:fc:db:32:
                    73:c0:b9:62:c4:f0:f8:ec:0d:54:b4:a5:1b:a7:6f:
                    82:a3:b2:43:cf:f0:9e:3e:2e:28:ab:73:bf:f3:a8:
                    f5:6e:cc:71:11:bb:1b:73:db:d7:01:c5:b2:cf:51:
                    91:97:c0:70:9d:70:68:f9:07:cc:9a:b8:0c:16:79:
                    16:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:20:5E:4B:15:C9:9B:E0:A2:D4:FB:1F:E7:F7:D3:C2:5C:4E:FB:EE
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20323133363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:d2:df:b9:7f:df:41:59:20:da:55:8c:a6:14:83:4c:b9:
         eb:9a:d5:77:0f:83:08:33:38:14:47:19:af:a9:93:93:94:0f:
         70:ef:9a:d5:22:dd:da:11:b6:83:c2:3d:ac:08:41:63:0d:4a:
         26:26:fe:99:f4:85:45:29:24:f2:8b:5b:3c:71:ce:0e:06:e3:
         6d:0d:40:0c:26:94:a2:00:96:63:96:f2:a9:e8:e9:03:dc:02:
         52:6f:b9:a1:ee:aa:2b:d2:66:9c:bd:ea:2a:be:64:30:0c:f4:
         b0:ab:c2:72:d1:80:98:c6:b4:e3:aa:dc:6f:a4:89:7a:56:5f:
         25:b3:21:27:72:40:8f:23:d8:4a:9e:cf:43:81:2e:50:8d:2f:
         37:c5:a6:40:73:e2:dc:17:fb:7a:50:3e:88:8d:04:85:a3:02:
         70:47:07:75:53:07:fa:0f:fd:d8:95:4a:08:11:dc:77:f2:5c:
         79:01:a4:d8:57:4b:9e:fd:78:c4:55:93:9b:c9:de:df:1e:d7:
         5f:14:1b:93:71:68:6e:ad:ab:da:11:2a:ff:d5:53:c3:9f:e9:
         a5:0d:be:fe:3c:22:5f:34:c2:28:c9:88:a0:8c:a4:79:db:5b:
         7a:b3:7d:6c:4b:62:60:43:31:6e:36:0b:b7:1f:6c:0d:ad:9a:
         f5:3c:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:53:40 2025 by rpki-client