Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231332e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3231332e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          G1jKRfAJA+SP5tvkCEvN7nIotCxwUSiCf0FGn0pFDpQ=
Subject key identifier:   80:99:2D:AA:48:6C:70:93:EE:00:16:AC:10:0F:28:1A:F0:50:97:56
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       5162C515A9798CDA6D8B2F1BD6B0581478A058FB
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231332e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:12 +0000
ROA not before:           Tue 04 Feb 2025 18:38:12 +0000
ROA not after:            Tue 03 Feb 2026 18:43:12 +0000
asID:                     6429
IP address blocks:        200.14.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:62:c5:15:a9:79:8c:da:6d:8b:2f:1b:d6:b0:58:14:78:a0:58:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:12 2025 GMT
            Not After : Feb  3 18:43:12 2026 GMT
        Subject: CN=80992DAA486C7093EE0016AC100F281AF0509756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:81:a4:ec:1b:41:21:65:1a:c1:18:85:57:
                    42:c2:7c:84:51:73:39:ad:c5:e3:dd:e9:c1:57:3c:
                    1b:e7:d8:b1:b1:80:b6:8c:79:6f:ba:72:68:a8:79:
                    ee:b3:97:e0:22:38:97:fe:4f:87:d7:63:a3:54:25:
                    a8:68:c9:7d:a4:e9:58:02:0f:dc:0c:3e:2a:ec:ba:
                    b3:a9:ae:5b:38:5b:03:25:c1:03:e6:3b:ad:7f:56:
                    72:b2:3c:fc:9c:eb:3e:de:20:ae:ce:be:8d:13:e9:
                    57:6f:70:a6:a7:3b:4f:ed:1a:0f:4c:39:6e:71:09:
                    1f:ad:bf:4e:65:6e:28:e1:3f:50:b0:e7:25:d8:79:
                    6e:ca:81:27:4b:95:46:ed:45:7a:f6:f1:f9:aa:40:
                    27:cf:5b:02:4c:a1:3e:3c:aa:ad:ea:40:e9:3f:8a:
                    fd:b6:3a:dc:26:d6:25:d7:f7:67:25:73:01:3b:18:
                    84:1c:54:c2:82:1a:e9:6d:05:16:82:5b:c7:42:c0:
                    cb:a5:ab:cb:72:a3:01:d8:30:bd:e7:37:b1:50:39:
                    05:66:72:4f:63:ed:fe:ad:7a:75:7a:71:9d:72:dd:
                    6a:f2:df:c5:eb:57:ca:41:8b:87:1b:82:4d:c8:32:
                    30:14:50:3b:41:57:e5:ae:3e:fa:7a:72:55:be:18:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:2D:AA:48:6C:70:93:EE:00:16:AC:10:0F:28:1A:F0:50:97:56
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231332e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:29:b9:5b:7f:ae:e1:0a:e6:cd:16:e1:ee:4b:5f:e1:ec:eb:
         90:ab:d3:16:85:e2:45:3b:d8:8b:dd:8f:26:2c:0d:4a:0d:cd:
         b7:24:02:77:a3:08:d9:a0:00:01:78:ae:76:86:30:78:56:90:
         76:dd:39:b3:fb:e7:7b:ec:fe:91:71:60:eb:34:c6:0e:be:5a:
         2d:af:c6:e3:f3:26:58:3f:72:d7:56:15:42:a3:5f:62:a3:b0:
         26:5c:49:29:9f:b5:15:05:8a:17:33:13:8b:f2:03:78:e4:b1:
         93:53:c8:e2:ff:dc:d4:05:97:98:86:4e:cb:ea:5c:ef:fd:9a:
         13:69:99:0e:eb:29:8a:30:08:7f:4d:78:d0:a9:06:a9:04:7f:
         dd:15:70:9f:fa:fc:de:8d:cf:c6:32:3a:3e:5e:a9:f3:38:9f:
         cf:69:f1:59:5e:49:61:5e:b4:0d:51:a8:a6:82:3c:ce:93:17:
         23:a5:29:37:7a:06:d4:54:0d:cf:4e:31:de:3e:64:5d:e1:fd:
         e2:7f:69:13:50:f5:dc:95:7f:4a:45:89:ce:33:4e:48:51:6f:
         7b:54:29:90:cd:58:c3:21:b9:85:2f:b2:3f:4b:23:7d:2a:d1:
         7a:9a:60:99:04:a4:92:14:58:f0:24:82:ee:99:9d:53:9b:60:
         9d:fc:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:27 2025 by rpki-client