Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
File:                     3230302e32362e3230382e302f32312d3231203d3e203131303831.roa (raw, json)
Hash identifier:          +iUlG+zXcduSef1GabvzpvIUGnsN2XOq1aVzkfoIhvk=
Subject key identifier:   98:F8:5C:89:A9:10:0E:2F:D2:E0:CC:02:C3:0B:E3:1C:EC:F4:99:4F
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       413EF0F43E175CC44649376C9F3D654CEA9AFACD
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
Signing time:             Tue 05 Mar 2024 17:42:09 +0000
ROA not before:           Tue 05 Mar 2024 17:37:09 +0000
ROA not after:            Tue 04 Mar 2025 17:42:09 +0000
asID:                     11081
IP address blocks:        200.26.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3e:f0:f4:3e:17:5c:c4:46:49:37:6c:9f:3d:65:4c:ea:9a:fa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:09 2024 GMT
            Not After : Mar  4 17:42:09 2025 GMT
        Subject: CN=98F85C89A9100E2FD2E0CC02C30BE31CECF4994F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:2e:c0:84:3a:7a:57:76:f8:56:c0:a8:de:
                    2d:85:33:a3:99:4d:d2:ee:f5:2c:38:a6:df:64:8e:
                    97:75:2a:dc:17:3a:17:20:2b:de:a3:c2:a0:65:77:
                    06:ab:0e:6f:ae:f4:f2:55:68:f8:04:f8:e2:3b:83:
                    5f:3a:72:be:d0:c0:32:cf:0a:b6:a4:a8:90:89:c9:
                    43:e4:3d:90:b3:69:85:84:70:b5:a7:6b:02:23:2a:
                    61:a2:1a:44:19:fb:3e:e1:be:fc:6c:1c:c5:1d:33:
                    ad:33:86:11:12:fb:21:19:6e:70:75:81:30:c9:f8:
                    f1:b8:ab:64:fc:2c:38:d1:21:43:7d:23:8f:51:9f:
                    25:03:69:fe:3d:22:fc:6f:a9:b3:88:fd:03:8d:27:
                    bf:05:31:50:5c:c6:ba:93:89:ba:e8:bc:a3:34:81:
                    3f:eb:34:45:74:2f:f9:f0:ae:49:ab:34:52:b8:d3:
                    a3:e2:50:3e:a8:22:a7:fd:db:93:00:4a:d3:bf:f4:
                    7b:89:ba:4c:4e:3c:27:a5:d4:92:b1:f2:13:4c:da:
                    6e:1c:be:24:b2:6b:c1:d9:78:0a:f8:a3:87:2b:0a:
                    69:37:e3:01:9a:14:98:64:93:03:da:0f:ea:bd:5f:
                    69:15:1f:5d:ce:46:d9:f2:63:d6:4e:3f:a0:b4:63:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:5C:89:A9:10:0E:2F:D2:E0:CC:02:C3:0B:E3:1C:EC:F4:99:4F
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:c4:d7:9a:65:06:52:61:76:01:80:66:82:b9:3b:56:13:
         c3:1f:5b:b6:f8:db:57:0d:d1:59:bf:de:64:48:01:3b:f2:82:
         b6:a3:80:e3:22:64:93:2a:ff:e6:47:38:e2:86:3f:29:ef:6f:
         d2:f4:b9:9c:92:c2:9f:0a:03:ca:37:49:e3:43:c3:8f:13:46:
         8a:99:db:c5:d4:f7:62:ac:9e:32:10:49:6b:2c:8c:52:0d:3e:
         04:7b:c9:33:ca:4c:bf:dd:91:7f:88:c9:19:1c:4b:ee:5e:d2:
         c6:3e:db:6b:22:7c:cf:1b:27:fe:2a:3f:14:21:51:97:8e:12:
         32:4b:58:92:04:10:65:90:dd:23:57:11:f8:60:0c:6f:36:3f:
         95:53:f5:91:45:f0:3a:8b:59:d5:b4:65:54:6a:d7:0f:41:b7:
         d4:76:b1:b6:d6:36:fb:14:a4:f7:44:f0:4f:07:0b:7f:0b:32:
         f0:a4:7e:0b:8b:df:7d:77:1b:49:ae:14:b7:1f:28:c4:33:f0:
         ac:ce:73:f5:af:a7:e6:5b:36:ae:be:de:f3:8d:02:b4:fe:92:
         90:b7:51:1b:c8:f9:b9:c1:00:59:b9:e7:f8:0c:8e:0b:19:a6:
         12:99:54:54:c7:2f:7d:f3:a9:f2:e9:c2:d4:d2:b2:bc:aa:8a:
         b8:58:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org