Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139332e302f32342d3234203d3e203532323333.roa
File:                     3230302e32362e3139332e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          pCYp/3+pkvPh9y/Lj0pc8a3EMv7eTCIHSSaOloPT+3E=
Subject key identifier:   2B:AD:49:B7:54:45:CC:7F:F1:B5:9E:04:07:28:FE:DF:9A:29:0B:E3
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2295BC04B7548E6B68B3B2B27485624182FEFDB9
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139332e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:02 +0000
ROA not before:           Tue 05 Mar 2024 17:37:02 +0000
ROA not after:            Tue 04 Mar 2025 17:42:02 +0000
asID:                     52233
IP address blocks:        200.26.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:95:bc:04:b7:54:8e:6b:68:b3:b2:b2:74:85:62:41:82:fe:fd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:02 2024 GMT
            Not After : Mar  4 17:42:02 2025 GMT
        Subject: CN=2BAD49B75445CC7FF1B59E040728FEDF9A290BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:13:ef:78:96:6e:2f:86:6e:bc:4b:74:3f:
                    2f:ad:43:d4:47:ca:6f:8f:d7:88:34:1f:b7:a4:fe:
                    de:cc:f3:4f:f7:75:e0:b4:59:36:f5:a7:39:da:78:
                    e1:83:6c:09:e4:c4:29:42:e7:ab:0c:cb:e4:f1:51:
                    c8:1d:97:28:6d:92:1e:56:1b:bd:03:7d:ae:bc:51:
                    f9:6d:53:00:0e:a0:7a:fe:55:45:21:3d:8e:87:95:
                    ab:92:c6:fb:91:2b:0d:8c:7c:59:86:73:ea:e8:dd:
                    8d:b8:d8:72:13:96:4a:f3:a6:59:5d:ff:35:96:de:
                    47:b7:e4:0d:83:5d:02:bc:52:a2:71:ba:3b:61:2d:
                    1e:72:bf:b3:c1:24:b5:83:fe:e8:d7:a8:7d:be:a6:
                    00:79:79:5d:49:7e:d3:4e:bd:2f:53:3c:83:03:6c:
                    85:ac:53:c4:13:08:d5:31:db:b2:a9:f4:87:71:d4:
                    9a:db:b0:5d:22:c2:c2:df:8b:30:c3:7a:d0:54:c3:
                    89:39:8a:15:49:eb:ba:5e:f9:d2:29:aa:21:68:cd:
                    0b:d8:af:21:96:8b:c7:b2:5c:35:8d:28:5b:f7:ea:
                    9d:3e:b9:fd:b5:48:08:62:4f:8f:1d:da:76:f5:a2:
                    2d:21:0e:58:a1:55:e8:9f:0c:81:d9:07:b2:63:01:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:49:B7:54:45:CC:7F:F1:B5:9E:04:07:28:FE:DF:9A:29:0B:E3
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139332e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:22:41:83:bc:bf:47:96:17:de:b1:cd:e1:a6:3d:6d:10:
         3d:b6:8e:51:f4:a8:aa:1b:44:5e:cc:0f:b4:4e:2d:70:26:d2:
         97:03:c0:46:e5:a9:72:07:49:33:a5:32:d2:40:e7:35:52:e2:
         93:2c:67:9c:52:8b:61:21:6c:e6:a7:19:04:7b:95:c4:80:a8:
         91:5a:8a:e5:f5:b6:8d:3a:a1:4d:e1:1a:e2:1f:84:7e:c0:c6:
         12:32:6f:69:1d:a4:1e:4b:9e:11:1b:45:14:86:d2:fd:a9:a4:
         30:63:eb:75:ed:03:68:fb:ca:73:02:53:bb:e4:c6:00:b8:ac:
         77:00:27:e7:a8:a8:27:da:42:d4:71:0c:20:39:2b:ac:b8:a1:
         bb:2c:76:86:cc:5f:0e:71:9f:eb:8c:32:fe:bb:3c:d9:20:e1:
         2d:3a:d7:c3:7b:11:55:93:90:6e:4a:4c:96:58:09:e3:95:71:
         b1:98:3c:6a:8c:f7:c2:0e:46:51:a4:b1:b5:89:d2:68:1c:6c:
         e8:dc:14:05:52:68:37:94:d1:c7:8f:37:59:20:f7:0c:86:ca:
         88:04:cf:81:87:63:1c:de:42:2d:45:be:17:5e:8a:cd:9f:d1:
         7b:fb:15:4d:be:9f:e8:1a:9a:e6:6e:8b:7e:e0:66:d3:23:33:
         5e:f7:1c:66
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIpW8BLdUjmtos7KydIViQYL+/bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNDAzMDUxNzM3MDJaFw0yNTAzMDQxNzQyMDJaMDMxMTAvBgNV
BAMTKDJCQUQ0OUI3NTQ0NUNDN0ZGMUI1OUUwNDA3MjhGRURGOUEyOTBCRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFgxPveJZuL4ZuvEt0Py+tQ9RH
ym+P14g0H7ek/t7M80/3deC0WTb1pznaeOGDbAnkxClC56sMy+TxUcgdlyhtkh5W
G70Dfa68UfltUwAOoHr+VUUhPY6HlauSxvuRKw2MfFmGc+ro3Y242HITlkrzplld
/zWW3ke35A2DXQK8UqJxujthLR5yv7PBJLWD/ujXqH2+pgB5eV1JftNOvS9TPIMD
bIWsU8QTCNUx27Kp9Idx1JrbsF0iwsLfizDDetBUw4k5ihVJ67pe+dIpqiFozQvY
ryGWi8eyXDWNKFv36p0+uf21SAhiT48d2nb1oi0hDlihVeifDIHZB7JjAbHHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUK61Jt1RFzH/xtZ4EByj+35opC+MwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMyMzAzMDJlMzIzNjJlMzEzOTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgawTAN
BgkqhkiG9w0BAQsFAAOCAQEAeO4iQYO8v0eWF96xzeGmPW0QPbaOUfSoqhtEXswP
tE4tcCbSlwPARuWpcgdJM6Uy0kDnNVLikyxnnFKLYSFs5qcZBHuVxICokVqK5fW2
jTqhTeEa4h+EfsDGEjJvaR2kHkueERtFFIbS/amkMGPrde0DaPvKcwJTu+TGALis
dwAn56ioJ9pC1HEMIDkrrLihuyx2hsxfDnGf64wy/rs82SDhLTrXw3sRVZOQbkpM
llgJ45VxsZg8aoz3wg5GUaSxtYnSaBxs6NwUBVJoN5TRx483WSD3DIbKiATPgYdj
HN5CLUW+F16KzZ/Re/sVTb6f6Bqa5m6LfuBm0yMzXvccZg==
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org