Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa
File:                     3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa (raw, json)
Hash identifier:          wRUvhr6gFRSMqOWSfmUE/USLyRoCZe5n/MmWtFYmh0s=
Subject key identifier:   F3:5F:7D:B1:E2:88:27:00:BA:BB:08:BD:C4:1B:7B:B7:9D:48:BA:4E
Certificate issuer:       /CN=8D3790B649EFEF7AC8C909FD315071001F2038EB
Certificate serial:       4353C9F3FE7EDA39146E71A0CE3E15F5E4828CA8
Authority key identifier: 8D:37:90:B6:49:EF:EF:7A:C8:C9:09:FD:31:50:71:00:1F:20:38:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa
Signing time:             Tue 04 Feb 2025 19:59:15 +0000
ROA not before:           Tue 04 Feb 2025 19:54:15 +0000
ROA not after:            Tue 03 Feb 2026 19:59:15 +0000
asID:                     269907
IP address blocks:        200.26.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:c9:f3:fe:7e:da:39:14:6e:71:a0:ce:3e:15:f5:e4:82:8c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D3790B649EFEF7AC8C909FD315071001F2038EB
        Validity
            Not Before: Feb  4 19:54:15 2025 GMT
            Not After : Feb  3 19:59:15 2026 GMT
        Subject: CN=F35F7DB1E2882700BABB08BDC41B7BB79D48BA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:a3:db:3c:9a:54:58:8d:07:aa:03:0b:3b:
                    fb:be:f7:f5:06:a6:99:cf:0d:f9:88:9c:33:75:69:
                    ae:51:54:46:cb:45:6c:e9:73:92:61:4e:af:4f:50:
                    bf:45:3c:66:66:ef:af:9c:7b:2d:fe:93:80:99:b1:
                    6d:85:aa:a5:26:0d:58:24:bc:74:38:1b:53:07:bc:
                    5c:2a:48:f5:3b:4b:b1:30:e4:1b:8b:b4:3b:dd:38:
                    11:90:c8:80:3b:67:e7:91:e6:34:6c:3f:02:3d:a7:
                    92:34:5f:05:2a:37:f4:f0:ad:ba:0d:9f:a4:ef:eb:
                    23:d8:50:8d:71:36:3e:c1:cf:87:48:59:b0:b6:16:
                    a5:62:0f:ff:14:ae:ad:34:1d:63:89:a9:be:64:72:
                    b0:01:fe:ef:35:62:a0:d0:a0:3e:70:53:93:0c:78:
                    e7:0c:1d:fa:30:da:4b:20:50:ff:ac:c3:7e:ba:62:
                    d9:7f:61:b6:a3:77:49:42:16:20:f0:39:5b:f7:a6:
                    f4:c4:53:38:40:47:b9:72:ce:fa:7b:fd:cc:a0:4f:
                    b6:12:df:bb:b6:89:57:dd:7f:a0:59:d8:2a:7c:cf:
                    e2:29:82:68:66:76:69:6d:8f:42:fc:12:c2:94:89:
                    23:ff:b0:5c:84:d8:25:d4:ff:f0:c9:a0:1f:87:7e:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:7D:B1:E2:88:27:00:BA:BB:08:BD:C4:1B:7B:B7:9D:48:BA:4E
            X509v3 Authority Key Identifier:
                keyid:8D:37:90:B6:49:EF:EF:7A:C8:C9:09:FD:31:50:71:00:1F:20:38:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D3790B649EFEF7AC8C909FD315071001F2038EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69E0D7B5FF28BAE646114ED4E69B2EACF82A68ABF8F5836E778B702025DD829B/0/3230302e32362e3233322e302f32322d3234203d3e20323639393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:45:31:64:a1:2a:45:fe:88:90:9c:d1:6c:61:07:d2:ff:05:
         a3:0e:5b:d3:af:05:72:22:66:3b:26:32:97:84:28:8b:b9:51:
         d4:49:c9:8e:5b:2a:57:f5:97:d5:30:01:f7:c7:43:7c:be:be:
         3c:b7:6a:65:a5:90:8f:9b:3b:c7:45:a0:b1:3f:74:fc:70:60:
         6e:5d:28:50:6f:5b:f5:4a:69:c2:57:82:2e:03:c4:a9:21:ea:
         20:fe:c2:96:52:77:d0:29:d3:f9:20:81:14:e8:a3:ab:9d:0e:
         2e:c1:2a:a6:13:83:c2:8f:ab:24:1e:08:ed:8f:47:f0:90:af:
         cb:eb:5d:2b:47:af:8d:ba:2a:a1:9c:09:5c:ba:98:44:b2:c9:
         f5:98:f7:c6:00:cd:95:2e:6a:2b:14:c4:5d:cd:07:44:be:37:
         90:58:50:86:ec:7b:5b:b7:6f:5b:60:f2:7a:e9:32:64:70:9f:
         b2:ce:57:3d:b5:5c:03:6b:a8:be:58:32:be:78:f3:07:f7:92:
         4a:a6:ab:74:b3:1a:5a:c8:d9:3b:bb:b1:26:69:69:2e:af:e5:
         ba:a9:38:9a:89:40:33:0f:b7:95:0c:d4:f3:4f:d4:7f:15:75:
         51:60:1d:b2:c2:17:df:20:a3:de:a3:a7:c5:d6:54:f5:b6:94:
         ee:e2:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:13:36 2025 by rpki-client