Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136362e302f32342d3234203d3e203237373335.roa
File:                     3230302e32372e3136362e302f32342d3234203d3e203237373335.roa (raw, json)
Hash identifier:          /nVUKH6HeCjx2WSVUiEZseDb6zdm0Di449+Om4o68/c=
Subject key identifier:   E4:E5:AA:49:81:5A:8F:AE:BF:7B:13:6E:70:96:43:54:3E:AF:A5:3F
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       1AE33414BF05247ADF657854504F9E9D9C02B2E9
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136362e302f32342d3234203d3e203237373335.roa
Signing time:             Tue 04 Feb 2025 18:43:17 +0000
ROA not before:           Tue 04 Feb 2025 18:38:17 +0000
ROA not after:            Tue 03 Feb 2026 18:43:17 +0000
asID:                     27735
IP address blocks:        200.27.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e3:34:14:bf:05:24:7a:df:65:78:54:50:4f:9e:9d:9c:02:b2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:17 2025 GMT
            Not After : Feb  3 18:43:17 2026 GMT
        Subject: CN=E4E5AA49815A8FAEBF7B136E709643543EAFA53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:5d:9f:8c:20:00:3d:5d:c0:cb:c7:a6:81:
                    1b:45:d7:f5:55:1d:88:c6:c3:62:2a:19:59:01:bb:
                    94:f4:2c:76:79:2d:8d:bf:62:fd:e2:e0:58:d5:1d:
                    17:0e:4c:1e:48:33:f9:52:cb:6d:89:b5:01:1a:89:
                    07:e6:61:59:6c:f9:12:d1:e0:3a:7e:46:ae:71:f1:
                    15:a0:eb:b7:b2:51:8c:1f:7d:68:a2:7d:43:78:55:
                    ee:2f:35:4e:5b:09:00:76:dc:b1:bb:11:c6:e2:bb:
                    de:fd:47:35:b6:11:83:28:2d:58:10:97:fb:41:3c:
                    2f:5e:17:c3:5d:3d:f4:fd:4e:f1:96:de:63:30:2c:
                    88:f1:05:20:c1:fc:01:67:84:01:7d:0e:7e:43:50:
                    cb:9d:4e:03:1b:90:54:ef:89:53:05:99:05:8e:57:
                    8c:2f:6b:4b:b5:54:a2:71:b2:e9:2c:fd:98:02:a2:
                    7e:2c:03:ab:6b:67:d0:cf:98:60:38:7b:4b:ee:73:
                    74:18:7f:7b:63:7f:41:2e:09:a0:11:9c:5b:b6:4d:
                    e8:71:c9:8d:66:bb:3a:e3:cc:b5:26:96:8c:ca:29:
                    3b:41:ab:75:95:95:65:2e:f6:c7:8c:eb:37:c9:aa:
                    77:21:ce:d9:01:40:2f:fc:da:83:1a:f3:17:88:ef:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:AA:49:81:5A:8F:AE:BF:7B:13:6E:70:96:43:54:3E:AF:A5:3F
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3136362e302f32342d3234203d3e203237373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:17:1c:20:14:84:c0:a8:30:2e:76:28:d7:22:0d:0b:aa:
         6d:58:cf:e1:45:b9:2b:28:0f:1e:75:e7:ab:32:c2:ad:8f:ad:
         78:5f:da:a3:a1:93:31:d3:3e:ae:c6:51:d3:92:69:f7:3a:01:
         c8:2c:bc:a7:fa:5e:43:07:4f:12:5f:95:58:58:e8:48:4d:84:
         ed:3c:48:10:72:7b:90:a0:0e:52:50:06:53:36:10:8c:1c:c9:
         38:43:1f:a4:0c:1b:3c:84:eb:ab:9f:e7:8e:9e:89:64:2e:ea:
         d4:a7:42:20:e9:31:98:55:eb:bc:91:84:5e:e4:ba:90:55:db:
         6b:7d:4f:ee:c7:bf:c8:1f:82:b6:5a:6d:0e:39:89:3f:7d:44:
         ff:58:38:c0:a0:22:ad:ea:2a:76:de:db:32:f5:ff:55:04:2f:
         fd:57:de:12:00:4c:ac:53:a4:74:9d:2c:25:51:85:95:7c:bf:
         0e:65:ac:6e:14:13:eb:67:67:a7:dd:f2:5f:c7:71:ed:ee:df:
         36:62:d8:af:5e:8f:b7:9b:99:ae:ce:72:21:cc:b7:f0:9b:ae:
         d1:10:7e:97:00:62:7d:79:9a:84:a0:4a:87:12:23:e9:78:fe:
         e2:16:3f:7e:ea:f3:00:0d:3d:f7:01:89:d4:a9:e6:d2:82:02:
         31:83:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:10 2025 by rpki-client on console.sobornost.net