Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323732313130.roa
File:                     3230302e32362e3138372e302f32342d3234203d3e20323732313130.roa (raw, json)
Hash identifier:          t7TL1EpAw5rM1fKwkB5TtvtstIWS0txQUDh37ZuKbI8=
Subject key identifier:   83:54:D4:BB:63:38:3F:E9:5F:C1:C3:A1:AB:42:D2:6C:63:1B:8B:0C
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       77CE87C5CB75601C3BFF78CCC45D020C9F08F595
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323732313130.roa
Signing time:             Mon 17 Mar 2025 13:55:00 +0000
ROA not before:           Mon 17 Mar 2025 13:50:00 +0000
ROA not after:            Mon 16 Mar 2026 13:55:00 +0000
asID:                     272110
IP address blocks:        200.26.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:87:c5:cb:75:60:1c:3b:ff:78:cc:c4:5d:02:0c:9f:08:f5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Mar 17 13:50:00 2025 GMT
            Not After : Mar 16 13:55:00 2026 GMT
        Subject: CN=8354D4BB63383FE95FC1C3A1AB42D26C631B8B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:5b:77:d6:ae:52:b1:8c:7a:77:c8:eb:a6:
                    6a:b9:d5:8c:24:4d:05:08:19:8d:8d:3d:68:43:4b:
                    0c:3e:a5:9b:55:d5:16:a3:f9:f5:05:e2:89:20:ee:
                    4c:76:f6:b0:7d:05:f5:52:10:27:7e:50:f5:90:4f:
                    3f:9e:7e:6e:b2:74:fa:ef:28:4b:e3:a4:ce:7a:80:
                    7c:27:72:f8:d7:e7:35:14:98:a6:b3:0b:18:1e:21:
                    87:a7:9c:25:d6:bb:22:0b:c7:64:fb:e0:fc:30:34:
                    6a:8b:c0:46:63:2e:6d:50:dc:16:04:dc:8b:b6:83:
                    a6:6d:fa:aa:34:a0:95:6a:b6:e1:8f:05:91:89:76:
                    cb:ac:91:5f:ce:6d:86:0f:7a:3d:6c:85:5e:9d:ed:
                    37:53:99:4e:e7:2f:7e:b9:a4:22:a0:33:1d:c5:66:
                    8e:8c:c1:45:f4:dc:7d:0b:fd:97:e4:71:60:91:ed:
                    4e:51:59:e8:5f:18:5b:39:c7:84:c7:93:f5:96:d2:
                    e1:72:1f:83:50:a9:e1:4a:e2:55:11:4a:c3:08:82:
                    d0:54:26:d9:d4:9b:d1:65:d4:fb:be:1b:de:1d:d1:
                    14:dc:f6:c8:e2:c4:03:7a:3c:69:b2:35:67:b9:00:
                    f9:c2:7d:94:ae:c7:d4:ce:c5:b7:f9:d7:66:07:6a:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:D4:BB:63:38:3F:E9:5F:C1:C3:A1:AB:42:D2:6C:63:1B:8B:0C
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323732313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:0e:34:da:8f:07:5b:a2:bc:ed:19:34:a7:39:20:7e:42:
         11:99:fb:58:c1:50:4f:13:dc:7d:6f:c2:20:73:dc:ae:ca:bf:
         ac:4e:e9:15:c1:8d:43:cd:a1:7d:e9:aa:bf:a7:b5:0a:ec:08:
         fe:42:08:2e:fa:d5:dc:10:57:b8:55:8f:67:b5:e3:ec:28:fd:
         5c:97:45:68:36:8e:55:27:96:7e:30:49:d8:c7:47:90:02:f7:
         69:51:fa:87:3d:41:23:4d:d9:6f:60:15:4e:82:2d:18:66:88:
         f8:c9:d5:bc:a2:40:40:a9:55:e1:53:c8:21:56:a3:9b:e8:b9:
         5a:c7:d9:8e:f6:40:75:32:b6:a5:65:89:3d:ed:f3:4b:1d:17:
         4b:7b:2f:56:52:0c:5c:48:5e:29:80:04:de:12:28:5f:db:fa:
         d3:0a:ea:d0:bf:83:86:3e:ea:7e:fb:7d:2d:b5:a4:5c:b0:c3:
         40:33:63:1b:a3:d5:f8:23:3d:4a:9d:75:50:fb:9a:c9:4b:35:
         ae:fa:8d:75:fd:7b:d0:46:d6:6a:b7:d7:a0:2c:cd:48:92:15:
         2f:3f:b0:d9:63:0d:e2:39:04:d6:e2:3d:cf:7b:8f:aa:81:e6:
         7d:c5:01:21:33:4a:50:e0:00:2c:0f:cd:a7:47:da:4c:3d:36:
         ab:90:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:44 2025 by rpki-client