Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3132382e302f32342d3234203d3e2036353335.roa
File:                     3230302e32372e3132382e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          vO6h8S12kI1fS9HCdfraVFpcy8/LlzvyEf8BP9QVNps=
Subject key identifier:   A2:F8:91:D7:2F:64:7D:E7:0A:31:41:38:76:DB:52:BC:81:BA:23:6A
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       3E4F65AE15742AF89EFA0AD43C081F65392864E7
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3132382e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:20:13 +0000
ROA not before:           Tue 05 Mar 2024 18:15:13 +0000
ROA not after:            Tue 04 Mar 2025 18:20:13 +0000
asID:                     6535
IP address blocks:        200.27.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4f:65:ae:15:74:2a:f8:9e:fa:0a:d4:3c:08:1f:65:39:28:64:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:13 2024 GMT
            Not After : Mar  4 18:20:13 2025 GMT
        Subject: CN=A2F891D72F647DE70A31413876DB52BC81BA236A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:19:aa:b3:0c:f1:65:af:ea:d1:f0:f7:b7:
                    95:b2:8d:01:8a:5e:6c:2f:e5:02:68:11:e5:60:99:
                    cf:1a:30:a9:bd:6a:e8:37:b0:28:92:6c:66:e7:6c:
                    63:74:30:ce:8e:f6:70:7e:8c:46:8f:d0:58:f6:ad:
                    ad:c5:58:15:42:01:74:50:81:19:6e:f1:33:69:3a:
                    d2:c9:7a:18:f8:6f:af:66:90:5c:22:a2:c1:0a:02:
                    8f:b8:26:e0:f7:1a:1d:dd:f9:77:48:e9:99:5f:93:
                    c0:27:c8:bd:70:6d:ff:e0:89:ab:9d:1e:0a:d8:29:
                    47:c7:13:d6:fb:61:1a:e3:69:34:0c:bb:36:31:4a:
                    d3:6b:ae:b8:4d:be:cc:a9:fa:21:ea:31:3a:2a:b0:
                    f9:f0:7f:94:17:5a:a1:f7:1a:34:af:aa:a5:f3:ba:
                    58:71:d2:18:ba:63:72:9b:87:39:a8:17:c1:70:e6:
                    13:eb:d1:d4:d3:ec:05:26:47:8a:e3:89:a7:81:ff:
                    54:a5:5c:61:cd:fc:6c:9c:b7:d4:c6:46:12:9a:61:
                    04:a9:d9:c6:92:db:6f:41:2e:e0:4a:92:77:57:94:
                    40:c3:94:54:bb:2f:3d:76:4c:0e:f1:4a:9a:dd:94:
                    04:5c:04:d9:f5:13:41:3c:68:71:90:b6:df:f8:4e:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:91:D7:2F:64:7D:E7:0A:31:41:38:76:DB:52:BC:81:BA:23:6A
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3132382e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:7d:cd:fa:e9:6e:1d:43:13:c3:c0:80:d6:7a:ac:d8:9c:0f:
         10:01:57:2a:de:6f:8d:ee:e8:b7:9d:7d:ff:a2:8a:06:5d:85:
         71:35:96:06:41:89:22:86:57:39:5e:16:48:d4:71:4a:f2:e1:
         46:f7:13:02:28:50:16:b0:c8:f2:96:db:ab:fc:c5:e0:1c:bf:
         5c:eb:d3:20:13:ca:13:72:d3:12:95:cd:e3:9d:93:9f:9a:d2:
         93:b7:bb:d0:ff:a6:0c:8d:0a:02:2f:7f:37:c7:7d:ca:7f:fd:
         64:4d:27:da:57:72:33:63:6d:af:d1:4e:7c:47:00:91:6b:c7:
         1f:49:b5:7d:fb:6a:5f:91:91:27:53:b6:c4:27:8e:02:8f:a5:
         e0:73:59:7d:b1:1b:80:e7:b5:fb:a9:5e:a7:a1:b5:d1:a1:e2:
         f6:03:8c:33:1f:f1:80:6a:7e:89:e8:23:6d:43:18:65:76:88:
         00:c7:e7:51:92:ac:da:fb:1f:e3:99:75:32:3c:2d:18:0e:61:
         42:56:7b:c2:88:b6:42:61:6d:33:ae:31:d7:c9:4d:6c:a5:e3:
         56:35:31:7f:e2:a2:60:d5:af:cb:a7:18:c5:2f:60:cc:76:ba:
         c3:be:59:6e:1d:f9:fe:91:fc:e7:1d:d0:3e:05:16:5e:87:1f:
         77:0b:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org