Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20383334.roa
File:                     3230302e32362e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          e73ePInvF2fpuzuS5grvu6qAtL7TGQWWh1upAFbRhco=
Subject key identifier:   DB:E7:22:BF:FB:CC:23:99:6E:2E:37:E2:45:72:2A:36:FF:A8:12:B4
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       30C593832C339B4BD4F1A4840FAB4E6BCAD08573
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20383334.roa
Signing time:             Tue 05 Mar 2024 17:49:25 +0000
ROA not before:           Tue 05 Mar 2024 17:44:25 +0000
ROA not after:            Tue 04 Mar 2025 17:49:25 +0000
asID:                     834
IP address blocks:        200.26.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c5:93:83:2c:33:9b:4b:d4:f1:a4:84:0f:ab:4e:6b:ca:d0:85:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Mar  5 17:44:25 2024 GMT
            Not After : Mar  4 17:49:25 2025 GMT
        Subject: CN=DBE722BFFBCC23996E2E37E245722A36FFA812B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:1f:45:bd:fb:f0:c7:8c:96:63:be:0d:15:
                    3a:cf:76:43:9f:a1:93:60:d9:c9:ae:81:e5:5f:e5:
                    4e:fd:db:dd:d6:6f:8b:59:7b:90:82:22:d0:94:c8:
                    8c:bd:46:c3:71:cd:b2:a2:8d:8a:cf:50:fb:20:c5:
                    d5:89:27:e6:6a:a0:54:98:1b:99:94:48:ae:62:0d:
                    a8:22:8c:07:cb:0d:66:aa:79:ad:24:2f:5a:c7:71:
                    82:b0:6e:b9:27:9d:c5:36:60:bb:2b:f1:08:73:97:
                    6d:96:81:29:00:40:83:31:b7:d4:16:23:02:20:d9:
                    a3:f2:fa:ef:9d:5f:93:a4:27:8c:bf:1c:e9:74:1e:
                    00:7d:0e:fa:5b:c1:83:40:d4:56:4e:13:0b:91:d9:
                    84:ed:92:77:32:72:37:a3:41:2b:34:5a:38:35:1f:
                    cf:3a:8b:e9:57:c9:8c:a2:01:08:27:fe:ab:16:b4:
                    fd:6d:3f:b0:5f:6d:87:6d:fa:52:69:17:6d:aa:88:
                    cd:8d:37:e2:16:b2:99:cb:2a:94:26:35:bd:fe:84:
                    fc:dc:b1:b7:e4:6f:8b:77:ab:76:12:75:18:83:ca:
                    64:ae:52:56:8f:8d:b4:f6:5d:b8:d5:ae:e2:fc:8e:
                    26:d8:39:1c:46:0e:e7:fc:1e:48:ed:76:cc:0e:41:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:22:BF:FB:CC:23:99:6E:2E:37:E2:45:72:2A:36:FF:A8:12:B4
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:c1:28:0e:d5:c5:f4:e9:73:37:35:6e:4e:a0:81:a6:87:db:
         76:4c:66:5d:fd:a9:bf:ab:ba:7a:94:6b:99:a6:c6:e7:ac:51:
         aa:de:2c:01:0f:7a:7a:fe:53:63:5b:12:ec:46:90:93:b2:77:
         d9:dc:3b:25:a0:1f:c4:ec:e0:02:e0:26:0b:55:b7:e9:79:c2:
