Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3232362e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3232362e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          /IqENrH9HMd/k40PovpbfAXYpWze6ejpL63rcxWYrTs=
Subject key identifier:   7F:94:7F:B6:2B:E2:01:65:47:48:26:B6:A6:E1:2B:5E:BF:18:5C:E4
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       46B987AB6F35BBE34BF1CBE6BCCF5A6621008F3D
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3232362e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:11 +0000
ROA not before:           Tue 05 Mar 2024 18:15:11 +0000
ROA not after:            Tue 04 Mar 2025 18:20:11 +0000
asID:                     6429
IP address blocks:        200.14.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:87:ab:6f:35:bb:e3:4b:f1:cb:e6:bc:cf:5a:66:21:00:8f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:11 2024 GMT
            Not After : Mar  4 18:20:11 2025 GMT
        Subject: CN=7F947FB62BE20165474826B6A6E12B5EBF185CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:35:01:1d:a1:26:68:bb:4b:9e:bb:d1:4e:
                    fe:cd:3e:cd:28:08:0e:d7:b6:7c:a4:99:ff:c0:e7:
                    5e:a5:83:88:00:dd:d6:e6:a2:89:8d:3a:4f:7d:89:
                    29:b5:c2:03:6d:c4:eb:b7:d6:0c:ff:a9:cb:34:7c:
                    fc:88:ab:74:5e:8d:7b:09:bf:03:0c:26:00:88:f6:
                    86:97:71:32:f3:22:18:0a:22:50:bf:4b:ad:7e:fd:
                    38:2b:41:57:af:12:96:d1:e6:95:23:01:ef:d9:2f:
                    b1:41:6b:19:5b:d4:1d:8c:8b:2f:5c:1e:27:7e:98:
                    b6:3b:1b:a7:65:60:fe:96:c5:31:af:a6:1c:cf:75:
                    98:6a:34:17:7e:8e:17:4b:59:63:1e:cf:9b:a6:d2:
                    8e:99:12:35:8c:86:3d:4d:bb:0a:81:e8:57:0a:bf:
                    b8:c1:09:7f:0f:ee:6d:23:78:bb:fd:37:c5:83:cd:
                    c3:03:14:33:52:f5:6e:ae:39:0b:94:20:43:52:9b:
                    92:ab:29:19:19:12:52:23:eb:d9:5b:0d:80:d9:f6:
                    fe:6b:88:8a:cf:3b:f3:2e:83:e9:f7:64:da:a6:57:
                    80:c4:87:4b:2c:df:fe:94:d2:28:2b:c6:02:50:cb:
                    f8:e8:7b:c4:be:e8:73:d9:51:4d:88:33:d2:30:19:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:94:7F:B6:2B:E2:01:65:47:48:26:B6:A6:E1:2B:5E:BF:18:5C:E4
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3232362e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:73:9b:a8:c5:24:57:c5:ad:9f:57:4b:ec:03:fc:ea:b3:
         31:6f:ec:8e:d7:c3:3d:26:5b:07:0a:4b:53:59:e8:de:9d:a6:
         06:35:a7:6a:7b:ec:df:78:f8:16:bd:7f:a6:7b:30:78:87:f0:
         df:e5:de:ee:89:d7:29:da:c9:d1:09:7d:57:77:00:61:5d:79:
         3a:2d:cf:c1:e0:b5:e5:ea:1d:e9:b3:2a:bc:e5:3e:12:ca:4a:
         12:21:26:b4:fe:5d:a3:36:9e:b1:d8:6a:c1:98:9a:0b:65:e8:
         45:4f:30:e7:e2:d0:ac:f1:a9:43:d1:e5:60:4b:17:93:24:95:
         d5:9c:ab:20:b5:73:33:0b:25:2c:bc:a9:ae:a5:04:ec:d9:c1:
         f4:8c:97:e3:2f:ec:eb:6e:5b:cc:9c:54:56:7e:00:22:c7:c8:
         3f:b2:7a:55:f0:ad:ce:58:ed:a2:84:95:02:ea:87:dd:8d:1d:
         bf:7a:c1:5e:e8:41:d1:a3:03:35:d4:0d:70:b4:58:8d:33:92:
         68:a3:f2:b4:2b:bb:59:54:12:9e:25:dc:ca:74:0d:e2:d8:2d:
         70:fe:a1:03:61:a0:3f:dc:7b:fe:e8:8b:40:85:d7:19:ce:7b:
         0d:fc:b7:3f:4e:31:84:2a:4e:5b:13:70:7f:87:23:9d:75:a3:
         fb:9a:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org