Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa
File:                     3230302e32362e3139352e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          Gcr7w8INRGp4dcYjzRmDK9l9IPt1ZesEXuk9ziZO6bw=
Subject key identifier:   5D:65:97:1E:89:1C:B4:FB:F8:95:5F:C1:05:28:ED:C3:F5:8C:05:4F
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       10A8528BEA8BCC8C680699547041A3CE0FABFFF8
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 04 Feb 2025 18:50:57 +0000
ROA not before:           Tue 04 Feb 2025 18:45:57 +0000
ROA not after:            Tue 03 Feb 2026 18:50:57 +0000
asID:                     52233
IP address blocks:        200.26.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:52:8b:ea:8b:cc:8c:68:06:99:54:70:41:a3:ce:0f:ab:ff:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:57 2025 GMT
            Not After : Feb  3 18:50:57 2026 GMT
        Subject: CN=5D65971E891CB4FBF8955FC10528EDC3F58C054F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:22:b2:11:29:77:1a:7f:e2:2c:ae:8a:f7:
                    e5:56:1e:a3:ff:fd:9d:b1:c4:26:11:04:87:90:76:
                    90:cf:a2:63:7c:8c:13:97:69:a4:5f:9d:f2:9f:32:
                    8a:1c:49:39:d7:9a:9e:6e:64:9f:af:b7:46:5d:99:
                    6d:a9:a5:1d:9b:b8:91:99:84:5b:2b:4b:ee:41:72:
                    b4:7e:a6:e6:4e:95:62:6d:fb:4a:50:ba:96:5e:0a:
                    98:9c:1e:a3:34:28:a9:3e:98:ec:9f:2a:1e:e3:a7:
                    ee:f8:91:dc:eb:f9:aa:5a:2b:92:11:83:1b:ba:ee:
                    7d:01:4e:1d:df:d8:f7:b2:f6:37:c7:b1:06:2e:2e:
                    8d:96:70:4c:40:50:58:14:c0:8e:c4:f4:db:20:a2:
                    1d:e2:d5:c1:16:1d:a3:ec:48:6f:5c:5e:ad:a9:47:
                    d5:c8:2a:b8:a0:17:34:d6:d9:2a:f5:15:66:ad:d6:
                    7b:9c:8e:be:44:4a:56:e8:1c:20:7f:8a:6f:54:a4:
                    87:e5:8a:5a:b7:bc:9a:10:83:35:16:5e:a1:4e:c5:
                    f8:5e:69:a3:56:c8:89:41:14:a6:e9:55:ce:ab:37:
                    73:8f:92:a6:c8:cf:7f:fb:d5:aa:1e:59:69:33:f0:
                    52:d9:23:ea:3e:e1:af:aa:d0:c4:a1:71:bd:05:c1:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:97:1E:89:1C:B4:FB:F8:95:5F:C1:05:28:ED:C3:F5:8C:05:4F
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139352e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:4e:77:7b:8e:2a:3e:62:86:d3:5e:06:a6:4b:69:aa:21:
         0e:29:91:22:0a:0b:83:81:46:ba:ed:2f:c4:92:6b:1e:b3:d9:
         25:2a:ef:7d:b5:7f:3f:e4:ff:15:55:30:ed:3c:55:07:33:63:
         3e:c4:84:4a:45:98:3d:78:f3:c1:f4:b3:9d:d3:01:5f:7d:91:
         ae:28:66:be:e5:51:64:59:26:e5:0e:20:6d:aa:4c:ee:42:a9:
         dd:a0:57:5a:54:f7:fb:07:59:44:db:b5:c4:dd:e9:d7:d7:6a:
         ed:55:22:82:87:65:c7:be:2f:e0:5b:5d:21:de:f7:e9:20:76:
         95:00:cb:0d:88:3b:1e:0e:99:d0:2a:a2:4b:83:8e:8b:8c:d9:
         09:94:50:18:b5:6e:a2:ca:4f:1c:a3:15:c7:88:08:c9:02:2d:
         86:26:c7:12:74:f9:4b:80:41:ac:68:ba:28:ff:80:67:0a:67:
         36:33:3c:12:48:80:8b:16:22:a6:59:80:e1:50:c5:ed:2e:7e:
         0c:3c:b7:f8:0f:bb:e4:b7:df:a0:29:c1:92:b5:74:fe:a7:da:
         45:1d:1e:0a:34:e5:b2:3b:4a:65:f8:1c:4f:c4:bc:30:83:6c:
         a3:ee:ca:c0:8c:e3:2d:71:fa:9c:39:01:5f:19:25:40:64:fb:
         1b:f4:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 14 15:24:41 2025 by rpki-client