Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233302e302f32342d3234203d3e2036353335.roa
File:                     3230302e31342e3233302e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          /Jkq5E427gfu2hx6giF/RC/OjcqCZkcthgwRer4CyMM=
Subject key identifier:   43:B9:4B:2A:88:22:99:EE:EC:EF:6A:12:DB:20:1B:F7:D9:0A:7E:09
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       7D6C107CB44F13747464E2047C6A97068A765FF9
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233302e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:20:10 +0000
ROA not before:           Tue 05 Mar 2024 18:15:10 +0000
ROA not after:            Tue 04 Mar 2025 18:20:10 +0000
asID:                     6535
IP address blocks:        200.14.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6c:10:7c:b4:4f:13:74:74:64:e2:04:7c:6a:97:06:8a:76:5f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:10 2024 GMT
            Not After : Mar  4 18:20:10 2025 GMT
        Subject: CN=43B94B2A882299EEECEF6A12DB201BF7D90A7E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:18:79:40:c9:a7:d0:bd:a5:9e:d7:5d:92:
                    48:1e:49:cb:24:71:b5:d4:e5:e7:ce:bb:81:6b:3a:
                    f8:39:35:12:51:38:84:08:6b:e0:49:83:7f:a7:e1:
                    d5:ac:21:24:03:31:5b:8e:c2:bd:bb:a9:a6:6d:ac:
                    f0:d6:e3:50:8f:45:8b:a2:33:b9:bd:61:8d:4a:fc:
                    04:25:dd:35:09:63:72:b8:37:93:54:1c:9d:90:49:
                    6a:ff:f9:f2:4b:b2:41:19:ea:02:31:89:1c:90:df:
                    d8:59:50:56:63:55:6c:07:82:34:60:5f:1e:5d:5c:
                    a7:af:30:e7:d5:99:da:90:94:9c:18:78:70:f2:f6:
                    d3:d4:5b:b1:66:a9:7d:c5:8f:02:79:ec:71:6a:cb:
                    2b:d2:42:ac:46:d8:5f:52:62:28:4b:46:1d:a4:7e:
                    43:e6:28:cb:3e:1b:e9:c0:70:5d:c9:26:34:94:1e:
                    d7:ac:4d:92:2d:6a:65:4f:96:a0:30:bf:6a:9f:76:
                    58:35:fb:96:95:da:eb:78:d9:cb:e1:70:3e:c3:30:
                    dc:8a:93:5d:dd:09:91:62:bf:94:be:d5:a9:f6:2e:
                    65:09:0c:46:31:f7:87:fb:82:9b:03:5e:ff:09:5c:
                    93:85:9f:f6:80:a4:a1:9f:4d:a5:98:83:43:d2:9a:
                    ed:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:4B:2A:88:22:99:EE:EC:EF:6A:12:DB:20:1B:F7:D9:0A:7E:09
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233302e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:62:07:e5:8e:43:8f:1e:b0:45:30:1e:49:ff:8c:95:b1:10:
         74:5f:67:95:d3:b9:55:f0:d3:8c:74:7c:a0:90:4d:dc:45:25:
         61:cf:f8:bc:da:95:5f:6f:a5:67:20:40:0f:48:6a:96:4e:63:
         69:03:cd:a0:3e:bc:59:c1:6a:8a:15:5b:90:7b:2a:5e:72:a0:
         a9:21:92:a9:f2:38:e4:f4:63:18:71:3c:4b:06:dc:d0:b8:ae:
         b9:9c:3a:84:38:29:98:6e:a7:f5:cb:61:e6:34:d1:31:cb:3b:
         66:4d:65:ec:7a:f0:6e:52:0c:ea:64:18:d9:dd:68:ea:db:e9:
         fe:d7:03:01:82:f8:1c:a6:73:ba:f7:65:39:19:9e:be:fb:bb:
         79:0e:0d:88:84:d9:1c:30:8e:b8:7b:d5:71:af:28:5c:9d:32:
         41:8e:eb:ef:19:ec:3a:f2:89:46:cf:66:0d:4f:65:01:dc:22:
         6a:99:6b:6f:67:25:61:a3:49:b5:11:71:db:55:4f:af:ad:dd:
         90:94:93:c9:7a:54:e9:cc:04:3b:c8:3c:26:48:60:72:3d:3e:
         d1:2c:94:1d:2b:f4:df:45:22:ef:c9:a7:f5:6f:b1:a8:e2:60:
         e0:0a:22:ea:cb:bc:69:b4:29:55:6f:0e:52:1e:3f:88:42:17:
         b9:cc:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:27:19 2024 by rpki-client on console-fra.rpki-client.org