Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa
File:                     3230302e32362e3139352e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          ddEQXt5naJ4SYbfK+tefql2Gd1basSU0AMw+Nfh75uk=
Subject key identifier:   B9:CA:E3:74:89:F0:D4:CF:D0:D0:48:76:5F:03:29:D1:36:08:02:F2
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2E6C0BB2E2B7C6922C8B22C7EFD9C323EBE0FA3A
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:04 +0000
ROA not before:           Tue 05 Mar 2024 17:37:04 +0000
ROA not after:            Tue 04 Mar 2025 17:42:04 +0000
asID:                     52233
IP address blocks:        200.26.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6c:0b:b2:e2:b7:c6:92:2c:8b:22:c7:ef:d9:c3:23:eb:e0:fa:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:04 2024 GMT
            Not After : Mar  4 17:42:04 2025 GMT
        Subject: CN=B9CAE37489F0D4CFD0D048765F0329D1360802F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:fc:99:ce:59:af:3e:f3:71:ad:43:07:01:
                    98:d8:fe:34:d9:90:4d:20:9b:50:9a:dd:65:18:8c:
                    ee:b0:89:7d:4a:7e:c3:5e:cf:15:a1:d4:7f:02:f7:
                    af:3a:d8:21:d5:37:4e:49:9b:a9:3f:1f:16:5f:56:
                    08:d9:29:db:80:91:79:21:36:19:0f:be:12:a7:62:
                    38:e7:d5:81:39:3d:8c:63:a9:54:e3:ca:4a:17:56:
                    01:ca:6d:44:73:19:22:06:a4:6c:4a:02:b9:d3:22:
                    77:76:ee:23:2d:51:c3:39:34:e3:1b:49:2f:73:b3:
                    99:e5:ec:ff:c0:c0:a1:0d:44:49:7d:7e:c4:3f:8f:
                    a6:2c:53:97:1c:70:3c:77:ad:e1:ef:75:a3:69:ac:
                    47:be:94:fd:98:0d:9b:2c:7a:66:24:3f:f0:93:c4:
                    c3:ed:c0:4c:36:d7:25:85:5b:60:fe:3f:7f:58:b9:
                    a3:ce:35:db:62:43:cc:58:08:5a:8f:c4:ee:85:37:
                    df:06:76:42:a5:27:38:24:92:da:05:53:dd:a8:51:
                    8c:f0:1d:02:aa:95:3b:ad:d1:c1:a9:fc:4a:b2:29:
                    ec:f0:d2:6b:d9:ba:2d:f8:77:dd:4c:68:84:35:ab:
                    f1:75:08:81:a7:fa:f3:5f:23:5d:b0:7e:0c:2f:fb:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:E3:74:89:F0:D4:CF:D0:D0:48:76:5F:03:29:D1:36:08:02:F2
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:04:2e:29:80:cb:f3:9c:08:f4:9c:80:67:82:02:3e:d0:
         cb:3e:7f:58:4c:67:4f:42:24:52:8f:bf:ef:62:36:ca:90:a5:
         bb:b4:cb:db:c4:35:d6:d3:90:61:9c:ce:63:12:9e:3e:5c:bf:
         da:7f:04:19:9d:af:47:12:a4:1e:16:a7:47:54:1a:68:98:fb:
         d6:96:79:d9:3c:5c:68:b2:87:8f:86:bf:2c:4a:83:12:d2:18:
         a2:5e:c6:4c:56:03:87:4a:f3:64:6f:b0:00:3f:dd:1c:6b:47:
         ea:f1:3e:fe:89:27:7c:8a:1b:47:1e:7d:d7:a0:3a:a8:9e:f9:
         d0:8c:01:97:b8:7f:5c:55:e7:9c:d0:25:48:ee:e4:d3:4a:f4:
         a6:6d:b2:f6:1d:0e:83:e4:70:c3:b9:78:1a:00:b8:02:92:8d:
         9a:a1:d4:3a:39:a4:80:8a:9e:cb:87:43:0a:86:34:77:89:12:
         d9:cc:52:84:c7:02:03:2c:98:1d:7d:7b:4f:d1:c5:98:30:37:
         c3:57:17:07:85:cf:99:12:d9:fc:7b:86:cf:41:10:f0:33:99:
         74:66:d1:47:a3:50:eb:09:8a:1d:60:78:50:26:19:2c:95:3b:
         e4:e5:69:78:f2:bc:0c:4c:4b:9a:bc:8f:7f:bb:fe:0e:a1:38:
         65:fe:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org