Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
File:                     3230302e32372e302e302f31362d3234203d3e2036343239.roa (raw, json)
Hash identifier:          Q2c6KT+8gfIvsIH1TH7I1bSZXXhDerEXddFJA7JwxPM=
Subject key identifier:   57:09:73:17:2E:51:F8:3E:63:BB:CA:1E:F1:7C:7F:9F:4A:22:30:8D
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       0258DB375C8D7F22A9C5F907F3F10CD85F0B7815
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:12 +0000
ROA not before:           Tue 05 Mar 2024 18:15:12 +0000
ROA not after:            Tue 04 Mar 2025 18:20:12 +0000
asID:                     6429
IP address blocks:        200.27.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:58:db:37:5c:8d:7f:22:a9:c5:f9:07:f3:f1:0c:d8:5f:0b:78:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:12 2024 GMT
            Not After : Mar  4 18:20:12 2025 GMT
        Subject: CN=570973172E51F83E63BBCA1EF17C7F9F4A22308D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:f5:ba:28:97:ab:1d:8e:89:e6:00:bd:9f:
                    1f:02:8f:cb:36:20:d2:f5:c3:06:c7:0b:17:2e:3b:
                    c9:86:a6:05:af:3a:97:9c:53:38:04:55:b2:b2:61:
                    21:1e:4b:50:da:a2:3b:67:de:90:67:c1:02:ef:09:
                    9a:3d:b3:a1:0c:33:c1:14:34:5a:15:15:e5:1a:9e:
                    72:fb:0e:bd:8c:2f:3c:e4:e3:f9:f5:bc:3c:1a:a4:
                    1b:90:26:c3:8f:bc:14:98:fa:dd:0e:59:8d:4e:37:
                    23:ae:f7:87:fb:33:79:a5:4d:a0:c2:44:82:8d:e2:
                    3e:ac:ea:0f:ea:26:27:91:fc:e7:37:b7:82:57:dc:
                    56:1d:ea:49:4d:52:42:c9:a8:1c:f8:26:28:2c:d1:
                    b9:ad:c5:ee:62:f3:c4:af:ec:c4:f4:c3:fa:52:7c:
                    da:be:9c:f8:e7:fe:b5:2e:bf:f2:ed:5a:84:14:c7:
                    9b:a6:33:e0:f3:81:31:46:31:68:e9:55:c9:3c:59:
                    55:b8:c3:dc:5d:3b:62:0b:ed:f2:84:0c:cd:08:d8:
                    43:87:85:1f:87:c4:b1:04:05:a4:3d:52:f8:f2:c0:
                    1d:2a:fc:76:e6:2e:9f:53:38:57:d5:92:02:44:2f:
                    5b:8c:ae:c1:09:85:8c:b8:56:5a:1f:6f:31:22:52:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:73:17:2E:51:F8:3E:63:BB:CA:1E:F1:7C:7F:9F:4A:22:30:8D
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:99:77:d6:e0:85:63:9f:c5:8a:d9:97:07:ed:c7:82:a1:
         09:ec:5d:d5:ec:d7:11:80:b4:04:4d:13:6b:73:ea:5f:d7:88:
         a1:51:a0:95:51:9d:19:2d:78:56:2b:26:4a:a1:81:b5:5e:c6:
         7c:40:78:0e:1e:cf:6d:ee:00:e4:2c:14:f7:7d:a5:b5:27:60:
         97:eb:50:f1:31:cb:75:22:6a:96:de:77:00:49:b1:a6:36:63:
         25:1f:b3:17:c5:6b:5a:d5:3e:72:a7:89:7c:82:e0:83:2a:51:
         f8:cf:24:fa:db:b1:be:54:d0:69:d4:a9:d3:d5:91:a2:17:24:
         52:1b:ff:37:da:f8:0f:97:2f:f0:68:b0:bc:ee:a1:22:06:b6:
         0e:60:a8:3d:c4:bc:bb:cf:b7:63:26:d1:a3:92:f5:2a:03:13:
         36:99:17:96:2e:f5:17:de:0f:8b:48:58:f1:2c:c6:e8:e0:f8:
         6b:a0:e3:4f:4b:ee:35:c8:e0:0d:a3:4d:67:ac:13:30:48:05:
         5d:76:5d:7a:11:bb:7b:bc:2b:cc:49:88:13:69:b4:47:92:d0:
         2d:3f:4b:ee:fa:52:5f:32:35:93:31:4c:61:fe:f3:b3:de:2d:
         5e:8b:66:e1:b2:e3:d3:04:ad:c2:e4:01:9e:66:04:46:10:41:
         0b:f2:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org