Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138382e302f32342d3234203d3e203632333930.roa
File:                     3230302e32362e3138382e302f32342d3234203d3e203632333930.roa (raw, json)
Hash identifier:          vWSlBsNmUOcTAI4ve40dymc8pgn2vtpPVEeo9wtVm0g=
Subject key identifier:   BE:7E:5A:5D:B3:DC:B6:F5:23:17:4F:26:37:09:DB:29:99:A0:C0:76
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       16061690BCA2C104B698102BE499B0D803FB99E2
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138382e302f32342d3234203d3e203632333930.roa
Signing time:             Tue 05 Mar 2024 17:49:26 +0000
ROA not before:           Tue 05 Mar 2024 17:44:26 +0000
ROA not after:            Tue 04 Mar 2025 17:49:26 +0000
asID:                     62390
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Dec 2024 04:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:06:16:90:bc:a2:c1:04:b6:98:10:2b:e4:99:b0:d8:03:fb:99:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Mar  5 17:44:26 2024 GMT
            Not After : Mar  4 17:49:26 2025 GMT
        Subject: CN=BE7E5A5DB3DCB6F523174F263709DB2999A0C076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:5f:ce:15:3b:ac:17:8b:02:db:d3:f0:25:
                    9d:59:06:a0:6d:80:8f:40:d2:3f:33:03:4b:02:7e:
                    d5:b0:ac:80:b9:e7:26:6f:e1:a1:a2:65:2c:6b:a1:
                    e7:c3:e4:b5:1a:eb:1e:77:8f:5d:a2:dc:21:cf:f5:
                    5a:c4:f7:77:f6:13:0d:ae:f9:c1:b9:7a:ff:f6:b6:
                    ff:3a:f2:c4:a9:e7:fa:58:75:74:c7:41:fc:10:7c:
                    f1:21:6b:0a:1a:d6:ed:14:df:8e:84:5b:d9:5c:49:
                    a0:1f:9a:de:8b:fa:6d:1a:bc:33:73:b0:84:b4:30:
                    17:b2:ab:12:3a:95:bd:96:aa:e3:89:12:7b:e7:ba:
                    fa:08:e3:c5:a8:26:0b:36:07:ac:f4:15:bb:0f:4f:
                    69:62:7f:ae:93:3a:7f:a5:ba:24:44:64:5f:27:e9:
                    76:37:90:ac:c6:39:a9:a5:c4:29:d0:db:96:4b:58:
                    32:61:d6:42:a3:67:c6:53:25:c4:83:a5:1a:8b:75:
                    c4:98:ab:39:58:b7:3d:e5:28:81:75:cf:8c:85:8f:
                    07:28:af:fa:ba:b3:bc:2a:d7:6b:10:02:92:8c:19:
                    f4:39:98:d2:d1:12:31:e0:48:7e:44:60:f3:26:d1:
                    46:2f:f9:e8:29:13:3a:f8:30:2e:40:1d:25:5f:ea:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7E:5A:5D:B3:DC:B6:F5:23:17:4F:26:37:09:DB:29:99:A0:C0:76
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138382e302f32342d3234203d3e203632333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:14:db:b6:7c:ce:74:7f:62:d3:57:77:94:5a:16:57:37:
         c8:b5:e0:67:d8:7f:34:cc:af:7e:54:87:42:b0:f1:7a:1e:58:
         9f:d5:b2:dd:0f:c5:2e:44:ae:3b:d0:4d:07:43:5b:4a:7f:5e:
         a1:00:44:13:64:13:2d:84:74:36:8a:7d:69:87:51:bc:10:73:
         1d:eb:65:82:99:1b:80:ad:60:67:21:72:d6:a1:27:ee:e2:c5:
         85:7b:b2:d8:58:f2:3c:c5:5c:0e:7c:c6:de:8e:c7:2b:b5:64:
         e2:6c:19:b0:72:a8:75:1b:a0:f3:53:c8:84:af:84:d9:56:1a:
         41:af:7c:bb:44:b3:5b:91:ff:0c:5d:05:7d:37:d6:6e:0c:90:
         ce:4a:1e:df:9f:89:48:16:81:7c:57:98:3a:b4:15:28:19:f0:
         b2:42:a6:e4:e6:1f:8e:5e:37:5e:13:01:2b:49:22:1b:ae:c4:
         24:29:45:74:5e:39:ea:96:70:ad:f1:57:85:87:11:63:01:38:
         6d:4f:ac:b5:48:fd:7c:b2:40:65:70:61:4b:1c:fe:d4:80:ac:
         81:12:de:00:b7:cc:fc:e6:89:ab:32:14:09:1c:77:11:b9:c6:
         bf:1c:87:fa:58:2b:ac:c2:9e:4d:ff:9d:c3:1a:d8:f6:f9:f5:
         c1:ed:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 18:25:35 2024 by rpki-client on console-fra.rpki-client.org