Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
File:                     3230302e32362e3230382e302f32312d3231203d3e203131303831.roa (raw, json)
Hash identifier:          mcQUcireSV/s/SOessyAuxFUu6OuveYOWNtPqt2F+IY=
Subject key identifier:   B1:4C:E1:AB:A9:0D:A8:C9:51:12:00:31:C0:73:12:0B:C0:61:D8:96
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       0DF1420B580A83834D85DB808E80960BE02D1092
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa
Signing time:             Tue 04 Feb 2025 18:50:49 +0000
ROA not before:           Tue 04 Feb 2025 18:45:49 +0000
ROA not after:            Tue 03 Feb 2026 18:50:49 +0000
asID:                     11081
IP address blocks:        200.26.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f1:42:0b:58:0a:83:83:4d:85:db:80:8e:80:96:0b:e0:2d:10:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:49 2025 GMT
            Not After : Feb  3 18:50:49 2026 GMT
        Subject: CN=B14CE1ABA90DA8C951120031C073120BC061D896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:84:26:10:44:3c:ea:5d:53:0c:0b:52:a4:
                    90:56:81:b1:73:4e:99:09:ab:c8:bd:76:82:e8:48:
                    f4:0a:01:a5:ab:f9:79:5f:97:0b:75:2d:43:cf:66:
                    f0:cc:96:85:cb:6a:d3:3d:ad:f4:b0:08:bc:e7:3e:
                    c2:52:c6:79:94:19:1c:58:91:d6:df:61:3a:45:da:
                    dd:99:b0:ce:d2:e4:6e:3c:99:61:c6:16:62:93:0c:
                    e8:52:3b:9f:40:29:f1:45:a4:fe:bf:93:d4:75:31:
                    6c:b2:f4:39:1f:c7:b4:af:48:ce:9d:56:3e:6c:f3:
                    6b:5f:2b:12:17:57:b5:f5:16:1a:c1:48:80:f1:ac:
                    36:c0:0f:fe:4a:7f:16:6d:b9:a5:9a:86:25:5e:e1:
                    4d:46:d0:1c:2d:7f:1a:00:d7:50:8a:fa:b9:8a:e8:
                    dc:7f:e3:54:a2:4f:d6:ac:b1:d7:d8:2a:1b:59:f2:
                    69:25:5e:c4:69:ad:90:2e:72:a5:b0:61:8c:1a:16:
                    f5:03:bd:b5:4d:e5:7a:c3:92:d2:ff:d2:7c:bf:61:
                    35:21:5d:8d:bb:36:b7:69:45:ef:2d:00:77:05:9b:
                    d9:aa:fb:cc:53:c7:7a:47:45:73:c5:76:07:3a:23:
                    de:20:e3:37:bb:e9:19:33:d9:0b:c4:96:02:2f:a6:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:E1:AB:A9:0D:A8:C9:51:12:00:31:C0:73:12:0B:C0:61:D8:96
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3230382e302f32312d3231203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:cb:a2:b8:6d:35:d0:73:97:26:85:f3:04:05:59:21:65:
         1d:45:4e:61:f4:1f:d7:7f:52:49:b5:d1:2e:57:b0:86:f1:3b:
         94:4a:03:28:42:73:6a:31:0c:fa:b6:cd:d7:ea:97:5f:ec:ad:
         10:91:f0:18:34:e7:d6:9e:f2:36:39:bf:d5:93:ad:73:47:0a:
         fd:0a:77:ae:03:c3:b6:d3:34:d0:bc:8b:8b:3f:61:8f:79:f4:
         42:c8:1e:88:bb:3d:2e:6b:d5:7f:92:49:1b:af:d5:3d:c0:f1:
         b6:fd:39:d8:77:64:f8:22:17:dc:d2:17:43:c1:62:9b:a3:d3:
         21:da:95:5e:3c:90:d6:3c:94:1b:67:dc:be:8d:39:08:af:a9:
         fc:8f:17:1b:f8:84:12:29:3c:82:7b:8a:4f:45:e5:16:5e:b5:
         37:e3:53:88:b1:f2:c5:f9:12:64:b5:c4:55:98:84:f5:e7:1d:
         38:51:42:69:1d:ae:51:47:b3:8b:bd:fe:cf:4b:0a:3d:44:0b:
         57:ab:26:0a:5c:15:9c:93:f3:46:14:94:00:af:32:c1:c4:36:
         cb:6e:8f:f3:69:f4:b7:45:91:59:20:e4:77:c0:fe:50:bf:4b:
         dd:94:77:25:8e:f5:c8:c8:cf:73:77:2d:fc:09:a6:39:88:5b:
         a9:79:7a:89
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDfFCC1gKg4NNhduAjoCWC+AtEJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTAyMDQxODQ1NDlaFw0yNjAyMDMxODUwNDlaMDMxMTAvBgNV
BAMTKEIxNENFMUFCQTkwREE4Qzk1MTEyMDAzMUMwNzMxMjBCQzA2MUQ4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCceYQmEEQ86l1TDAtSpJBWgbFz
TpkJq8i9doLoSPQKAaWr+Xlflwt1LUPPZvDMloXLatM9rfSwCLznPsJSxnmUGRxY
kdbfYTpF2t2ZsM7S5G48mWHGFmKTDOhSO59AKfFFpP6/k9R1MWyy9Dkfx7SvSM6d
Vj5s82tfKxIXV7X1FhrBSIDxrDbAD/5KfxZtuaWahiVe4U1G0BwtfxoA11CK+rmK
6Nx/41SiT9assdfYKhtZ8mklXsRprZAucqWwYYwaFvUDvbVN5XrDktL/0ny/YTUh
XY27NrdpRe8tAHcFm9mq+8xTx3pHRXPFdgc6I94g4ze76Rkz2QvElgIvpjCnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsUzhq6kNqMlREgAxwHMSC8Bh2JYwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMyMzAzMDJlMzIzNjJlMzIzMDM4MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzMTMwMzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8ga0DAN
BgkqhkiG9w0BAQsFAAOCAQEAKi/LorhtNdBzlyaF8wQFWSFlHUVOYfQf139SSbXR
LlewhvE7lEoDKEJzajEM+rbN1+qXX+ytEJHwGDTn1p7yNjm/1ZOtc0cK/Qp3rgPD
ttM00LyLiz9hj3n0QsgeiLs9LmvVf5JJG6/VPcDxtv052Hdk+CIX3NIXQ8Fim6PT
IdqVXjyQ1jyUG2fcvo05CK+p/I8XG/iEEik8gnuKT0XlFl61N+NTiLHyxfkSZLXE
VZiE9ecdOFFCaR2uUUezi73+z0sKPUQLV6smClwVnJPzRhSUAK8ywcQ2y26P82n0
t0WRWSDkd8D+UL9L3ZR3JY71yMjPc3ct/AmmOYhbqXl6iQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:41 2025 by rpki-client