Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235322e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3235322e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          tOdd9rQqjPK1L1J0e4F08jOvOHQUWA7TQbxI+d74A98=
Subject key identifier:   F2:5A:DF:55:66:14:0F:C3:E7:77:2E:4D:57:35:3A:77:73:E1:51:AB
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       202000E2CF2EAEA17C9968E6E3B61EECB5DDC1
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235322e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:17 +0000
ROA not before:           Tue 05 Mar 2024 18:15:17 +0000
ROA not after:            Tue 04 Mar 2025 18:20:17 +0000
asID:                     6429
IP address blocks:        200.14.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:20:00:e2:cf:2e:ae:a1:7c:99:68:e6:e3:b6:1e:ec:b5:dd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:17 2024 GMT
            Not After : Mar  4 18:20:17 2025 GMT
        Subject: CN=F25ADF5566140FC3E7772E4D57353A7773E151AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:87:b2:70:d3:08:31:eb:cc:a9:7e:44:d2:
                    6d:38:5e:e4:bd:1c:5f:04:b1:03:6e:63:15:db:36:
                    09:80:d5:f2:ce:e5:8c:b3:67:55:75:2e:e6:88:b6:
                    de:1d:3c:ad:81:0e:b1:38:a3:dd:9c:c5:85:62:11:
                    db:05:21:d4:5c:24:3b:a6:75:52:74:ec:26:47:1f:
                    3e:8c:68:e1:ae:99:94:74:4b:f1:07:05:2f:d0:46:
                    08:0f:38:15:3d:3b:fa:94:2f:e0:bb:40:88:f2:39:
                    b2:49:90:3f:32:64:b0:8f:0b:cb:f1:f0:4b:65:b2:
                    ea:91:c4:3f:7d:06:a3:2d:35:4a:fb:b8:a2:e6:85:
                    0c:ab:fc:25:22:1b:b2:46:fc:1a:a9:52:47:f2:cb:
                    f4:3e:f1:12:5e:8a:7c:67:45:ef:3c:aa:58:14:d0:
                    c5:fe:51:7a:82:2d:37:b8:10:ba:31:92:14:3b:f6:
                    bd:ad:e7:e2:ac:3f:b5:dc:82:58:90:1f:c0:78:e0:
                    15:8e:92:d9:4d:52:af:ce:06:5c:28:e7:93:15:5d:
                    ec:88:4e:12:01:a9:08:64:03:f6:76:c5:a0:e4:5b:
                    cc:cf:7c:68:a1:17:da:19:a2:47:86:17:8a:fc:fa:
                    d1:61:e9:b3:59:fa:78:29:30:f8:bb:7e:13:fb:e1:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5A:DF:55:66:14:0F:C3:E7:77:2E:4D:57:35:3A:77:73:E1:51:AB
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235322e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:08:50:52:6f:e5:37:c3:f6:d3:4f:27:16:90:7a:4d:33:
         b2:eb:d4:3b:c2:60:17:b8:27:be:2b:ad:7a:ee:73:95:02:b2:
         29:ea:49:3a:21:a7:89:fa:a4:35:bd:00:cf:12:e0:60:05:f6:
         58:3a:1f:ee:72:16:e3:6a:bf:b0:e7:4e:bb:36:f9:19:76:87:
         8a:60:41:f3:69:06:74:aa:d7:52:1e:5f:84:03:c3:99:3a:b7:
         8c:9b:1c:c7:2f:d1:79:dc:f8:a3:c0:47:09:71:22:da:02:01:
         41:0e:4f:b3:dd:86:db:92:57:ca:e5:9e:73:de:c5:ce:d4:f7:
         59:43:89:32:83:3d:c8:a1:ed:11:0f:46:44:ef:e6:e7:a7:9d:
         f0:4a:62:58:ee:96:9d:8a:06:83:92:46:2a:ab:ed:4e:aa:f4:
         f0:a6:56:63:29:d7:70:3b:59:34:8a:8e:60:23:14:52:54:1a:
         ed:d7:1d:d4:73:78:41:ad:a3:44:7a:68:3b:e0:46:c1:96:8a:
         89:ae:3b:d7:51:f3:e2:3a:4b:d0:23:9f:e2:40:48:a2:01:fc:
         41:92:92:0b:2f:29:9b:15:18:0d:fe:75:71:9d:80:e4:0f:a3:
         6d:4c:46:8a:17:02:70:e3:78:1c:56:f6:4b:d0:51:df:91:2d:
         86:15:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org