Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20383334.roa
File:                     3230302e32362e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          07XqPSio5rRCMHFTQJ4OD2+wSMhqysX7y4qlb1WpBFA=
Subject key identifier:   ED:A4:BA:AF:72:59:28:EF:B9:54:58:CD:46:07:76:95:8A:4B:DD:E6
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       74F31F270175B9EADB63D4598A6CA3C0CA5CCB45
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20383334.roa
Signing time:             Mon 25 Nov 2024 13:35:00 +0000
ROA not before:           Mon 25 Nov 2024 13:30:00 +0000
ROA not after:            Mon 24 Nov 2025 13:35:00 +0000
asID:                     834
IP address blocks:        200.26.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Dec 2024 04:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f3:1f:27:01:75:b9:ea:db:63:d4:59:8a:6c:a3:c0:ca:5c:cb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Nov 25 13:30:00 2024 GMT
            Not After : Nov 24 13:35:00 2025 GMT
        Subject: CN=EDA4BAAF725928EFB95458CD460776958A4BDDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:14:02:22:7d:22:30:44:aa:6f:5a:f0:3e:
                    fe:6d:d2:90:d3:7b:e4:fa:d1:fb:40:1e:fd:cc:a9:
                    a5:27:c0:c3:22:e2:54:34:05:cd:00:55:c6:02:7e:
                    a1:0f:d0:d5:7e:9d:eb:22:e4:6f:c6:8a:6a:eb:06:
                    17:b0:d1:03:be:ab:1e:87:76:47:1f:f1:3e:0f:93:
                    c0:f7:a9:e9:58:d7:58:70:b2:23:3a:97:9d:88:65:
                    fd:f6:ff:63:9b:d4:64:fa:9c:61:ab:03:3d:7a:4d:
                    9e:0b:23:f8:4c:90:61:f0:e4:1f:8f:51:c6:4b:fa:
                    99:3f:7b:4c:fa:8c:03:d9:64:9c:8d:c9:5e:4b:24:
                    27:30:60:d6:81:c1:f9:44:64:4c:2f:aa:7d:65:d4:
                    00:d4:06:53:a9:c7:a2:e4:34:99:b4:ff:9d:a8:69:
                    7c:74:d9:4e:dc:31:af:d6:87:a0:da:6b:c2:f3:b7:
                    a4:c7:7e:76:b8:a4:fd:be:32:c9:e7:c9:eb:ce:d0:
                    03:9c:40:35:9d:ce:d2:49:1c:95:1d:5f:32:b5:42:
                    91:88:77:0e:19:0b:7b:82:68:68:1d:35:99:91:8e:
                    96:9d:c2:b7:e4:63:f6:46:a9:ff:70:66:86:a2:9a:
                    ce:8c:b8:ed:78:ed:51:3b:68:c3:dc:23:eb:56:bc:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:BA:AF:72:59:28:EF:B9:54:58:CD:46:07:76:95:8A:4B:DD:E6
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:38:1f:c3:86:a8:a9:3d:58:d2:ae:11:a4:50:9f:65:b9:
         76:39:64:04:b6:2e:5f:df:b9:97:94:ca:3e:34:9b:03:2b:e3:
         c5:86:3e:11:2f:4b:51:25:0d:b3:f4:2a:d0:d9:5f:1a:e2:0e:
         98:fc:11:a1:e2:12:04:98:52:7a:5c:72:cc:48:06:ff:6a:db:
         9e:de:a5:9c:47:90:e8:6c:3c:2b:3b:58:8e:06:2f:40:8c:89:
         16:43:c9:b7:ec:53:19:78:a7:a6:83:2c:2b:08:5c:84:77:54:
         3d:3a:38:e6:bd:40:53:46:d5:2c:d7:8d:6d:c6:8b:e0:bd:a9:
         67:6c:91:14:71:4b:2c:5f:ee:1d:fc:d0:d2:6e:00:77:19:cf:
         da:79:ff:87:94:3d:28:c2:b2:2c:81:43:de:ad:2a:5f:05:e1:
         50:b8:d0:ea:ec:ca:b1:d2:ed:5f:15:a1:d5:81:30:db:2b:6f:
         ef:db:38:16:fb:dd:02:93:15:6d:a1:dc:b8:86:09:8a:54:32:
         25:26:ca:88:0f:74:6d:10:78:c2:25:44:76:80:01:b1:d3:39:
         d5:a0:85:df:38:d6:25:dc:ed:13:88:36:cb:c0:3c:c6:46:bd:
         36:b7:83:50:82:6b:67:20:25:54:62:a8:95:0a:d6:a4:5e:00:
         52:2f:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 18:25:35 2024 by rpki-client on console-fra.rpki-client.org