Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323732303833.roa
File:                     3230302e32362e3138372e302f32342d3234203d3e20323732303833.roa (raw, json)
Hash identifier:          3InWsNMZg40yE28XCBFnT+Z7slPKeXKJ8IM0xWcDHWA=
Subject key identifier:   EE:C2:68:1E:C2:9F:09:52:26:FB:B3:A2:6A:ED:CC:7E:1F:6E:BF:11
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       6AEB67F8F6F2AF9E7449B20FC94E0839CD7ED71A
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323732303833.roa
Signing time:             Tue 05 Mar 2024 17:49:25 +0000
ROA not before:           Tue 05 Mar 2024 17:44:25 +0000
ROA not after:            Tue 04 Mar 2025 17:49:25 +0000
asID:                     272083
IP address blocks:        200.26.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Dec 2024 04:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:eb:67:f8:f6:f2:af:9e:74:49:b2:0f:c9:4e:08:39:cd:7e:d7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Mar  5 17:44:25 2024 GMT
            Not After : Mar  4 17:49:25 2025 GMT
        Subject: CN=EEC2681EC29F095226FBB3A26AEDCC7E1F6EBF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:37:82:18:11:17:56:aa:a0:3b:39:4e:04:
                    41:4b:57:e3:c7:27:1d:bd:a0:fc:79:3a:2b:2d:b8:
                    8a:58:fc:f6:ba:a9:48:4c:f3:81:b3:25:f6:4e:fe:
                    07:ca:c2:0f:98:55:16:da:0f:ff:f5:3d:fc:fc:b9:
                    e7:7e:1e:76:d7:b6:4f:08:b6:86:e9:3a:36:ce:c6:
                    7c:34:bd:f5:82:ee:7f:5c:55:cd:46:d4:00:72:34:
                    f1:ee:30:fe:3e:f2:77:dd:4f:49:75:2b:2d:77:04:
                    9e:8a:52:58:fe:b7:c7:b8:6b:d7:7e:f0:15:f4:62:
                    9b:70:95:fc:44:bb:53:aa:8f:00:42:4e:d7:03:45:
                    28:32:a9:96:6a:88:e5:e5:9b:d6:7a:b6:3e:1c:af:
                    c9:64:9e:e9:8f:19:f1:b2:90:b9:c2:31:11:94:37:
                    ce:a6:54:2a:39:fe:e7:12:da:91:ab:cf:a2:5c:20:
                    15:9b:7c:91:a3:a0:99:46:66:4c:ee:3c:b8:ee:12:
                    53:2f:ff:42:1e:84:39:fc:18:c6:e7:0c:82:41:69:
                    21:04:29:78:d9:2b:b9:52:58:2e:3b:35:6a:85:79:
                    ac:e4:03:30:00:7c:94:6d:d9:8d:b2:f5:f7:3c:49:
                    08:0c:c4:87:6e:e5:ee:f9:bb:54:72:56:8f:46:8d:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:68:1E:C2:9F:09:52:26:FB:B3:A2:6A:ED:CC:7E:1F:6E:BF:11
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323732303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3a:ac:ec:bc:c1:7a:fd:76:03:9e:aa:46:01:5e:8a:a3:8f:
         bf:0d:7b:30:21:af:ea:c5:8d:83:e2:1f:0e:79:29:9e:e7:e4:
         1f:30:5c:f6:6d:40:1f:af:4b:2a:f7:13:05:8a:00:f0:58:fd:
         a6:b0:25:ed:e5:c1:82:5d:71:70:10:ab:67:0e:c6:f4:ec:54:
         9e:fd:68:cb:d0:cb:69:89:de:81:e0:f9:f1:cd:84:c0:39:2f:
         91:2c:e1:ec:0a:96:ce:e3:73:6d:b7:a2:97:7c:49:54:f6:9f:
         ba:12:94:7b:87:4b:dd:d6:10:69:ea:e2:20:bb:51:c3:7b:1d:
         6c:48:8e:29:f5:b3:2f:2b:16:1e:9d:f9:c1:1c:9f:ac:79:d7:
         eb:8d:73:90:3c:af:9c:dd:d6:d3:3d:db:fd:ef:38:7f:c7:1c:
         e7:7b:b0:b8:a4:db:13:e8:8e:ba:c3:53:49:eb:c3:e4:52:a6:
         83:2b:7a:bb:98:c0:8c:cf:26:cc:44:cc:b1:bd:bc:f2:8e:de:
         f4:fc:ea:39:c8:8d:64:83:b2:44:ee:14:39:b7:77:cb:a7:35:
         e6:f5:b6:61:51:15:3e:b9:45:ad:ab:b0:92:69:46:41:bc:16:
         02:a5:d6:00:ab:b9:d9:84:27:d8:55:d1:09:a5:ac:bc:91:ef:
         e2:c0:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 20:53:34 2024 by rpki-client on console-ams.rpki-client.org