Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231362e302f32322d3234203d3e2036343239.roa
File:                     3230302e31342e3231362e302f32322d3234203d3e2036343239.roa (raw, json)
Hash identifier:          LOeD1hc1VPv2td1Ks1BrYY9eoPkLbFGQOiUWlr2uL0w=
Subject key identifier:   08:27:C4:30:F8:D2:5A:A2:27:5C:B6:CE:E6:3F:7F:8C:7C:CB:95:4B
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       293450BD90009C251FAC9A0B1A3872BE89AA599C
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231362e302f32322d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:13 +0000
ROA not before:           Tue 05 Mar 2024 18:15:13 +0000
ROA not after:            Tue 04 Mar 2025 18:20:13 +0000
asID:                     6429
IP address blocks:        200.14.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:34:50:bd:90:00:9c:25:1f:ac:9a:0b:1a:38:72:be:89:aa:59:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:13 2024 GMT
            Not After : Mar  4 18:20:13 2025 GMT
        Subject: CN=0827C430F8D25AA2275CB6CEE63F7F8C7CCB954B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:03:94:82:8e:11:b7:90:2b:45:8b:c2:e0:
                    b0:7b:eb:00:18:a2:db:09:82:9a:7c:bf:b8:0b:0a:
                    c5:3c:a7:b3:3e:ac:00:bf:1d:9d:c5:2a:13:6a:81:
                    2e:da:ee:b2:1e:10:68:9a:0e:f8:9c:2b:f8:ea:d2:
                    50:ba:34:1b:77:00:1f:5d:e9:52:7b:df:72:bd:4a:
                    51:50:06:10:28:49:49:f9:43:5d:95:ec:3b:8e:87:
                    5d:1a:f1:95:b0:75:13:7f:cb:5f:0a:1c:55:af:9c:
                    89:bc:12:e8:a6:a1:bc:a6:b7:df:2d:76:22:d5:da:
                    9b:c3:4a:82:61:08:13:27:84:c1:74:2c:ad:73:13:
                    a3:c7:ef:8d:d8:5a:c0:d7:b2:58:df:69:f1:f5:83:
                    77:de:f1:62:9e:eb:a5:68:2d:e4:51:2d:f1:0e:68:
                    79:f4:5d:17:f8:7d:58:56:85:6a:2d:a3:d1:4c:a0:
                    78:94:dd:5b:12:d4:29:6a:60:30:cb:78:3f:11:2b:
                    24:55:0f:5e:6f:a2:da:51:cf:7b:f4:0a:cb:8b:d7:
                    00:09:f1:f4:54:94:b9:aa:94:6b:39:f3:83:0a:11:
                    f4:69:15:88:ee:e2:8e:f9:3b:76:41:b0:2a:bf:b8:
                    50:ab:ac:55:81:f2:04:db:73:79:df:e2:dc:f9:d6:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:C4:30:F8:D2:5A:A2:27:5C:B6:CE:E6:3F:7F:8C:7C:CB:95:4B
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231362e302f32322d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:9d:64:b2:85:ec:b9:56:6f:ce:d6:16:9e:94:af:07:56:
         5c:e3:37:12:c2:09:80:5a:d7:0a:85:25:e3:a6:92:ba:fd:ac:
         96:65:79:6d:df:9a:63:0e:ae:7f:f4:82:ec:6a:77:c0:6a:e3:
         55:79:9b:e6:03:0a:85:be:22:59:86:d0:a3:30:c2:65:d1:c3:
         7c:cd:7c:87:e8:7f:8e:dc:92:95:24:84:33:77:76:bf:ab:02:
         08:bf:56:d1:4e:64:66:67:25:f2:a9:fc:e2:af:92:ff:2c:ca:
         9c:66:61:b9:cc:1c:17:00:ae:92:c4:35:04:28:59:4e:66:6d:
         12:54:11:c1:53:63:43:f8:6b:8c:1e:ff:44:30:34:57:71:a7:
         09:a5:ce:a5:8b:55:2f:4a:af:d4:f5:80:98:23:96:aa:a1:89:
         22:fe:aa:82:96:2f:42:be:7d:86:62:36:1c:49:a1:9a:28:f5:
         c1:b9:26:e4:a8:3f:b2:d0:40:4e:24:5b:89:02:ea:f3:d4:d7:
         2d:98:13:b2:a5:f2:ea:a3:c1:ae:41:72:f2:30:18:2b:2f:16:
         f3:e1:64:40:d6:cd:50:fb:55:89:aa:40:9a:8f:8e:69:53:7b:
         0a:8c:39:61:90:7e:1d:d5:9d:0d:19:e3:d9:b4:94:26:c6:41:
         9c:cc:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org