Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/3230302e3131352e35392e302f32342d3234203d3e20323635373037.roa
File:                     3230302e3131352e35392e302f32342d3234203d3e20323635373037.roa (raw, json)
Hash identifier:          dIiXQc01OTWCyi7FQloSE1M3r0orsOaSzPxGYT9aNys=
Subject key identifier:   D2:1E:B1:82:CD:DC:3D:5B:93:C3:C6:B8:93:1D:65:CD:E7:3B:91:A9
Certificate issuer:       /CN=26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E
Certificate serial:       45641EF83116CABE2D94F6C988F12886FB88D1D4
Authority key identifier: 26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/3230302e3131352e35392e302f32342d3234203d3e20323635373037.roa
Signing time:             Tue 05 Mar 2024 17:59:18 +0000
ROA not before:           Tue 05 Mar 2024 17:54:18 +0000
ROA not after:            Tue 04 Mar 2025 17:59:18 +0000
asID:                     265707
IP address blocks:        200.115.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:1e:f8:31:16:ca:be:2d:94:f6:c9:88:f1:28:86:fb:88:d1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E
        Validity
            Not Before: Mar  5 17:54:18 2024 GMT
            Not After : Mar  4 17:59:18 2025 GMT
        Subject: CN=D21EB182CDDC3D5B93C3C6B8931D65CDE73B91A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:4c:d8:6f:5a:67:1a:dc:e0:c7:f1:f5:5b:
                    4d:fb:e3:a3:b6:ce:9c:5a:89:03:bf:d8:14:e8:76:
                    56:4f:ad:9d:bf:11:f4:41:c9:0b:4d:23:f8:61:9c:
                    90:29:c5:bb:c5:ab:dc:50:03:84:79:74:49:e7:41:
                    4f:f6:f1:f1:28:6e:f5:4f:cd:06:c4:ea:a8:5e:e3:
                    38:18:33:84:27:53:47:c5:92:0d:13:66:60:89:e4:
                    36:b6:60:49:d7:80:55:9d:cf:36:d1:c4:58:74:d1:
                    09:48:16:68:bd:9c:50:9b:72:49:ca:54:dc:eb:26:
                    b0:c8:2b:69:70:d7:74:aa:d3:63:15:1e:7f:07:b2:
                    7e:b3:bd:88:c3:7b:2e:e0:3a:e6:e7:58:20:e8:84:
                    94:d9:7f:55:0e:03:c7:0c:e3:66:40:47:8e:40:b6:
                    1d:32:8e:12:ae:05:f7:cd:de:a5:49:2a:2c:17:5b:
                    c7:6b:2a:58:0c:2c:38:dd:8d:90:af:f8:2e:24:5d:
                    b6:0c:ea:c4:92:ef:84:89:21:3b:b6:87:c2:3a:03:
                    ce:48:a2:67:27:22:e1:be:76:8c:b2:cb:1f:a7:e8:
                    68:d5:fd:9f:58:bb:97:77:41:dc:d7:66:91:68:ad:
                    8d:9c:ef:67:4f:00:73:81:c1:4f:86:78:5c:9d:0e:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1E:B1:82:CD:DC:3D:5B:93:C3:C6:B8:93:1D:65:CD:E7:3B:91:A9
            X509v3 Authority Key Identifier:
                keyid:26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/3230302e3131352e35392e302f32342d3234203d3e20323635373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:b9:bd:3c:d6:d9:10:c3:69:a5:e7:f2:32:f4:48:73:0f:
         40:7a:7f:b9:60:d7:f5:7d:e8:19:94:8d:8e:12:f6:91:a4:db:
         8c:95:94:cd:07:ae:4d:7e:6a:bd:a4:f9:a4:73:4d:52:95:db:
         05:84:51:d5:22:29:ca:35:1d:eb:fc:5a:bd:9d:19:9d:a8:46:
         90:14:fc:02:72:c1:cd:20:a5:f9:26:8d:21:f4:60:da:90:b6:
         f2:4b:c3:40:21:2c:eb:1b:c6:ec:7f:6c:2d:5b:7f:b3:b8:d3:
         b6:fe:3d:8f:94:29:d7:46:2d:27:10:a2:1f:60:be:98:1d:49:
         e1:c9:89:6d:6f:1a:ad:d0:de:b2:ea:21:43:83:90:9c:2a:63:
         3f:e3:6a:8f:3b:c5:d5:d4:72:f9:cc:96:d7:ce:59:4a:19:e1:
         95:91:1b:51:1e:71:22:87:7d:cf:16:93:20:ef:9b:6a:5e:b5:
         19:4b:ec:3f:07:76:e6:9d:76:0b:c7:cf:8a:8e:b6:a5:01:91:
         2d:b9:fd:90:30:0e:89:c0:5d:ec:97:d2:29:51:7d:aa:e1:3c:
         23:3f:f7:ab:ac:ad:1a:a4:d5:0d:cd:9b:27:c4:df:53:b6:7b:
         ed:64:d3:ec:ec:c0:63:f3:f5:d9:3e:42:fe:3d:22:b9:f1:68:
         12:8a:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:02:40 2024 by rpki-client on console-ams.rpki-client.org