Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232362e302f32342d3234203d3e2037343138.roa
File:                     3230302e31302e3232362e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          wg5RryE7kqH6avZuGXqSKSAFO40fDu0bVNOTqUgMNQI=
Subject key identifier:   63:17:4C:B7:F1:BD:DA:C1:5C:25:E0:82:98:6D:BA:9B:73:11:B5:04
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       6316675914168418CC9C5B493B50A90BC8A8ECB3
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232362e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:16 +0000
ROA not before:           Tue 05 Mar 2024 17:47:16 +0000
ROA not after:            Tue 04 Mar 2025 17:52:16 +0000
asID:                     7418
IP address blocks:        200.10.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:16:67:59:14:16:84:18:cc:9c:5b:49:3b:50:a9:0b:c8:a8:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:16 2024 GMT
            Not After : Mar  4 17:52:16 2025 GMT
        Subject: CN=63174CB7F1BDDAC15C25E082986DBA9B7311B504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:04:82:cf:c5:a8:9c:25:0f:3e:ba:6d:d1:
                    00:d8:1e:aa:f0:86:8f:21:0a:67:f7:13:02:42:f7:
                    52:0e:9d:1a:1b:2c:cb:61:d8:c4:e0:21:69:63:c1:
                    3a:dc:81:b0:9e:98:85:11:5f:82:78:dd:25:a6:3f:
                    d6:38:12:c8:98:55:b6:05:ce:a6:a0:fb:5a:98:12:
                    f5:d1:7d:28:36:ff:a0:25:53:d3:47:9b:42:10:1f:
                    18:56:69:8d:ae:33:89:e1:13:fe:8f:2c:b3:b6:c2:
                    5f:6d:14:fb:e0:5a:e6:b2:36:7e:cd:91:92:a1:45:
                    5c:0b:c7:4f:60:c4:bd:45:dd:9e:5b:06:86:9a:14:
                    ec:6c:48:ac:a9:8d:81:1e:86:0b:62:48:d9:a5:46:
                    ee:b2:4b:0b:a5:54:65:05:65:31:f3:20:fa:8c:da:
                    35:83:c1:82:32:38:70:7a:71:fe:33:8c:5a:9c:b7:
                    43:d6:76:73:a8:ff:1b:78:7b:47:ab:33:8f:d1:0e:
                    9d:ac:a4:22:c3:94:80:47:7f:d3:e2:63:e2:0e:56:
                    ae:34:27:5d:75:53:67:8b:2f:05:8e:fc:0c:4d:c6:
                    57:43:62:f6:eb:27:b7:cf:e1:53:dd:21:db:ed:67:
                    69:5d:68:a5:e0:6f:da:28:e9:d7:3c:4e:d9:ad:4f:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:4C:B7:F1:BD:DA:C1:5C:25:E0:82:98:6D:BA:9B:73:11:B5:04
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232362e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:ad:d1:2a:a1:02:8b:7f:50:49:77:03:4a:7c:ea:f4:df:
         71:d5:ee:a8:4a:90:57:a9:e6:4f:6e:b2:28:6d:f2:b3:b8:a5:
         c1:75:f4:7e:1d:8b:a2:41:29:d9:29:b2:c3:b6:ea:28:33:7d:
         09:6a:ad:dc:89:2a:93:e9:10:55:31:f5:27:b9:73:08:af:8c:
         7c:17:1c:ed:8e:b6:13:4b:55:8b:c9:4e:7a:32:4e:31:82:8a:
         75:9f:cd:12:4e:a9:9d:be:4a:58:22:3a:03:63:31:77:e2:80:
         c9:fb:3a:28:50:40:aa:5b:a2:47:1c:0c:00:2c:9e:e7:8b:96:
         d0:09:d7:38:ca:17:bf:76:04:32:d0:e5:37:f5:4f:9d:d7:ea:
         d4:7c:f6:08:68:71:59:78:ab:e2:98:a6:74:4d:6a:fb:38:d0:
         cc:b7:4c:82:59:58:c8:10:56:9b:8c:f0:d4:75:b2:7e:b1:25:
         59:e8:c4:fc:8a:e2:3c:3f:ea:9c:df:af:fa:87:1a:cc:e0:01:
         a9:c6:85:39:b1:bc:ca:c2:64:54:ae:d8:87:d8:15:c6:e3:a2:
         38:3e:cc:1b:4e:a3:f3:45:63:95:fa:b6:97:ce:2b:35:80:46:
         2e:08:08:f1:33:e5:d2:0c:7a:a5:a1:71:ec:0d:36:ae:b9:52:
         20:9a:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org