Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32302d3234203d3e203532323333.roa
File:                     3230302e32362e3230382e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          NUXleo4NPMW/or6YR1Wl2s+TcgATNm4lAmeAIZ/byQw=
Subject key identifier:   9B:F0:4C:B6:B7:3C:24:E0:FA:26:6A:99:14:86:C4:52:02:9E:43:F9
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       03AA9BEA8953AE80A0CFC08B4FEF1EDAF69C4028
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:07 +0000
ROA not before:           Tue 05 Mar 2024 17:37:07 +0000
ROA not after:            Tue 04 Mar 2025 17:42:07 +0000
asID:                     52233
IP address blocks:        200.26.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:aa:9b:ea:89:53:ae:80:a0:cf:c0:8b:4f:ef:1e:da:f6:9c:40:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:07 2024 GMT
            Not After : Mar  4 17:42:07 2025 GMT
        Subject: CN=9BF04CB6B73C24E0FA266A991486C452029E43F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:ec:07:83:cf:c5:36:62:bb:66:8e:80:30:
                    e1:2b:e9:19:3c:9d:c5:03:93:a7:9a:6c:f7:9c:e2:
                    5c:54:0d:bd:87:1e:10:1a:75:1a:ba:1a:ab:03:8a:
                    c2:8d:0a:61:81:46:95:09:a2:f8:f2:0b:de:95:da:
                    9a:19:85:84:32:ad:18:a2:46:fd:28:89:85:95:77:
                    0a:ac:eb:36:50:e2:2e:dd:e6:6a:af:c7:55:d1:1e:
                    51:0f:e9:18:38:96:d9:b9:12:cd:1d:1e:cd:c4:be:
                    97:9f:31:4a:17:d9:6a:5d:39:aa:af:8e:96:c3:73:
                    e2:e1:e6:1e:7c:29:e2:75:bc:52:34:d4:ce:b1:58:
                    bd:c9:85:83:c4:c9:45:97:b8:35:6f:b9:c0:61:41:
                    02:a6:96:89:cd:80:30:6e:57:df:60:fd:06:f0:69:
                    65:2c:e0:06:28:5c:73:39:52:dc:a7:11:29:31:8a:
                    46:4e:cc:dd:4e:43:ae:5a:82:dc:5d:bf:d4:13:07:
                    10:0a:59:8c:3c:f5:82:99:76:18:e2:7f:4e:ed:ff:
                    3b:c6:e8:9c:86:47:4b:6f:c9:fa:b2:b2:0a:10:45:
                    ab:65:5f:96:c0:4b:5e:54:2e:e6:78:69:aa:fd:0a:
                    d5:b1:56:37:fa:9b:85:e7:5d:f2:2a:41:92:17:e3:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F0:4C:B6:B7:3C:24:E0:FA:26:6A:99:14:86:C4:52:02:9E:43:F9
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:95:55:44:49:ec:d8:f2:25:62:67:3c:b0:0d:09:a7:24:0b:
         16:60:4b:fb:05:ab:a6:58:29:42:9e:85:c7:75:1c:3e:99:d0:
         43:78:78:1c:93:c5:f7:4b:3c:af:78:c7:5d:a8:32:2f:4e:66:
         c4:1e:98:03:ca:34:46:e4:1b:a3:6e:ad:35:32:bc:ca:46:59:
         5b:ad:86:75:b8:00:92:44:03:5d:d0:1f:d3:0b:77:57:39:80:
         8e:8f:23:7d:e3:7e:92:e1:d1:7a:22:5e:06:69:97:e7:1f:18:
         54:4d:d4:66:9b:15:5b:64:09:77:da:92:1c:19:50:e5:b8:b6:
         13:c2:af:9e:90:cf:48:5b:70:20:6c:17:23:73:d4:f3:01:2b:
         8f:32:53:26:05:a7:c2:c3:07:4c:4f:18:73:72:c5:51:ed:a2:
         40:a3:af:00:02:7b:19:d2:1b:7a:f3:97:ec:b4:37:d7:17:91:
         68:80:e4:3c:ef:da:38:0b:1b:c8:0b:6e:ca:77:f8:8b:39:af:
         76:c7:ec:48:3c:2f:95:ea:fc:40:63:80:2c:5a:16:dc:c7:3f:
         99:d6:2a:ea:65:c0:02:98:21:93:52:64:9f:f9:d4:86:94:be:
         05:c5:67:65:fd:d3:c5:78:7c:f4:62:b8:07:98:4d:b2:9b:2c:
         1f:5a:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org