Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231322e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3231322e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          Px0EljruSSWVZzRtqmKfsCSlvF5+fbC1dKfUgniwanM=
Subject key identifier:   66:99:EA:9E:EB:B7:48:7C:FA:C6:2A:C7:2D:53:F6:B0:83:55:75:31
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       51261DE90DD0C69B0720CC218ABE06FE7415009C
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231322e302f32342d3234203d3e2036343239.roa
Signing time:             Mon 31 Mar 2025 19:00:00 +0000
ROA not before:           Mon 31 Mar 2025 18:55:00 +0000
ROA not after:            Mon 30 Mar 2026 19:00:00 +0000
asID:                     6429
IP address blocks:        200.14.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:26:1d:e9:0d:d0:c6:9b:07:20:cc:21:8a:be:06:fe:74:15:00:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar 31 18:55:00 2025 GMT
            Not After : Mar 30 19:00:00 2026 GMT
        Subject: CN=6699EA9EEBB7487CFAC62AC72D53F6B083557531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e9:7c:fe:f9:ca:22:05:c9:99:4e:2c:16:ac:
                    1d:6f:e1:ca:64:59:33:83:56:58:81:e4:ee:f6:30:
                    72:b5:04:56:da:d6:d2:0f:4a:55:09:95:c5:ff:ab:
                    4b:cf:bf:ba:4d:88:61:1d:64:7e:61:11:be:68:5a:
                    f7:37:06:55:2e:8b:1b:bc:1c:02:7a:cb:42:93:fa:
                    54:34:e0:08:19:53:d3:41:f9:ed:e1:84:08:25:41:
                    1f:e7:ad:19:44:0b:e3:d7:2c:5a:b4:1d:2d:18:4e:
                    c7:79:e7:55:8e:d1:a7:25:1d:bd:9f:b0:91:2f:db:
                    06:94:d9:b7:fd:f2:f9:77:13:e6:6b:10:bf:cd:4d:
                    f7:1a:e9:16:eb:40:05:a2:3c:cc:bf:11:81:ca:4e:
                    8c:11:71:94:9c:81:1c:85:5b:49:da:39:e5:f9:bd:
                    41:23:b0:b6:f1:10:ba:8d:63:f5:e4:ac:33:17:95:
                    4b:b5:ee:b9:a4:79:4e:96:55:0a:2c:a4:70:85:fa:
                    af:e8:b6:fd:9a:88:71:04:e8:27:2a:7c:fe:90:6e:
                    fe:42:10:4d:0d:04:46:e3:14:39:aa:3a:0e:8e:bc:
                    dc:a6:09:ca:31:3c:f6:8c:58:29:56:e3:df:f4:c4:
                    6c:54:c9:1c:3e:59:ce:8e:73:a3:41:47:49:d9:6c:
                    e6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:99:EA:9E:EB:B7:48:7C:FA:C6:2A:C7:2D:53:F6:B0:83:55:75:31
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231322e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:48:2d:9d:24:67:51:2c:73:04:b2:45:59:fb:bf:9a:fe:e7:
         77:08:13:bb:08:7c:28:0d:cd:bb:d1:63:89:af:ff:4e:51:97:
         60:31:18:b6:04:f1:ec:6b:96:40:99:6f:38:00:72:04:72:fa:
         db:e5:f5:92:a1:de:3e:d6:1a:fa:4f:13:9d:67:d5:a3:39:ed:
         da:ee:7b:85:59:1d:dc:82:29:71:b3:0e:16:26:4d:63:b6:9f:
         74:d8:9c:fa:aa:7a:62:c7:71:54:0d:95:5d:ba:c3:ef:71:a3:
         da:e9:0e:45:01:09:cd:3d:01:3d:74:f2:52:76:33:62:8e:f4:
         40:13:81:ce:f9:78:ee:93:5c:1c:66:9c:68:61:72:85:32:41:
         e8:d6:44:82:e4:72:a7:a9:4c:ad:e4:2e:2b:78:cf:1f:65:7a:
         58:68:6b:08:a2:2c:a9:5b:f9:20:c7:a8:01:60:32:80:a4:2b:
         20:23:7c:f3:2c:59:cc:37:b2:63:c4:da:6f:01:e6:6b:04:30:
         e0:14:c7:4d:8e:80:3e:a4:ce:02:e0:78:b1:89:59:38:e6:80:
         07:af:bc:d0:d8:a3:07:43:71:32:17:93:58:d5:dd:63:aa:92:
         df:96:8e:4b:57:8b:6a:91:f1:b4:ba:99:89:98:06:93:69:5c:
         5b:5e:cb:23
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUSYd6Q3QxpsHIMwhir4G/nQVAJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNTAzMzExODU1MDBaFw0yNjAzMzAxOTAwMDBaMDMxMTAvBgNV
BAMTKDY2OTlFQTlFRUJCNzQ4N0NGQUM2MkFDNzJENTNGNkIwODM1NTc1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD76Xz++coiBcmZTiwWrB1v4cpk
WTODVliB5O72MHK1BFba1tIPSlUJlcX/q0vPv7pNiGEdZH5hEb5oWvc3BlUuixu8
HAJ6y0KT+lQ04AgZU9NB+e3hhAglQR/nrRlEC+PXLFq0HS0YTsd551WO0aclHb2f
sJEv2waU2bf98vl3E+ZrEL/NTfca6RbrQAWiPMy/EYHKTowRcZScgRyFW0naOeX5
vUEjsLbxELqNY/XkrDMXlUu17rmkeU6WVQospHCF+q/otv2aiHEE6CcqfP6Qbv5C
EE0NBEbjFDmqOg6OvNymCcoxPPaMWClW49/0xGxUyRw+Wc6Oc6NBR0nZbOa3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZpnqnuu3SHz6xirHLVP2sINVdTEwHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzEzNDJlMzIzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDtQwDQYJ
KoZIhvcNAQELBQADggEBAIFILZ0kZ1EscwSyRVn7v5r+53cIE7sIfCgNzbvRY4mv
/05Rl2AxGLYE8exrlkCZbzgAcgRy+tvl9ZKh3j7WGvpPE51n1aM57drue4VZHdyC
KXGzDhYmTWO2n3TYnPqqemLHcVQNlV26w+9xo9rpDkUBCc09AT108lJ2M2KO9EAT
gc75eO6TXBxmnGhhcoUyQejWRILkcqepTK3kLit4zx9lelhoawiiLKlb+SDHqAFg
MoCkKyAjfPMsWcw3smPE2m8B5msEMOAUx02OgD6kzgLgeLGJWTjmgAevvNDYowdD
cTIXk1jV3WOqkt+WjktXi2qR8bS6mYmYBpNpXFteyyM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:29 2025 by rpki-client