Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa
File:                     3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa (raw, json)
Hash identifier:          pdwWSLh5frPHzUXi8QLchKKF68VN4G+j2awLClqEYaY=
Subject key identifier:   D1:81:08:41:91:11:23:13:D9:E5:7C:42:1B:19:A3:7E:B0:E6:A2:6E
Certificate issuer:       /CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
Certificate serial:       3077A57EA4FB562190C9F76AC7D40C2FCC26E567
Authority key identifier: 09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa
Signing time:             Tue 05 Mar 2024 18:18:12 +0000
ROA not before:           Tue 05 Mar 2024 18:13:12 +0000
ROA not after:            Tue 04 Mar 2025 18:18:12 +0000
asID:                     266749
IP address blocks:        200.26.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:77:a5:7e:a4:fb:56:21:90:c9:f7:6a:c7:d4:0c:2f:cc:26:e5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
        Validity
            Not Before: Mar  5 18:13:12 2024 GMT
            Not After : Mar  4 18:18:12 2025 GMT
        Subject: CN=D181084191112313D9E57C421B19A37EB0E6A26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:bb:d1:0d:db:b9:6e:0b:97:21:38:29:d8:
                    1a:e6:87:79:4d:d8:a1:f1:7e:8c:4e:bc:b4:9a:da:
                    c0:db:3b:c7:69:65:6a:2a:20:14:86:f6:c1:54:d8:
                    56:ad:17:d4:b6:12:4a:08:d2:1c:34:01:23:8b:bd:
                    d1:53:1e:c7:28:83:d0:d4:88:67:64:69:51:17:7a:
                    df:2f:2c:c5:20:fe:92:68:4f:f2:fa:3e:38:3b:6f:
                    00:75:c5:7d:ad:60:b3:1a:0d:97:77:82:e5:70:92:
                    d7:5a:9e:50:08:8e:ea:77:88:9a:47:24:5f:0f:8d:
                    f6:5a:6f:13:ad:1b:0a:ea:90:47:da:87:b6:24:76:
                    25:a5:44:4d:a7:eb:00:c6:c8:70:9a:1e:23:fc:b3:
                    f3:b9:b6:37:ad:97:dd:63:5b:4e:0b:69:b2:60:69:
                    37:a1:7c:1c:99:e6:d3:7e:5a:c9:e7:63:cf:c5:26:
                    ab:14:cb:51:80:d9:4e:48:b5:98:8a:73:a4:5a:cf:
                    92:40:7c:73:55:7f:f5:13:3f:3f:6f:bf:c9:47:05:
                    23:56:30:83:8f:05:c4:70:c7:5f:48:e5:31:a3:81:
                    ba:a7:13:44:98:d9:dd:2d:4e:f4:6a:42:dc:c9:ca:
                    c1:8b:b8:08:ab:b8:9b:d4:dc:c5:79:26:75:28:c0:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:08:41:91:11:23:13:D9:E5:7C:42:1B:19:A3:7E:B0:E6:A2:6E
            X509v3 Authority Key Identifier:
                keyid:09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/3230302e32362e3233362e302f32322d3234203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:09:af:b3:eb:fd:b9:58:8b:cb:49:be:89:2f:e5:17:a1:65:
         5d:e0:f6:7e:40:fe:bb:e1:3a:06:0a:24:9d:f0:f9:a9:43:82:
         97:d4:4f:fb:0e:19:67:41:1b:50:e3:09:94:9c:c1:6d:da:1a:
         49:29:70:ef:ce:e0:95:13:35:15:a5:76:c9:bc:e5:56:75:eb:
         98:83:cf:7e:dd:e7:10:30:ad:bf:7d:03:79:38:31:fa:2c:78:
         75:73:e8:26:06:d6:5b:44:41:f2:0b:be:08:fe:ec:5d:e7:db:
         f9:ce:c9:e8:1e:4c:bf:fb:5c:58:7d:33:e8:dc:2b:04:ab:dd:
         ef:ca:d8:12:c6:db:f4:53:85:ff:61:91:35:d9:05:1e:93:49:
         3c:0f:0a:1c:0a:d6:9b:55:c5:fc:3f:49:5e:2b:af:74:13:e6:
         70:89:40:a6:da:f5:51:51:62:a9:d8:f4:02:b8:af:63:1b:e2:
         cc:10:76:8e:89:10:e4:73:32:6b:5b:a2:40:ae:db:27:5d:b1:
         d6:67:2e:5a:06:a9:b9:f7:ab:9b:c3:0b:60:cc:6e:1b:56:93:
         4f:f0:05:7e:5b:9c:cc:d2:8b:0d:36:ea:bb:24:c8:6b:c7:f3:
         a2:47:6c:ac:cb:f3:01:d8:a8:3a:2b:c3:4e:ae:a3:2a:90:b4:
         ab:de:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org