Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230312e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3230312e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          47IzFWXWZn7zkC/nk8BtE7YYM3UvzD2BFmU8boWAzok=
Subject key identifier:   E2:A6:72:84:37:23:D2:8F:A5:FD:B2:3C:B6:7F:08:50:9C:97:26:8C
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       7514F91E0B77A8A9395A0CF2B37B4D768A195807
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230312e302f32342d3234203d3e2036343239.roa
Signing time:             Mon 02 Mar 2026 19:32:25 +0000
ROA not before:           Mon 02 Mar 2026 19:27:25 +0000
ROA not after:            Mon 01 Mar 2027 19:32:25 +0000
asID:                     6429
IP address blocks:        200.14.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Mar 2026 23:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:14:f9:1e:0b:77:a8:a9:39:5a:0c:f2:b3:7b:4d:76:8a:19:58:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  2 19:27:25 2026 GMT
            Not After : Mar  1 19:32:25 2027 GMT
        Subject: CN=E2A672843723D28FA5FDB23CB67F08509C97268C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:e0:49:f0:f3:d6:a0:0a:f0:a4:a0:a5:23:
                    17:d7:1b:ae:c9:38:e7:64:a6:73:5f:e3:86:ba:4f:
                    a5:53:b9:35:6f:32:99:e3:b5:d2:02:7b:29:ee:02:
                    50:a8:3e:1f:d6:60:6e:3b:0d:13:63:a4:55:1f:68:
                    25:36:0c:80:74:6a:ce:1a:37:64:b7:be:12:06:d7:
                    07:ab:fe:94:10:91:5d:6f:ef:c5:a8:11:01:2e:29:
                    05:bc:f9:47:4b:52:a6:5b:13:3d:2f:e8:d9:ab:62:
                    21:8c:d3:f4:9a:0a:f1:70:ce:af:5f:5d:be:8f:0e:
                    06:61:79:29:ef:a7:a6:40:f0:27:83:da:8b:d2:b1:
                    69:70:d1:75:2b:a3:b5:1a:52:91:10:56:c8:37:dd:
                    02:3c:49:48:fc:04:7e:14:d1:c5:11:74:5b:a6:54:
                    58:96:4d:1b:a4:f7:45:64:3d:34:ed:87:17:eb:80:
                    17:44:9d:6f:77:f9:5a:7f:ba:f7:1d:a4:ce:80:70:
                    bf:69:74:36:b8:f9:44:8a:97:5f:b3:98:56:05:99:
                    9d:e0:3f:b9:66:77:e8:97:14:d6:5b:6a:7c:7f:ff:
                    54:58:98:cb:7c:7b:4d:25:a2:fb:06:a5:47:f9:c9:
                    ee:c2:81:aa:3a:e5:cf:0e:cd:2b:a5:64:cb:7d:16:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A6:72:84:37:23:D2:8F:A5:FD:B2:3C:B6:7F:08:50:9C:97:26:8C
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230312e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:39:5d:aa:5f:69:20:d1:6b:6c:ae:ca:6a:7b:48:d0:94:58:
         e0:d3:9d:5f:47:c3:93:2f:e6:59:c5:71:5c:34:98:9d:59:43:
         b3:50:00:4e:31:bc:6d:80:95:88:64:d6:f8:b3:32:f3:87:a7:
         24:7f:f6:16:53:01:31:7a:19:b0:a7:eb:3f:8a:f6:7d:20:2b:
         8c:5d:c5:74:00:af:a0:e1:f9:30:7a:f3:81:49:67:46:31:1b:
         38:31:a6:5a:b1:76:88:32:a3:3b:dc:96:69:bb:0d:17:78:da:
         cd:8a:c4:ee:e2:c4:ec:04:ab:93:9a:34:00:5d:07:5c:39:b1:
         9c:d5:74:63:86:71:ec:27:2d:71:7a:af:02:12:41:98:ee:5c:
         7f:85:33:7e:00:f9:ff:ff:9a:57:11:66:c3:19:e8:16:0f:b9:
         d5:b7:19:a5:1b:45:9e:70:06:97:f2:f2:93:12:81:b6:50:48:
         5a:b9:2d:77:73:a5:bc:18:1e:11:e3:a3:fa:6e:25:5b:1e:60:
         33:4f:87:dd:c6:58:ed:cf:b7:a0:54:aa:60:e5:a4:21:b6:22:
         af:1e:69:e6:1b:ae:92:7b:fa:01:93:e7:7b:6b:56:3b:1a:0c:
         17:97:a7:08:46:e0:b4:7e:11:85:a6:b0:2a:e1:96:83:fe:39:
         05:8b:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 19:17:13 2026 by rpki-client