Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3135362e302f32342d3234203d3e203235373138.roa
File:                     3230302e32372e3135362e302f32342d3234203d3e203235373138.roa (raw, json)
Hash identifier:          3EFLsNA0tqWUFJtdV54drccezAPWBhxuZs2Ekev5QTc=
Subject key identifier:   89:E7:0C:BB:3C:B9:2E:57:52:F5:43:58:C3:5B:57:B3:1F:62:34:D8
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       4AF8445A8C271478609B80F48100F0B7795A0D25
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3135362e302f32342d3234203d3e203235373138.roa
Signing time:             Tue 04 Feb 2025 18:43:16 +0000
ROA not before:           Tue 04 Feb 2025 18:38:16 +0000
ROA not after:            Tue 03 Feb 2026 18:43:16 +0000
asID:                     25718
IP address blocks:        200.27.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:44:5a:8c:27:14:78:60:9b:80:f4:81:00:f0:b7:79:5a:0d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:16 2025 GMT
            Not After : Feb  3 18:43:16 2026 GMT
        Subject: CN=89E70CBB3CB92E5752F54358C35B57B31F6234D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:38:b5:53:7e:8c:12:5c:0b:36:75:9c:0f:
                    01:0b:bd:17:cc:c8:d6:96:c8:cd:c2:fa:d6:f2:51:
                    0c:28:20:a9:8b:06:f4:17:d5:c2:fc:25:c8:87:52:
                    c9:3e:e6:c4:de:ed:59:62:a4:a4:36:de:57:a9:fb:
                    a4:bc:23:5d:75:6e:3c:fe:e3:1a:59:e8:43:12:70:
                    71:11:82:29:e8:74:7e:f6:93:d3:54:35:ab:e4:f8:
                    7f:b9:e5:fd:66:d3:5e:3c:fc:19:ce:09:5a:8d:9f:
                    f1:d7:07:4a:52:97:d4:1d:0e:b9:0b:ca:69:19:0c:
                    cd:4d:8f:49:29:67:a8:5a:60:24:e0:c8:b9:e4:6e:
                    92:05:33:c3:9c:dd:91:22:8c:a1:5f:a3:f6:5a:73:
                    61:2e:93:61:b7:e0:1b:54:92:b9:fe:02:6b:e1:75:
                    22:02:8a:c2:3b:2f:1f:99:f9:1f:9a:4b:03:b9:33:
                    c9:2c:c7:25:4e:0e:44:9d:00:fd:ee:90:b5:12:ed:
                    e9:54:26:03:51:b8:15:58:7a:52:8a:bc:1c:ca:30:
                    f7:07:08:10:bc:1b:b1:05:94:c3:20:9e:dc:9a:48:
                    d3:f5:47:5b:05:71:ec:54:a7:b9:c0:01:72:de:98:
                    19:29:da:4d:86:51:ac:da:4b:b2:f7:a7:43:08:84:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E7:0C:BB:3C:B9:2E:57:52:F5:43:58:C3:5B:57:B3:1F:62:34:D8
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3135362e302f32342d3234203d3e203235373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:43:06:0b:02:70:84:58:c0:f0:cd:8e:1e:45:bb:c5:30:
         8d:b0:ce:3e:fd:2b:cd:23:d9:3b:ff:63:f8:77:b2:3f:0f:35:
         95:e2:4d:69:89:bd:66:91:55:d5:24:02:c0:01:c3:d0:b8:8b:
         35:f7:57:96:58:8e:72:39:06:9a:58:67:73:3e:e8:ec:8b:79:
         de:5f:6c:6d:de:3e:b5:0f:61:cd:bd:5c:22:0c:79:a8:3d:13:
         bf:60:2c:ef:52:43:84:ee:23:66:af:38:7f:d7:7c:54:2d:7e:
         62:7d:72:36:81:f8:e8:28:f3:fa:57:ff:8f:90:c5:9c:38:49:
         c6:d3:e1:a6:b1:e6:f5:89:c8:87:ee:5b:8f:dc:59:30:b6:b4:
         1a:01:c5:a9:15:a3:25:f6:a2:75:d3:55:58:68:3e:ab:e5:04:
         aa:67:30:09:81:af:c9:60:92:a8:03:ef:02:bb:8e:2d:8b:b5:
         22:51:c7:c7:b7:e8:cc:e9:38:e3:5b:fd:de:ce:73:2b:20:5d:
         32:1b:dc:9b:f1:a3:ac:6e:e6:f9:95:17:d7:d2:a0:df:7a:e9:
         cd:14:5b:d7:08:bd:fd:1e:20:55:21:78:9c:c0:9a:28:fd:6a:
         c0:0c:1e:bb:67:a7:76:e3:6b:7f:d5:d1:52:86:2f:02:5f:cc:
         e3:e6:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:15 2025 by rpki-client