Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230302e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3230302e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          mlN5cFFe/gH6iWq8TCkvzB6I6VvTx28pOaWgPV7//YA=
Subject key identifier:   B2:55:C9:E5:BF:E9:18:A0:FD:D6:90:B7:B5:9A:F2:42:7F:2D:79:28
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       493100BDC97E78ECD44836F837A49B496923ADDB
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230302e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:14 +0000
ROA not before:           Tue 04 Feb 2025 18:38:14 +0000
ROA not after:            Tue 03 Feb 2026 18:43:14 +0000
asID:                     6429
IP address blocks:        200.14.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:31:00:bd:c9:7e:78:ec:d4:48:36:f8:37:a4:9b:49:69:23:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:14 2025 GMT
            Not After : Feb  3 18:43:14 2026 GMT
        Subject: CN=B255C9E5BFE918A0FDD690B7B59AF2427F2D7928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:85:cb:40:c0:31:c6:e0:f9:5f:41:7e:78:
                    d3:fc:40:dc:39:99:54:40:a7:48:6f:ef:ce:50:69:
                    e7:32:8d:1a:32:3b:d3:a0:41:b8:c8:83:09:23:c5:
                    a3:ad:27:55:fd:77:e9:03:e3:6e:d4:c7:52:4a:d1:
                    7e:d7:95:6e:a7:69:77:a0:bf:e6:c8:ec:75:54:ca:
                    1e:57:c1:06:c7:c9:b2:33:63:66:16:b0:5b:1c:5c:
                    41:4e:9f:32:9a:04:a0:b5:a3:d6:9a:28:09:8e:12:
                    cd:0e:97:ed:f6:48:35:cb:11:87:c8:25:c0:6e:1e:
                    7c:82:32:2b:96:62:88:77:7f:f2:00:90:7a:ae:35:
                    19:87:55:8f:76:77:10:80:f3:e3:92:6f:12:cb:f3:
                    48:77:ac:29:0a:d1:06:8b:65:ce:30:53:61:78:74:
                    c9:9e:e6:47:b1:62:e9:7b:6c:2d:86:b4:65:a3:26:
                    9e:b2:9e:87:b9:80:09:f6:bd:76:93:bd:7c:f4:e9:
                    9c:77:60:cb:98:3a:06:76:2c:3e:fc:d1:bc:87:bf:
                    6e:2c:52:72:e9:30:f4:02:08:2b:87:04:bd:42:49:
                    90:93:a8:99:68:f9:5c:b7:87:8f:d9:78:38:12:f7:
                    17:79:5e:ad:d0:c4:90:cf:d4:c7:a4:19:80:8a:7e:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:C9:E5:BF:E9:18:A0:FD:D6:90:B7:B5:9A:F2:42:7F:2D:79:28
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230302e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:03:25:55:3c:2b:79:5f:6c:51:cd:b6:af:b8:39:e4:85:81:
         6b:80:37:62:e6:ca:92:a1:f1:1b:24:49:ad:4d:d8:74:79:1a:
         48:62:cf:f4:a1:49:e5:98:b2:15:b6:c8:16:c4:95:dc:09:b0:
         12:71:d9:e7:25:5d:93:ed:7a:a5:8e:ad:a7:05:ae:65:85:de:
         83:97:2a:93:64:3a:a6:76:92:ad:ae:50:99:85:a1:95:b9:9a:
         66:bc:0a:2c:05:36:f2:9c:63:00:83:c9:bc:ce:a1:3a:3e:c0:
         dc:b3:37:c8:74:37:df:33:e9:63:d1:08:1e:df:8c:83:f5:a0:
         12:ec:2b:34:5a:00:98:25:66:e2:8f:09:9b:3a:65:2d:37:65:
         f8:3a:fe:82:bc:6d:d4:e7:ba:3c:d9:b9:17:50:3b:bb:25:7d:
         16:d2:8a:1e:28:56:89:e8:ad:57:ce:d9:aa:c2:80:4e:f7:67:
         8f:44:76:3a:0f:43:7f:df:2e:5d:b5:fd:fc:5c:c4:09:23:f5:
         1a:54:85:68:a0:09:0b:04:12:71:93:8a:8f:6f:f0:3e:bf:7a:
         d9:bb:f1:4a:cc:44:2f:61:5e:3d:da:b4:a6:6f:e1:9e:ce:0e:
         71:ce:41:cc:9d:d4:12:eb:4a:14:b7:75:ca:39:9f:49:7d:b4:
         29:72:7e:5e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSTEAvcl+eOzUSDb4N6SbSWkjrdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNTAyMDQxODM4MTRaFw0yNjAyMDMxODQzMTRaMDMxMTAvBgNV
BAMTKEIyNTVDOUU1QkZFOTE4QTBGREQ2OTBCN0I1OUFGMjQyN0YyRDc5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO6YXLQMAxxuD5X0F+eNP8QNw5
mVRAp0hv785QaecyjRoyO9OgQbjIgwkjxaOtJ1X9d+kD427Ux1JK0X7XlW6naXeg
v+bI7HVUyh5XwQbHybIzY2YWsFscXEFOnzKaBKC1o9aaKAmOEs0Ol+32SDXLEYfI
JcBuHnyCMiuWYoh3f/IAkHquNRmHVY92dxCA8+OSbxLL80h3rCkK0QaLZc4wU2F4
dMme5kexYul7bC2GtGWjJp6ynoe5gAn2vXaTvXz06Zx3YMuYOgZ2LD780byHv24s
UnLpMPQCCCuHBL1CSZCTqJlo+Vy3h4/ZeDgS9xd5Xq3QxJDP1MekGYCKfmzHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUslXJ5b/pGKD91pC3tZryQn8teSgwHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzEzNDJlMzIzMDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDsgwDQYJ
KoZIhvcNAQELBQADggEBAFADJVU8K3lfbFHNtq+4OeSFgWuAN2LmypKh8RskSa1N
2HR5Gkhiz/ShSeWYshW2yBbEldwJsBJx2eclXZPteqWOracFrmWF3oOXKpNkOqZ2
kq2uUJmFoZW5mma8CiwFNvKcYwCDybzOoTo+wNyzN8h0N98z6WPRCB7fjIP1oBLs
KzRaAJglZuKPCZs6ZS03Zfg6/oK8bdTnujzZuRdQO7slfRbSih4oVonorVfO2arC
gE73Z49EdjoPQ3/fLl21/fxcxAkj9RpUhWigCQsEEnGTio9v8D6/etm78UrMRC9h
Xj3atKZv4Z7ODnHOQcyd1BLrShS3dco5n0l9tClyfl4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:13 2025 by rpki-client