Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136312e302f32342d3234203d3e20323634363336.roa
File:                     3230302e32372e3136312e302f32342d3234203d3e20323634363336.roa (raw, json)
Hash identifier:          q6Fmrsl57D2iDDsRh4qUIXrJ9AylLAf2lB927rg57qg=
Subject key identifier:   55:BD:B0:EB:B9:8F:93:42:D3:63:D1:55:D0:9B:72:2B:90:8E:0B:96
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       5F48C27128278230EF95ABC70BF9D2C1B94336D3
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136312e302f32342d3234203d3e20323634363336.roa
Signing time:             Tue 05 Mar 2024 18:20:08 +0000
ROA not before:           Tue 05 Mar 2024 18:15:08 +0000
ROA not after:            Tue 04 Mar 2025 18:20:08 +0000
asID:                     264636
IP address blocks:        200.27.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:48:c2:71:28:27:82:30:ef:95:ab:c7:0b:f9:d2:c1:b9:43:36:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:08 2024 GMT
            Not After : Mar  4 18:20:08 2025 GMT
        Subject: CN=55BDB0EBB98F9342D363D155D09B722B908E0B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:05:d9:96:1a:b2:9b:93:4c:f9:4c:2c:b9:
                    f9:1e:cd:89:ba:ee:b2:50:b1:89:f0:e8:2a:84:1b:
                    a4:78:bb:3f:d6:da:b0:02:29:f9:6e:ef:9b:d6:f7:
                    ee:e9:78:a0:57:9f:c3:61:a7:fa:64:89:ae:59:06:
                    a7:09:7c:6d:4d:e9:aa:55:6a:5d:3d:a9:e3:e2:e1:
                    75:57:ad:2d:3e:6b:40:e1:b3:1a:d3:78:a8:56:ee:
                    e1:e1:56:20:8b:6e:95:99:0c:7f:2f:4e:d4:7b:e2:
                    cd:32:6e:d4:b2:45:05:23:68:93:92:59:9c:43:66:
                    c2:a4:bc:9c:4f:94:b7:af:2c:a5:a9:99:39:a3:9e:
                    cb:06:44:8a:c6:07:ba:db:a4:bf:45:f0:37:ae:8a:
                    c8:5c:db:8d:3a:12:cc:df:7e:b8:1c:0d:20:f3:26:
                    6c:0e:10:73:62:37:9f:4d:ac:7a:7c:67:dd:81:0d:
                    ec:1b:9f:b1:ba:73:63:11:5c:0a:a2:7a:65:f7:61:
                    24:fb:64:41:2b:0f:f0:84:63:c6:c4:44:39:24:e5:
                    88:c8:47:7f:d1:7c:58:ef:2c:79:8c:29:56:21:c1:
                    59:85:3c:8f:57:23:b8:09:af:2e:22:11:dd:ab:b0:
                    89:de:dc:f3:71:27:2e:72:49:12:c0:26:a7:2c:27:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BD:B0:EB:B9:8F:93:42:D3:63:D1:55:D0:9B:72:2B:90:8E:0B:96
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136312e302f32342d3234203d3e20323634363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:35:71:28:32:48:42:bb:fb:67:d6:a1:4e:2a:cf:d0:5b:d3:
         5a:d0:89:77:35:41:39:74:55:41:da:8d:4f:86:24:a5:4f:c3:
         e5:54:a7:7b:ca:68:7b:2b:d3:01:8f:46:41:f9:2e:66:69:8d:
         82:32:f6:99:a4:0a:e0:5d:42:0d:c1:87:d6:96:07:e4:fd:0a:
         43:bd:3d:bf:d1:d7:01:4a:f3:ac:3f:4e:c2:b8:db:fb:19:b5:
         92:1e:a2:95:ed:1a:57:d8:e2:9c:13:0c:63:d9:e2:42:1d:66:
         5f:a0:39:9a:b3:9e:7a:ba:97:95:f7:58:e8:d7:72:d9:f7:d1:
         4a:d5:38:83:fb:60:e2:01:11:bf:2b:60:d1:e3:0f:04:89:bf:
         96:02:36:47:e3:43:cd:b5:d5:8a:cf:58:11:94:5d:53:13:5c:
         54:9f:d0:54:ae:28:4c:b4:db:35:b9:dd:9b:27:59:4d:df:0d:
         9e:5d:60:1d:f1:e7:81:39:91:12:33:1a:74:b9:11:84:b6:2c:
         06:45:3a:1e:d0:5b:79:23:41:bc:fe:64:5c:85:4a:31:df:f4:
         b4:7a:30:1c:10:0b:9b:69:82:6f:1a:71:d2:fa:91:fb:46:8e:
         17:b5:7e:f0:f9:58:9d:1c:8c:c5:b9:60:72:54:b8:1f:78:88:
         3b:36:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org