Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234362e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3234362e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          uTWbNih66GQhyKtAk6tfm2SSAR0s5JZDwKecX4Q5kDY=
Subject key identifier:   20:6B:7B:B3:BB:3E:B0:AA:DE:B9:71:69:CB:BD:63:3F:AE:20:D6:F1
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       349653B1F76C2446784A6C21D71A0DB6E5222AC4
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234362e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:07 +0000
ROA not before:           Tue 05 Mar 2024 18:15:07 +0000
ROA not after:            Tue 04 Mar 2025 18:20:07 +0000
asID:                     6429
IP address blocks:        200.14.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:96:53:b1:f7:6c:24:46:78:4a:6c:21:d7:1a:0d:b6:e5:22:2a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:07 2024 GMT
            Not After : Mar  4 18:20:07 2025 GMT
        Subject: CN=206B7BB3BB3EB0AADEB97169CBBD633FAE20D6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:44:96:e5:45:21:9b:0c:d4:1e:42:17:8b:
                    fa:17:89:96:06:25:56:cd:14:8c:1a:51:8d:88:4b:
                    ed:3f:94:24:9e:fc:97:d5:66:ba:07:30:c0:22:56:
                    66:7b:72:da:8d:25:d4:63:99:5f:10:7e:76:2c:1c:
                    be:fc:aa:e7:0f:7f:49:30:86:c9:0c:1b:5a:0c:55:
                    f1:71:ed:fc:2d:72:26:d2:78:f3:5e:10:8d:f4:8e:
                    bd:0f:06:9b:cd:e4:fa:61:34:62:32:41:7b:18:5e:
                    3b:57:ce:0b:2f:99:84:e5:0f:b5:be:61:76:70:b8:
                    9f:7b:a1:a8:38:25:78:84:26:fb:5e:26:1c:ce:d4:
                    52:7b:d4:0a:b9:1c:99:66:7c:74:51:4a:f7:4b:30:
                    6b:11:52:43:d5:fa:9d:5c:88:a6:90:5e:6f:22:ad:
                    49:f1:ae:dd:ee:8b:53:44:6f:7e:ca:9a:31:b3:db:
                    67:b1:bd:5c:1c:84:26:fd:35:d8:ee:66:23:41:98:
                    d0:03:fd:e7:5f:38:b0:2a:17:be:22:c2:52:d6:7d:
                    27:91:04:16:81:23:8b:64:22:d0:f8:06:a6:77:d5:
                    30:74:c7:bb:09:de:2c:34:a0:f0:77:cb:00:85:63:
                    b7:d0:13:04:5f:88:40:f0:1b:4c:30:b7:7a:5e:1a:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6B:7B:B3:BB:3E:B0:AA:DE:B9:71:69:CB:BD:63:3F:AE:20:D6:F1
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234362e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:8a:73:d1:c9:5f:9e:61:56:fe:c7:59:04:b5:c5:0f:46:
         01:3b:67:a1:d6:01:42:4d:78:1d:f4:1a:eb:1b:c2:8a:42:7e:
         24:fe:29:99:17:3a:8f:53:c1:5c:e4:dd:f4:c3:4c:62:54:f4:
         16:49:72:13:e4:f4:05:10:61:28:26:c3:4c:6b:71:14:d7:12:
         98:84:37:18:da:63:a4:5f:91:04:7a:c6:95:e1:33:61:b3:50:
         34:df:81:3c:ac:8d:19:74:6d:71:be:09:8f:ec:72:7d:64:5c:
         5b:2f:4a:9a:42:8e:72:a2:aa:ca:17:b5:4f:4c:c3:dc:a7:45:
         c8:c0:5d:84:b4:9e:1f:1c:db:cb:9f:42:c4:6d:f4:33:72:6c:
         9e:69:51:67:39:c3:75:9b:e2:de:5c:44:3c:0a:c2:86:a0:3f:
         8d:54:17:7c:1b:83:b0:a8:09:a4:c9:df:e0:15:7a:44:8b:b8:
         18:80:2e:62:ff:c4:f0:89:7f:9f:9a:a8:98:3d:56:07:cc:17:
         af:17:8d:09:51:f4:74:1f:34:e2:89:f6:b5:1b:bb:80:b1:6b:
         01:1c:6c:19:5c:6c:8c:0a:87:19:07:47:19:ae:62:51:ed:7b:
         2c:53:b7:e2:c2:f9:d7:c1:10:52:9d:33:f7:1d:e7:e6:1c:02:
         27:e1:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 12:08:15 2024 by rpki-client on console-ams.rpki-client.org