Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136362e302f32342d3234203d3e203237373335.roa
File:                     3230302e32372e3136362e302f32342d3234203d3e203237373335.roa (raw, json)
Hash identifier:          wT+lPu+5Uk2crG+g2hMxtKLlzLIGzNoY7gb1DzbbV3o=
Subject key identifier:   2B:88:D8:F7:3F:9E:47:99:42:55:17:A0:22:BD:85:50:F5:CC:EE:ED
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       6E9CB648E23805D076B745883B7716CE811EE0BA
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136362e302f32342d3234203d3e203237373335.roa
Signing time:             Tue 05 Mar 2024 18:20:08 +0000
ROA not before:           Tue 05 Mar 2024 18:15:08 +0000
ROA not after:            Tue 04 Mar 2025 18:20:08 +0000
asID:                     27735
IP address blocks:        200.27.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Jun 2024 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9c:b6:48:e2:38:05:d0:76:b7:45:88:3b:77:16:ce:81:1e:e0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:08 2024 GMT
            Not After : Mar  4 18:20:08 2025 GMT
        Subject: CN=2B88D8F73F9E4799425517A022BD8550F5CCEEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:97:44:e9:d8:b1:54:05:70:37:aa:01:45:
                    e5:c4:49:5d:0f:7b:a1:a0:cc:ef:95:a6:1c:3f:3e:
                    16:91:fd:f3:17:3d:bc:76:7a:d5:c0:ef:d1:11:bc:
                    1e:51:09:ad:4b:f4:09:56:d5:ef:cd:6c:49:6b:2c:
                    0f:be:6e:86:07:25:7a:09:d8:04:0c:19:fc:90:8b:
                    38:f9:86:33:5f:3b:81:28:91:7f:45:b4:33:bb:ea:
                    96:b0:72:ce:b1:0c:25:c8:78:ed:72:23:1d:3c:e8:
                    85:13:90:3b:47:48:f5:2d:90:63:21:42:c9:15:96:
                    bb:d3:1e:5d:c5:95:03:d7:0b:ac:30:b3:07:97:b5:
                    1c:8f:d8:aa:1e:37:41:c6:95:d6:41:21:74:28:a6:
                    f4:91:1f:9f:fd:39:e3:f0:2e:f5:4b:96:0b:ac:9d:
                    b4:86:99:8f:bd:bd:29:c2:c4:19:25:a0:71:d7:d8:
                    52:4a:b8:68:a9:e5:ea:20:fc:cc:1d:26:db:f7:ee:
                    9c:bc:15:1d:d1:0c:9b:58:5b:64:62:2e:77:db:56:
                    46:81:49:67:f6:65:f8:65:a7:87:69:00:75:ec:5f:
                    c4:4a:14:3b:0f:79:e9:40:06:32:c0:93:27:10:aa:
                    f1:ea:86:f7:8a:e1:a3:04:a4:91:91:82:07:9d:d9:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:D8:F7:3F:9E:47:99:42:55:17:A0:22:BD:85:50:F5:CC:EE:ED
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136362e302f32342d3234203d3e203237373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:6f:b6:a5:c8:22:e0:1d:92:1c:a9:df:ad:27:c0:cb:91:
         73:47:5f:c6:0e:1a:7a:93:38:b6:44:52:f1:f0:1d:0c:00:e9:
         f5:3e:5d:4f:52:9e:db:eb:d4:b3:ec:e1:f2:1a:e0:01:4a:4b:
         0a:60:5b:6e:59:0f:b4:76:41:fa:50:40:fd:7d:0b:fe:dc:bd:
         2b:f2:04:ff:94:88:a9:e9:ed:c3:95:f4:25:d1:e8:ad:7c:60:
         b4:2d:c0:31:74:26:c1:e3:5a:1e:0e:fc:f3:31:20:f8:a2:ec:
         54:9d:59:00:5a:4c:47:d1:9b:0a:33:67:b9:1a:04:ce:46:19:
         04:9e:0e:88:99:55:c2:52:24:9a:61:99:e4:d4:df:c4:ba:91:
         1e:22:ab:8b:b2:67:83:14:0e:9a:15:49:41:a1:cf:bc:a0:0b:
         d6:98:17:9b:38:c6:a2:e4:7e:5d:ce:ab:04:5d:5b:7e:8f:73:
         54:17:a6:09:68:fc:0d:83:40:be:cd:5c:7d:51:a5:3d:df:3f:
         e9:d8:e6:6c:c1:79:0d:c7:31:3e:dd:a3:3e:f8:33:94:0e:e4:
         7a:8a:36:45:a6:4f:bb:ae:55:59:82:ad:e4:ec:df:3e:58:ea:
         7e:26:ee:27:aa:45:25:90:b1:86:4f:1d:14:94:ec:1c:aa:aa:
         21:f5:99:db
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbpy2SOI4BdB2t0WIO3cWzoEe4LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNDAzMDUxODE1MDhaFw0yNTAzMDQxODIwMDhaMDMxMTAvBgNV
BAMTKDJCODhEOEY3M0Y5RTQ3OTk0MjU1MTdBMDIyQkQ4NTUwRjVDQ0VFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSe5dE6dixVAVwN6oBReXESV0P
e6GgzO+Vphw/PhaR/fMXPbx2etXA79ERvB5RCa1L9AlW1e/NbElrLA++boYHJXoJ
2AQMGfyQizj5hjNfO4EokX9FtDO76pawcs6xDCXIeO1yIx086IUTkDtHSPUtkGMh
QskVlrvTHl3FlQPXC6wwsweXtRyP2KoeN0HGldZBIXQopvSRH5/9OePwLvVLlgus
nbSGmY+9vSnCxBkloHHX2FJKuGip5eog/MwdJtv37py8FR3RDJtYW2RiLnfbVkaB
SWf2Zfhlp4dpAHXsX8RKFDsPeelABjLAkycQqvHqhveK4aMEpJGRgged2QGFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUK4jY9z+eR5lCVRegIr2FUPXM7u0wHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzIzNzJlMzEzNjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgbpjAN
BgkqhkiG9w0BAQsFAAOCAQEAmhNvtqXIIuAdkhyp360nwMuRc0dfxg4aepM4tkRS
8fAdDADp9T5dT1Ke2+vUs+zh8hrgAUpLCmBbblkPtHZB+lBA/X0L/ty9K/IE/5SI
qentw5X0JdHorXxgtC3AMXQmweNaHg788zEg+KLsVJ1ZAFpMR9GbCjNnuRoEzkYZ
BJ4OiJlVwlIkmmGZ5NTfxLqRHiKri7JngxQOmhVJQaHPvKAL1pgXmzjGouR+Xc6r
BF1bfo9zVBemCWj8DYNAvs1cfVGlPd8/6djmbMF5DccxPt2jPvgzlA7keoo2RaZP
u65VWYKt5OzfPljqfibuJ6pFJZCxhk8dFJTsHKqqIfWZ2w==
-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:16 2024 by rpki-client on console-ams.rpki-client.org