Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233322e302f32312d3234203d3e203134303830.roa
File:                     3230302e31342e3233322e302f32312d3234203d3e203134303830.roa (raw, json)
Hash identifier:          ssl+N/TIOtboiQw2p8iRHbAfDOhhKmukepjt+fffXNU=
Subject key identifier:   02:51:74:DD:A8:82:4F:52:40:1D:6A:D2:2C:9D:28:CC:A2:F3:27:8B
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       5BD2EF4A850EAF85CCEB8054E88649253A2DC285
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233322e302f32312d3234203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:43:09 +0000
ROA not before:           Tue 04 Feb 2025 18:38:09 +0000
ROA not after:            Tue 03 Feb 2026 18:43:09 +0000
asID:                     14080
IP address blocks:        200.14.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d2:ef:4a:85:0e:af:85:cc:eb:80:54:e8:86:49:25:3a:2d:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:09 2025 GMT
            Not After : Feb  3 18:43:09 2026 GMT
        Subject: CN=025174DDA8824F52401D6AD22C9D28CCA2F3278B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:67:a5:a8:82:ad:9f:fd:1d:59:b6:49:09:
                    e4:db:9a:a5:28:c7:e6:a8:64:d3:b8:e9:12:ad:57:
                    0d:5f:39:d9:17:c6:21:b3:87:1e:94:d0:b4:3f:79:
                    0f:12:e5:6b:64:0b:e9:73:8b:da:32:ae:ca:90:e5:
                    0d:7d:81:a5:64:55:13:27:c0:80:74:37:46:4c:2e:
                    1d:aa:a7:88:e6:85:87:57:38:fb:78:cc:a0:31:78:
                    88:9f:28:80:cc:53:12:6a:ea:f9:4d:26:e3:a9:ea:
                    78:d2:0d:bf:a0:3e:18:d8:bf:7d:fc:5a:42:b6:e2:
                    ac:02:67:34:fa:71:d9:bb:d7:ce:49:44:8c:94:95:
                    4d:d5:a4:8d:9f:12:ee:07:ae:2d:ca:be:28:7d:46:
                    64:92:08:fa:db:04:b9:cd:a2:37:85:6f:6b:da:d1:
                    11:54:0d:4b:26:27:85:f3:e4:bd:d9:55:64:da:6f:
                    8e:0a:cc:b2:c1:0e:ee:76:8d:c5:f9:b8:e3:ac:17:
                    de:75:a4:73:02:22:98:ab:bc:15:07:76:39:23:b2:
                    fd:2f:b6:b8:1e:1e:c8:db:45:52:e6:2a:12:1c:72:
                    16:9a:db:1d:0b:43:75:3b:05:bd:c3:68:77:0a:ad:
                    63:a8:b2:75:10:a8:d1:3c:ac:0d:8e:a0:09:19:2e:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:74:DD:A8:82:4F:52:40:1D:6A:D2:2C:9D:28:CC:A2:F3:27:8B
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3233322e302f32312d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:98:d8:12:ab:10:a3:97:99:c1:e2:81:25:28:6e:cb:e3:eb:
         51:f9:58:b5:e9:63:c8:f9:3f:b4:46:f7:d3:07:a6:72:a1:52:
         0d:26:ee:89:eb:53:43:5e:98:bc:a5:01:0c:75:67:6d:76:ef:
         a3:5a:11:1a:ee:6b:70:0e:5a:94:93:5f:2d:d7:a4:33:6b:fe:
         a5:0e:0d:5b:52:98:ba:b8:6a:41:c1:0f:40:83:b8:5b:db:f2:
         1b:c5:e6:5e:4e:ab:85:95:4e:50:06:70:33:62:e7:97:2f:d2:
         c8:59:71:2e:5a:ed:33:e0:8b:6a:6e:7d:f2:db:53:0a:25:8c:
         4d:34:5e:d0:40:8d:4e:4f:ef:04:ce:f2:13:df:7c:9a:4f:f8:
         5c:15:2b:67:75:a9:d6:f9:44:82:39:d9:53:d7:70:3c:6c:fe:
         0a:de:1e:b6:f2:89:d8:1d:70:73:01:cb:d2:6b:19:93:73:8a:
         22:bb:f1:17:70:e9:36:7e:87:cb:38:58:80:bb:a1:fb:f2:14:
         5d:cc:b0:d5:f7:b0:c1:b5:63:2e:ce:81:cd:80:d8:d6:3b:52:
         9f:ec:67:2b:33:32:4b:5d:ff:23:7f:93:58:d3:ab:6f:a2:5d:
         6b:ca:b7:8f:29:e7:a8:b8:09:e8:38:92:35:85:cf:96:65:67:
         3a:57:51:e2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUW9LvSoUOr4XM64BU6IZJJTotwoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNTAyMDQxODM4MDlaFw0yNjAyMDMxODQzMDlaMDMxMTAvBgNV
BAMTKDAyNTE3NEREQTg4MjRGNTI0MDFENkFEMjJDOUQyOENDQTJGMzI3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzimelqIKtn/0dWbZJCeTbmqUo
x+aoZNO46RKtVw1fOdkXxiGzhx6U0LQ/eQ8S5WtkC+lzi9oyrsqQ5Q19gaVkVRMn
wIB0N0ZMLh2qp4jmhYdXOPt4zKAxeIifKIDMUxJq6vlNJuOp6njSDb+gPhjYv338
WkK24qwCZzT6cdm7185JRIyUlU3VpI2fEu4Hri3Kvih9RmSSCPrbBLnNojeFb2va
0RFUDUsmJ4Xz5L3ZVWTab44KzLLBDu52jcX5uOOsF951pHMCIpirvBUHdjkjsv0v
trgeHsjbRVLmKhIcchaa2x0LQ3U7Bb3DaHcKrWOosnUQqNE8rA2OoAkZLoTZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAlF03aiCT1JAHWrSLJ0ozKLzJ4swHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzEzNDJlMzIzMzMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzNDMwMzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gO6DAN
BgkqhkiG9w0BAQsFAAOCAQEAQpjYEqsQo5eZweKBJShuy+PrUflYteljyPk/tEb3
0wemcqFSDSbuietTQ16YvKUBDHVnbXbvo1oRGu5rcA5alJNfLdekM2v+pQ4NW1KY
urhqQcEPQIO4W9vyG8XmXk6rhZVOUAZwM2Lnly/SyFlxLlrtM+CLam598ttTCiWM
TTRe0ECNTk/vBM7yE998mk/4XBUrZ3Wp1vlEgjnZU9dwPGz+Ct4etvKJ2B1wcwHL
0msZk3OKIrvxF3DpNn6HyzhYgLuh+/IUXcyw1fewwbVjLs6BzYDY1jtSn+xnKzMy
S13/I3+TWNOrb6Jda8q3jynnqLgJ6DiSNYXPlmVnOldR4g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:13 2025 by rpki-client