         f8:34:ef:95:ca:be:4c:c7:cf:b6:46:4e:95:4a:c3:6b:51:9b:
         36:b7:a8:08:50:bd:e6:15:10:91:64:d4:cb:68:a3:37:73:47:
         81:f0:92:ad:e5:1d:1e:30:68:93:df:b5:e3:99:44:ef:25:b0:
         2d:10:27:4b:7e:68:33:b3:91:c7:ca:a3:25:a9:33:a7:a2:0d:
         71:89:d1:38:03:49:aa:1f:4e:59:a8:1c:49:49:dc:1d:47:e1:
         f3:9b:79:7d:dc:e2:4e:09:f8:5c:16:79:de:ee:a7:77:a3:8b:
         ca:99:39:e0:3c:16:bc:fa:15:23:fc:9d:5f:55:d4:92:75:dd:
         29:8b:62:70:05:eb:2f:c6:8f:df:24:26:11:38:92:f6:c3:05:
         c4:19:d4:bc:8a:db:f4:d0:e4:6e:25:91:13:6c:d4:79:4f:f6:
         4d:a0:74:f6:10:e2:ba:a4:87:de:7a:99:2c:5c:d5:b0:f9:a3:
         75:55:d6:9c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUMMWTgywzm0vU8aSED6tOa8rQhXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDNzlCRDNENEFDRTc4OTU4MzZCNUU0MkU2RTVCNUY2
Q0E1NTk5NDAeFw0yNDAzMDUxNzQ0MjVaFw0yNTAzMDQxNzQ5MjVaMDMxMTAvBgNV
BAMTKERCRTcyMkJGRkJDQzIzOTk2RTJFMzdFMjQ1NzIyQTM2RkZBODEyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMth9Fvfvwx4yWY74NFTrPdkOf
oZNg2cmugeVf5U79293Wb4tZe5CCItCUyIy9RsNxzbKijYrPUPsgxdWJJ+ZqoFSY
G5mUSK5iDagijAfLDWaqea0kL1rHcYKwbrknncU2YLsr8Qhzl22WgSkAQIMxt9QW
IwIg2aPy+u+dX5OkJ4y/HOl0HgB9DvpbwYNA1FZOEwuR2YTtkncycjejQSs0Wjg1
H886i+lXyYyiAQgn/qsWtP1tP7BfbYdt+lJpF22qiM2NN+IWspnLKpQmNb3+hPzc
sbfkb4t3q3YSdRiDymSuUlaPjbT2XbjVruL8jibYORxGDuf8HkjtdswOQWybAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU2+civ/vMI5luLjfiRXIqNv+oErQwHwYDVR0j
BBgwFoAUzseb09Ss54lYNrXkLm5bX2ylWZQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTNDMjI3RTE5QUEzNzE2Qzc3N0Q0OTVDNTlFNTc1MjU2
MEFEMUQyNEVEOUQyQjY3NDVDNkRBNUZCN0ZDMzExLzAvQ0VDNzlCRDNENEFDRTc4
OTU4MzZCNUU0MkU2RTVCNUY2Q0E1NTk5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM3OUJEM0Q0QUNFNzg5NTgz
NkI1RTQyRTZFNUI1RjZDQTU1OTk0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEzQzIyN0UxOUFBMzcxNkM3NzdENDk1QzU5RTU3NTI1NjBBRDFEMjRF
RDlEMkI2NzQ1QzZEQTVGQjdGQzMxMS8wLzMyMzAzMDJlMzIzNjJlMzEzODM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyBq5MA0GCSqG
SIb3DQEBCwUAA4IBAQC9wSgO1cX06XM3NW5OoIGmh9t2TGZd/am/q7p6lGuZpsbn
rFGq3iwBD3p6/lNjWxLsRpCTsnfZ3DsloB/E7OAC4CYLVbfpecL4NO+Vyr5Mx8+2
Rk6VSsNrUZs2t6gIUL3mFRCRZNTLaKM3c0eB8JKt5R0eMGiT37XjmUTvJbAtECdL
fmgzs5HHyqMlqTOnog1xidE4A0mqH05ZqBxJSdwdR+Hzm3l93OJOCfhcFnne7qd3
o4vKmTngPBa8+hUj/J1fVdSSdd0pi2JwBesvxo/fJCYROJL2wwXEGdS8itv00ORu
JZETbNR5T/ZNoHT2EOK6pIfeepksXNWw+aN1Vdac
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:35 2024 by rpki-client on console-ams.rpki-client.org