Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233312e302f32342d3234203d3e203134303830.roa
File:                     3230302e31342e3233312e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier:          ShQD4FhhmDoS/ZLWRZyINVLRSVOr25NKh5nT0S12OAA=
Subject key identifier:   F1:E4:24:8D:A1:36:D9:53:A8:36:58:F2:54:54:04:5F:4A:DB:C5:AB
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       145E6EDD6FD831A07223F8F6E1E5C3843DDC85B4
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233312e302f32342d3234203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:20:09 +0000
ROA not before:           Tue 05 Mar 2024 18:15:09 +0000
ROA not after:            Tue 04 Mar 2025 18:20:09 +0000
asID:                     14080
IP address blocks:        200.14.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5e:6e:dd:6f:d8:31:a0:72:23:f8:f6:e1:e5:c3:84:3d:dc:85:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:09 2024 GMT
            Not After : Mar  4 18:20:09 2025 GMT
        Subject: CN=F1E4248DA136D953A83658F25454045F4ADBC5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:4f:41:5c:44:f2:45:c1:ac:22:62:b8:85:
                    94:28:14:65:30:50:7b:e0:7d:8b:2d:cb:93:37:df:
                    9a:09:ba:39:2e:46:63:0a:95:84:f5:d6:cf:93:e5:
                    2c:cf:b5:97:8d:db:29:ec:5a:60:1b:29:d6:8f:b9:
                    12:c3:50:94:d5:1b:1f:32:92:3d:d8:fc:fa:1a:e2:
                    7d:50:63:e9:a9:82:8a:66:a6:98:d1:62:7c:5c:b1:
                    60:b3:2f:b5:ca:c2:78:78:95:54:bc:53:94:73:b7:
                    c7:35:51:0f:77:89:8f:8b:d2:d8:68:55:43:78:cc:
                    05:e8:76:09:f2:1e:97:ab:52:95:e7:1f:21:c2:48:
                    a3:86:4c:dc:e4:27:b7:ee:46:e4:0f:93:27:75:7b:
                    58:79:54:f8:22:eb:6a:f3:04:77:85:8f:cc:fe:7c:
                    e7:4b:7d:91:98:03:76:77:bd:dc:b3:a2:c5:37:c1:
                    e1:ac:64:1d:48:d1:de:12:f6:f8:c8:45:c7:fb:70:
                    12:36:2c:86:2d:87:b7:7e:76:d8:ec:d5:54:9b:e8:
                    54:a5:92:48:22:ae:d4:1d:76:83:b0:53:ae:6b:fc:
                    96:d0:ce:0b:c0:ab:6f:c8:a9:e2:82:77:98:2f:47:
                    a2:3d:bf:2c:0f:c8:4b:0e:55:c0:4c:35:76:09:6e:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E4:24:8D:A1:36:D9:53:A8:36:58:F2:54:54:04:5F:4A:DB:C5:AB
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233312e302f32342d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:a4:df:86:41:26:6f:ec:00:78:7b:60:aa:a5:ca:4e:8f:
         0e:c1:a3:47:d2:5f:12:e1:63:82:68:f5:4f:c4:b9:06:96:a9:
         37:c7:fc:97:8e:0f:94:c2:ba:e9:04:a1:8e:25:6c:58:1b:b0:
         af:ae:15:39:14:22:15:fd:4d:96:05:f7:e3:98:fb:43:d1:d9:
         ba:32:f4:b2:d5:5f:c2:02:58:1f:be:e3:7a:38:a4:f4:fe:e1:
         5a:cc:c5:ed:cb:db:7b:bb:7d:f3:f9:d9:db:77:c7:d8:91:d1:
         b8:2f:cc:47:6f:9d:56:42:f7:19:de:6c:ea:b4:3d:5c:c1:62:
         b0:23:f6:db:03:70:81:2e:d4:a9:37:a8:c6:9c:b0:31:01:cd:
         bd:ab:cf:3e:74:b3:fc:e1:d3:7f:1e:d1:b6:a8:2c:b3:6d:bc:
         80:da:3f:09:a6:3e:ce:68:68:40:c4:0a:6a:c4:b8:8e:76:93:
         da:d7:e2:fc:43:b1:bb:9a:52:60:4b:d4:19:b6:47:a6:a2:47:
         8f:af:8a:a3:fd:7d:6d:09:bd:94:6e:5a:1b:95:fd:f1:0f:d0:
         a8:57:c0:fa:d8:ec:f1:74:53:4c:93:03:98:8e:c1:b9:f1:b3:
         9d:60:f4:aa:a6:a7:f2:09:ef:24:2b:91:17:d1:ff:7c:fb:08:
         2b:b4:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org