Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231322e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3231322e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          gNFesWL2nAZCUz6FGfzMtW221C2PDhhph7qKMZc/gsU=
Subject key identifier:   AA:7A:19:94:00:E6:89:3E:45:4F:6C:0D:2E:50:CF:77:1C:71:6B:F1
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       7E578FB70F75179C05F0D36BEF072FA0AB907B2E
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231322e302f32342d3234203d3e2036343239.roa
Signing time:             Mon 02 Mar 2026 19:32:26 +0000
ROA not before:           Mon 02 Mar 2026 19:27:26 +0000
ROA not after:            Mon 01 Mar 2027 19:32:26 +0000
asID:                     6429
IP address blocks:        200.14.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Mar 2026 23:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:57:8f:b7:0f:75:17:9c:05:f0:d3:6b:ef:07:2f:a0:ab:90:7b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  2 19:27:26 2026 GMT
            Not After : Mar  1 19:32:26 2027 GMT
        Subject: CN=AA7A199400E6893E454F6C0D2E50CF771C716BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:bf:fb:0c:10:eb:4b:b2:be:88:d0:09:22:
                    2b:b5:f6:09:45:b1:44:d6:62:91:5b:ca:53:d8:bd:
                    e2:f2:e0:8d:25:d0:2d:2a:f7:54:3a:e5:8c:5a:39:
                    1d:c8:49:9b:e4:79:3a:36:51:99:22:10:da:9c:ef:
                    88:96:55:d9:d0:9b:c7:25:7e:0b:8f:bb:95:9b:52:
                    9c:a0:41:d5:04:d5:fe:2c:99:ed:c7:84:29:41:e7:
                    e8:31:b5:0c:87:3a:82:b6:bd:cf:1b:24:9c:74:62:
                    e7:e2:76:74:47:52:b3:08:7b:d2:f6:1f:f8:b3:7b:
                    14:f6:c1:fb:f8:2c:d1:41:a9:ee:12:27:cc:df:4a:
                    b6:da:38:0a:13:72:a4:84:50:e7:1b:a6:f8:3c:09:
                    6d:7e:82:f2:2f:03:71:ab:ab:0c:6f:fd:64:5f:b3:
                    86:ed:5c:e0:84:02:60:78:6a:e6:35:ed:7c:36:07:
                    8b:75:a9:e7:d7:e4:c3:1e:33:76:41:c9:de:33:f6:
                    52:4b:5d:8e:a8:2b:54:72:04:ab:79:24:d3:91:2d:
                    88:c9:7e:77:09:b7:7b:ad:e8:7f:1d:f6:f6:71:37:
                    ab:7d:40:47:7e:3b:ae:79:77:5b:24:9f:27:8d:dc:
                    ff:1c:7c:1f:4d:99:53:92:96:eb:11:41:13:7b:82:
                    22:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:19:94:00:E6:89:3E:45:4F:6C:0D:2E:50:CF:77:1C:71:6B:F1
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231322e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f7:4d:39:18:13:2b:88:63:09:9a:82:93:8a:9c:c8:20:7d:
         d5:84:f0:1f:8e:98:75:a1:27:d1:99:ab:46:72:5b:fc:64:26:
         06:8e:d2:eb:0e:38:37:87:62:c5:b2:3c:84:18:4f:d2:77:ee:
         03:6a:5d:38:27:34:54:9c:83:a9:a0:f8:1c:95:14:d3:0c:0f:
         0c:78:73:08:b0:d9:c5:b4:89:9d:a3:f2:b4:43:6c:7c:c6:2c:
         f7:e4:64:fd:26:49:6d:91:79:2a:f1:97:f9:20:17:ce:15:bc:
         70:06:8a:ae:27:3c:fa:5d:a5:7f:d0:ae:7a:3c:5f:84:2c:45:
         22:b5:f6:69:3f:1a:9f:9a:9b:84:d8:81:1e:ec:95:43:0b:a9:
         4c:ac:f8:7b:c8:f8:28:9e:90:00:03:73:80:05:98:2a:ae:c1:
         00:f5:29:0d:ff:50:10:74:5a:54:41:51:8f:fa:f8:61:54:a0:
         36:16:d4:8c:2d:5b:0f:2c:d1:fb:b6:64:23:37:dc:32:b9:0a:
         e1:e4:5c:5c:d2:48:64:b1:d9:f0:60:ce:cf:d9:3d:f0:c1:ea:
         f9:72:cb:09:f0:15:6e:43:7a:dc:82:42:2b:20:67:54:ad:66:
         0a:de:e0:1f:84:12:5f:6f:b0:9e:1b:e9:b7:09:7b:c8:28:aa:
         15:45:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 19:22:07 2026 by rpki-client