Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32302d3230203d3e203131303831.roa
File:                     3230302e32362e3230382e302f32302d3230203d3e203131303831.roa (raw, json)
Hash identifier:          hvRmP8W0YqfpsPrLLOU/ksZ7ai6QRkmsWf/Vb440has=
Subject key identifier:   18:FE:69:31:6D:C8:35:1A:EA:36:98:A9:90:5C:68:B0:29:4E:FC:F5
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       17B2CA34F2BC29598C10046C841FA761495AD4D0
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32302d3230203d3e203131303831.roa
Signing time:             Tue 05 Mar 2024 17:42:00 +0000
ROA not before:           Tue 05 Mar 2024 17:37:00 +0000
ROA not after:            Tue 04 Mar 2025 17:42:00 +0000
asID:                     11081
IP address blocks:        200.26.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:ca:34:f2:bc:29:59:8c:10:04:6c:84:1f:a7:61:49:5a:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:00 2024 GMT
            Not After : Mar  4 17:42:00 2025 GMT
        Subject: CN=18FE69316DC8351AEA3698A9905C68B0294EFCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:3a:28:2d:30:2d:20:e0:54:a7:64:fb:f7:
                    82:39:87:c5:31:06:f1:57:cb:47:91:e1:25:6e:af:
                    cf:8d:34:45:9e:7e:ce:28:12:5b:4f:24:b5:e6:a3:
                    7a:37:04:de:4c:14:5e:3b:64:0a:a2:ff:12:5b:a3:
                    c3:a8:7a:ca:09:28:03:09:ab:df:76:cb:7a:6f:f5:
                    b5:42:aa:b3:ef:10:21:96:5e:f4:ef:6a:c7:31:79:
                    6c:90:cd:cf:9d:17:a6:d7:ba:bc:76:eb:ea:69:04:
                    67:b1:17:37:68:b9:a3:e7:51:8d:df:e4:ff:0e:f9:
                    63:17:6f:72:91:62:f4:dc:85:95:3e:dd:e3:d2:07:
                    46:4a:8a:b5:84:9f:66:d7:3a:03:bf:c3:f1:cf:e9:
                    4d:a2:57:c0:29:46:68:85:90:c3:69:50:35:22:81:
                    6e:5d:e7:df:1a:ac:88:a5:8b:60:c2:39:00:53:74:
                    1d:85:23:be:40:76:af:a7:9e:94:32:a3:41:27:b0:
                    fe:ac:2c:1c:81:17:b1:ca:89:7b:01:fb:40:5c:06:
                    38:d6:22:89:a9:51:9f:0f:1f:da:de:31:9d:e6:59:
                    07:b1:24:9a:41:ee:fc:67:99:13:47:bb:72:50:5d:
                    ce:9a:10:e8:66:74:77:d3:7c:9d:ec:f9:a1:39:77:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FE:69:31:6D:C8:35:1A:EA:36:98:A9:90:5C:68:B0:29:4E:FC:F5
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32302d3230203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:e4:61:2f:ed:84:ea:59:b6:d3:de:ac:41:da:3f:a8:ac:
         df:f2:ac:ac:90:35:17:ea:cf:99:b7:8a:57:fd:09:e4:ea:84:
         bd:e7:29:cf:58:e1:e6:85:4f:93:43:9e:fd:45:8f:ee:52:b5:
         c7:80:02:a8:3d:d3:c0:11:4e:de:e2:83:43:11:c3:f4:84:d9:
         f1:d8:d3:48:87:d5:68:9f:5e:59:b0:3c:a5:22:f2:05:78:d6:
         78:75:d3:e9:97:2e:0f:2a:39:c2:76:74:f2:71:fd:68:ff:4c:
         43:15:f7:a2:83:99:55:33:e6:2f:81:f2:26:05:3c:a3:65:40:
         26:8e:b6:7c:d1:80:61:66:f4:6a:97:73:58:e6:44:60:b1:6b:
         87:2f:ef:de:d3:7d:d4:c5:bd:ec:29:ab:3c:16:4e:af:38:de:
         52:7b:a5:d9:23:34:1d:75:fa:af:cb:0e:dc:31:20:74:ed:cf:
         05:2b:71:3b:73:01:27:5f:0c:0b:da:ee:31:f5:6c:68:13:25:
         d9:41:e3:18:fa:aa:5d:cd:e6:12:1c:6a:5a:04:57:41:8d:86:
         26:ba:cd:75:7d:9a:39:71:60:0f:3f:ff:6a:30:89:7d:9f:8b:
         dc:f0:07:a0:ee:57:10:b9:dc:a4:e5:3a:64:9e:8f:fb:a9:ef:
         8c:22:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org