Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230322e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3230322e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          hkMW8QqbTwyunQAkEpQ6oyAvIevAKQmovGs8xPXEBcI=
Subject key identifier:   14:5D:CE:C9:E8:CD:5C:42:C2:D2:BA:EB:25:BC:61:35:E2:A8:8F:3A
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       7D4B7494AEFBF938805A0607D73E1729E6F61C48
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230322e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:12 +0000
ROA not before:           Tue 04 Feb 2025 18:38:12 +0000
ROA not after:            Tue 03 Feb 2026 18:43:12 +0000
asID:                     6429
IP address blocks:        200.14.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4b:74:94:ae:fb:f9:38:80:5a:06:07:d7:3e:17:29:e6:f6:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:12 2025 GMT
            Not After : Feb  3 18:43:12 2026 GMT
        Subject: CN=145DCEC9E8CD5C42C2D2BAEB25BC6135E2A88F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:7c:7a:9a:1d:84:f1:6d:77:0d:cc:5e:9f:
                    54:c5:ee:f7:ac:7f:7a:39:20:9f:eb:02:4e:b4:5f:
                    99:3b:57:71:11:35:88:55:28:b3:f8:8c:e5:9f:b6:
                    c5:df:8f:0c:70:ca:da:f2:24:1e:11:d6:3d:7b:d9:
                    51:2a:4c:00:94:86:f1:00:98:9c:f9:5e:7d:e8:2f:
                    7d:26:8b:af:38:b6:57:67:43:2f:e3:63:65:f8:58:
                    f7:de:54:86:1a:3a:9d:98:f9:09:0a:a1:73:e0:b9:
                    4a:13:14:01:81:2e:2a:d9:42:13:57:99:d4:42:58:
                    b6:bf:1e:ca:6b:a5:42:e5:d8:34:b0:d0:66:bc:f6:
                    d8:91:08:d3:29:5c:6e:a3:1a:a8:e6:d9:e1:9e:a0:
                    73:90:ef:04:2b:20:8c:fc:c9:54:a2:c3:ed:0d:c6:
                    4d:ef:24:b5:93:f2:28:72:4f:32:83:75:cd:43:23:
                    7e:c7:98:16:cd:50:77:0b:2c:ac:a4:11:1b:6c:67:
                    11:30:ed:e0:ee:f5:19:ce:8a:9d:0b:5c:3f:62:71:
                    d6:53:04:af:09:56:c5:93:a9:c5:fc:28:f4:8f:0f:
                    44:ec:9c:5d:24:c8:03:81:42:c1:f2:34:05:38:88:
                    72:e4:c0:08:ce:c0:95:77:83:ca:6a:bf:39:89:a5:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:CE:C9:E8:CD:5C:42:C2:D2:BA:EB:25:BC:61:35:E2:A8:8F:3A
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230322e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:18:f9:af:6f:2e:62:8c:82:76:e8:7b:db:0e:61:aa:5d:
         b5:0d:99:41:b5:84:ee:e7:84:a5:08:fa:c7:59:42:48:0b:5b:
         61:a5:3e:8d:6c:20:5d:63:30:b6:49:3d:eb:ac:0a:93:d9:a4:
         58:8e:d9:b0:11:2a:cc:a0:20:48:26:6b:8b:7f:e4:41:c3:d3:
         8d:75:92:71:3e:71:a5:83:77:64:3f:cd:90:00:6c:b2:cd:2b:
         3e:8e:b1:c7:ac:e6:35:cc:ee:79:48:36:ca:18:08:4f:e4:c6:
         73:c8:81:b9:6b:b1:e1:93:cc:93:65:68:cb:03:26:6a:6d:e1:
         1a:ed:0a:a3:97:7f:7a:d8:7d:a1:1d:31:dc:67:0b:15:df:59:
         b3:9f:a3:2f:35:8f:f7:04:61:c5:2b:c3:8b:13:9c:08:d4:82:
         5b:f3:0f:23:81:9c:94:86:8c:35:b1:8f:47:ff:fb:3e:3d:e6:
         80:c9:bc:47:be:42:cb:f0:f6:3a:cd:97:12:19:5e:ea:57:c6:
         29:4d:9e:cf:6c:63:eb:27:d7:0b:69:0b:b0:79:2d:e7:9c:1c:
         00:58:b8:1e:66:67:d6:68:73:60:a8:40:57:fd:04:76:22:cb:
         6a:5d:ed:ca:93:0a:18:2f:67:72:49:d8:9e:fb:7a:f2:95:29:
         34:34:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:10 2025 by rpki-client