Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230312e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3230312e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          CdV0WZXPBUlQFrbKItBjJIs97AqJegQBJ3WMOCOM3dM=
Subject key identifier:   4A:D1:28:6C:31:01:CD:49:5C:F4:5F:59:59:70:9D:06:E3:78:C7:B0
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       7914E83B280C66FC8EE62FF599FB1A3595D98508
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230312e302f32342d3234203d3e2036343239.roa
Signing time:             Mon 31 Mar 2025 19:00:00 +0000
ROA not before:           Mon 31 Mar 2025 18:55:00 +0000
ROA not after:            Mon 30 Mar 2026 19:00:00 +0000
asID:                     6429
IP address blocks:        200.14.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:14:e8:3b:28:0c:66:fc:8e:e6:2f:f5:99:fb:1a:35:95:d9:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar 31 18:55:00 2025 GMT
            Not After : Mar 30 19:00:00 2026 GMT
        Subject: CN=4AD1286C3101CD495CF45F5959709D06E378C7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:9f:f7:74:c3:fe:03:e8:e1:0c:b4:44:43:
                    24:7f:3c:c9:8c:53:19:51:dd:45:d8:11:99:08:de:
                    05:22:67:85:17:76:f6:f3:1b:c2:a0:6a:3a:6d:3f:
                    58:f6:33:d4:3e:2b:a8:dc:7c:55:84:cc:71:dd:3e:
                    99:98:de:71:e2:31:58:bc:8e:5e:64:4b:44:e0:3a:
                    43:a5:4f:9e:c1:34:a5:98:be:b3:12:18:ca:9b:f1:
                    72:31:ae:4b:56:47:4c:22:60:5d:70:2a:0f:d9:1c:
                    c8:5a:64:7a:58:29:70:18:1c:f1:d9:f0:37:64:11:
                    ea:a7:44:24:f5:d0:26:b5:65:e1:0e:ed:19:1d:69:
                    22:83:6e:9f:71:83:98:f4:59:c5:7c:82:e9:56:df:
                    13:5b:12:17:2d:35:8e:70:aa:d5:c7:13:7e:52:4f:
                    75:0c:79:fc:37:b6:45:80:9c:ac:01:45:f6:b6:3c:
                    70:86:bc:50:7c:7c:51:f3:b5:43:91:55:87:7d:93:
                    ea:67:90:9a:c4:00:92:ce:d2:72:9c:c0:8f:f2:f6:
                    9c:ec:18:84:79:3e:38:d1:5e:c8:2e:03:0b:cf:7c:
                    c3:9f:b4:46:b9:c4:12:ae:ab:ce:46:68:7a:34:b4:
                    76:58:5c:78:b2:1f:df:0a:4b:91:a2:e4:f4:1a:09:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:28:6C:31:01:CD:49:5C:F4:5F:59:59:70:9D:06:E3:78:C7:B0
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230312e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:38:99:36:8f:69:99:1e:0f:29:0b:d7:ec:39:d7:dc:7d:72:
         a6:76:d9:66:b2:d9:53:f8:50:3f:39:3b:c0:d4:51:83:e8:7e:
         82:62:52:6e:35:79:71:e3:9e:b0:7b:8a:da:50:fa:91:3f:15:
         d2:d9:bb:05:54:da:d5:f5:c6:fc:ac:95:e4:64:76:ff:5e:40:
         34:95:e5:92:37:e6:01:b4:39:a3:ab:60:b8:56:68:06:81:78:
         d9:e7:8e:a6:6d:d6:51:4c:b2:20:e6:16:c0:a9:36:f0:dd:92:
         85:a8:47:ff:ad:37:c6:98:41:0a:e5:e3:e6:58:b3:25:77:c7:
         27:c6:ba:f3:d4:0f:30:31:b6:66:45:d5:1b:f3:5c:52:4a:b9:
         c9:3f:a8:64:4e:52:c4:76:55:37:10:07:11:23:67:37:2d:99:
         18:5f:46:2c:79:c0:cb:a6:b6:7e:f6:f9:cb:a8:34:89:5c:8b:
         df:a4:66:0c:18:c1:c4:af:c7:fa:a7:70:8c:18:d0:13:16:f3:
         1a:e5:5f:cf:ee:ce:13:31:67:be:d8:b6:72:15:90:79:71:89:
         13:37:fa:c5:c1:e6:00:f6:ba:c7:01:aa:b3:42:14:78:ca:e0:
         af:ac:5d:6b:7d:6d:a7:05:da:fc:31:42:67:29:b6:ad:d4:4b:
         76:67:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:19 2025 by rpki-client