Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231332e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3231332e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          kkKJs+AOlO9XZ0SY3rElvIRiKpP9A3p98GEEnPbAIuo=
Subject key identifier:   49:B2:42:51:E6:1E:47:E1:03:0B:26:D9:31:4D:E2:FF:97:16:3F:A5
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       5A27F0809D95C37E0430FB03678C552E63024133
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231332e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:12 +0000
ROA not before:           Tue 05 Mar 2024 18:15:12 +0000
ROA not after:            Tue 04 Mar 2025 18:20:12 +0000
asID:                     6429
IP address blocks:        200.14.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:27:f0:80:9d:95:c3:7e:04:30:fb:03:67:8c:55:2e:63:02:41:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:12 2024 GMT
            Not After : Mar  4 18:20:12 2025 GMT
        Subject: CN=49B24251E61E47E1030B26D9314DE2FF97163FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:5b:2c:81:06:2c:50:20:97:37:30:fe:00:
                    49:5b:1a:e9:e1:fe:21:f7:16:eb:79:66:55:27:e0:
                    c6:d4:51:b4:f4:cc:0e:1a:83:ce:24:2d:c9:a9:7d:
                    8d:f7:00:86:02:2b:81:32:79:14:45:7f:b5:d6:73:
                    2c:6b:56:ef:37:98:2e:f5:b8:e3:d6:ac:a4:90:ad:
                    25:0d:9e:2e:b0:55:9e:c0:8a:2d:88:04:43:86:91:
                    d0:b5:74:59:7c:8f:50:66:82:e9:9d:0c:e5:c3:21:
                    4a:7e:8c:fa:18:3b:96:4d:8c:1a:d7:f1:2e:84:c7:
                    9f:a9:75:5f:8a:35:c9:18:9e:d0:ff:91:d9:49:a8:
                    79:f8:8b:c8:11:31:85:07:c1:c5:68:dd:43:21:b1:
                    61:14:e7:fa:07:ce:ce:26:a6:a0:92:8b:19:ba:db:
                    90:6f:b8:53:39:c5:b2:d1:e4:f0:35:9a:5e:10:86:
                    c8:71:11:22:68:6b:16:1e:06:0c:89:98:fd:f4:d5:
                    9d:4e:c5:d5:b9:53:93:a9:4a:87:70:83:32:5b:a1:
                    d5:97:ab:0f:da:e2:80:1f:0b:eb:a0:c5:ab:08:48:
                    f7:aa:95:42:34:94:af:db:a1:91:cb:42:89:8a:ce:
                    0a:88:a6:cd:01:6f:ae:15:a2:26:41:83:dd:bb:98:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B2:42:51:E6:1E:47:E1:03:0B:26:D9:31:4D:E2:FF:97:16:3F:A5
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231332e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:5e:f4:92:6e:fa:a9:e8:33:b8:48:0f:23:a7:a2:2d:a5:
         ee:01:d9:59:b3:d8:64:98:61:1f:b9:8a:cb:4c:f6:47:1a:38:
         59:6c:65:f5:5b:29:a7:13:9b:61:7c:ca:83:c7:df:34:9d:c9:
         55:98:fb:dd:f7:0c:14:07:3b:98:24:9a:a2:bc:d3:f8:ac:a8:
         a7:db:52:c7:74:d0:f6:a2:96:64:0e:60:30:11:d3:fa:a8:d6:
         ba:98:f7:02:74:58:21:cf:d6:26:24:fa:06:db:4f:bc:07:da:
         10:5f:3c:e2:48:80:c1:36:92:97:86:bc:b5:b2:35:4c:bb:40:
         8f:ca:b7:42:e3:4b:85:8d:4b:e0:f5:bb:19:d6:75:1f:69:97:
         d7:fa:1e:40:96:c1:f7:7e:8e:b3:72:bc:6c:78:6e:fc:50:0a:
         74:72:c2:38:af:73:8d:73:bc:43:8b:54:75:f4:95:3c:d6:5a:
         6e:63:9a:0e:b5:73:95:33:7a:e7:ab:fb:ff:ce:c5:95:5c:f9:
         97:74:7e:43:3b:b6:80:3e:7e:bc:9a:a7:b1:0c:07:a1:49:27:
         8b:86:58:8b:41:80:b4:3f:2b:d4:86:d0:9f:cb:8e:06:eb:a0:
         f6:1c:8b:0f:00:a4:77:7d:76:57:65:c7:82:67:8c:4c:91:a7:
         ff:84:35:6a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWifwgJ2Vw34EMPsDZ4xVLmMCQTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNDAzMDUxODE1MTJaFw0yNTAzMDQxODIwMTJaMDMxMTAvBgNV
BAMTKDQ5QjI0MjUxRTYxRTQ3RTEwMzBCMjZEOTMxNERFMkZGOTcxNjNGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/FssgQYsUCCXNzD+AElbGunh
/iH3Fut5ZlUn4MbUUbT0zA4ag84kLcmpfY33AIYCK4EyeRRFf7XWcyxrVu83mC71
uOPWrKSQrSUNni6wVZ7Aii2IBEOGkdC1dFl8j1BmgumdDOXDIUp+jPoYO5ZNjBrX
8S6Ex5+pdV+KNckYntD/kdlJqHn4i8gRMYUHwcVo3UMhsWEU5/oHzs4mpqCSixm6
25BvuFM5xbLR5PA1ml4QhshxESJoaxYeBgyJmP301Z1OxdW5U5OpSodwgzJbodWX
qw/a4oAfC+ugxasISPeqlUI0lK/boZHLQomKzgqIps0Bb64VoiZBg927mEMZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSbJCUeYeR+EDCybZMU3i/5cWP6UwHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzEzNDJlMzIzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDtUwDQYJ
KoZIhvcNAQELBQADggEBAGfOXvSSbvqp6DO4SA8jp6Itpe4B2Vmz2GSYYR+5istM
9kcaOFlsZfVbKacTm2F8yoPH3zSdyVWY+933DBQHO5gkmqK80/isqKfbUsd00Pai
lmQOYDAR0/qo1rqY9wJ0WCHP1iYk+gbbT7wH2hBfPOJIgME2kpeGvLWyNUy7QI/K
t0LjS4WNS+D1uxnWdR9pl9f6HkCWwfd+jrNyvGx4bvxQCnRywjivc41zvEOLVHX0
lTzWWm5jmg61c5Uzeuer+//OxZVc+Zd0fkM7toA+fryap7EMB6FJJ4uGWItBgLQ/
K9SG0J/LjgbroPYciw8ApHd9dldlx4JnjEyRp/+ENWo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org