Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234362e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3234362e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          b5N47+eKqxRQ54nXBlyZLZHNHrucytscc/q9sv+CW6E=
Subject key identifier:   57:FA:69:DD:53:51:CC:8C:E4:B1:18:DB:5C:70:DB:E2:BC:D4:76:6D
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       1407447E68400D28A3873653377972D561928E79
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234362e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:17 +0000
ROA not before:           Tue 04 Feb 2025 18:38:17 +0000
ROA not after:            Tue 03 Feb 2026 18:43:17 +0000
asID:                     6429
IP address blocks:        200.14.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:44:7e:68:40:0d:28:a3:87:36:53:37:79:72:d5:61:92:8e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:17 2025 GMT
            Not After : Feb  3 18:43:17 2026 GMT
        Subject: CN=57FA69DD5351CC8CE4B118DB5C70DBE2BCD4766D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8b:e8:5e:d9:76:8c:a9:9f:42:b1:51:96:c4:
                    34:3d:73:2b:e3:78:35:c5:49:5c:c9:46:5a:f1:6c:
                    4d:b9:25:a1:fb:da:e7:82:a8:b9:5c:f8:cd:f0:d7:
                    9f:00:f8:7c:53:1b:fa:53:3a:b6:46:95:d1:93:34:
                    59:b4:8c:77:5c:28:1a:2a:19:a0:9a:b0:9a:73:1e:
                    5f:a2:1b:29:f6:74:3f:44:9d:93:f8:c3:f6:b9:75:
                    8e:3f:bd:c1:6b:b8:d1:0e:b2:2a:9f:28:5e:fe:c9:
                    e4:d8:15:75:a2:83:6e:a0:ff:2c:39:00:77:81:2f:
                    c4:4d:5f:5f:15:e6:74:f0:d7:c8:32:4d:b2:27:b8:
                    0b:e3:74:35:18:55:9c:1b:a1:c0:00:89:df:01:8b:
                    e4:d6:69:97:8b:7d:2e:29:35:1a:55:8d:b7:6f:0d:
                    87:fa:82:38:25:9a:37:72:37:b4:96:04:be:0b:c3:
                    1e:4e:4d:1d:88:78:68:f6:b0:8f:e0:62:ee:d5:10:
                    ad:e0:28:85:07:56:49:e7:23:ac:09:8d:ce:66:46:
                    4c:0e:c6:5b:fd:9e:ff:70:46:de:45:fe:01:6f:31:
                    a7:48:cf:a8:1f:3c:55:53:fd:d3:62:fe:7e:81:60:
                    52:8c:a0:7a:4b:63:90:e7:a2:54:ec:5a:14:ca:32:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:69:DD:53:51:CC:8C:E4:B1:18:DB:5C:70:DB:E2:BC:D4:76:6D
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234362e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:63:17:bf:fb:88:d2:20:72:f6:1e:ab:c6:71:04:c3:c6:d6:
         fe:32:f6:c8:0a:89:61:bd:b6:20:21:a5:0e:c3:a8:2b:2b:dd:
         5e:84:95:e8:ca:58:71:55:06:2c:b1:7d:b6:34:ae:4a:44:52:
         08:59:59:e4:ac:ee:2b:a8:c4:25:1d:66:ae:c2:4d:44:35:c8:
         e1:59:35:de:48:35:01:11:ad:9b:71:92:ac:09:94:47:14:c3:
         4c:05:7b:ee:86:9e:27:3a:0e:ad:54:49:92:51:dc:09:45:bb:
         85:63:15:c3:d1:47:da:3f:4a:34:8f:a0:41:d2:f6:0c:80:14:
         b0:b8:4b:50:f7:65:8c:69:e6:c8:95:d3:b4:9f:61:95:ad:3c:
         13:b2:7f:c7:c2:d1:e9:dc:9e:53:02:8f:21:72:52:08:87:0a:
         a0:d9:66:d5:d4:e4:b7:81:28:1a:5f:ae:ea:6d:51:2e:14:17:
         7a:76:07:3f:de:2f:a6:ee:e8:2b:6e:c0:ee:e5:14:93:8c:72:
         d5:12:b5:d1:e3:85:cd:4c:26:4b:27:b1:ee:dc:80:83:f9:1d:
         89:c2:7f:ae:b8:40:8d:eb:0a:6b:0f:a1:ae:3e:10:aa:cd:eb:
         f1:3b:ec:95:1e:4a:e4:f8:c1:94:4d:59:9b:9a:eb:cb:56:d3:
         7d:7b:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:05 2025 by rpki-client