Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e31312e302f32342d3234203d3e203139323434.roa
File:                     3230302e32372e31312e302f32342d3234203d3e203139323434.roa (raw, json)
Hash identifier:          5Zz84RfSl3fE1aJYFEL7t30SzTYV1zP7R3y8sRFrzzk=
Subject key identifier:   86:F1:F6:5D:79:E8:6C:EE:C9:E1:2E:B8:5E:FB:69:23:7F:36:E9:C9
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       0B65F1FD4CD929D22CE7B8088A127450027F05DD
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e31312e302f32342d3234203d3e203139323434.roa
Signing time:             Tue 04 Feb 2025 18:43:09 +0000
ROA not before:           Tue 04 Feb 2025 18:38:09 +0000
ROA not after:            Tue 03 Feb 2026 18:43:09 +0000
asID:                     19244
IP address blocks:        200.27.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:65:f1:fd:4c:d9:29:d2:2c:e7:b8:08:8a:12:74:50:02:7f:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:09 2025 GMT
            Not After : Feb  3 18:43:09 2026 GMT
        Subject: CN=86F1F65D79E86CEEC9E12EB85EFB69237F36E9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:5e:a6:ce:68:1e:d0:90:8d:35:19:7c:f9:
                    8b:b8:c5:b3:1f:cd:61:19:23:5e:4c:8d:be:63:8d:
                    d4:ea:48:83:61:f9:f7:2e:69:70:e0:26:be:37:c2:
                    bd:39:cb:e7:b4:de:41:8a:6c:f8:b0:ce:62:e7:38:
                    3f:cc:78:f5:9f:fb:f8:ec:61:5b:df:20:ec:74:d3:
                    97:9c:1c:0d:99:ef:aa:3b:31:af:c2:6d:df:07:48:
                    42:db:4c:1a:c6:f7:06:94:ed:7e:28:31:78:e6:e3:
                    c6:de:95:0c:5a:c9:0b:21:a9:f3:9b:12:ac:7b:34:
                    ef:81:bc:d9:85:52:33:ad:5b:f3:aa:9b:63:d4:d6:
                    d5:21:ec:67:81:be:41:db:54:fb:d8:59:a7:75:79:
                    f5:70:e1:79:41:60:60:4b:2e:de:a9:33:d8:a8:58:
                    2b:f0:a6:fd:fb:59:d6:21:53:43:34:76:a0:6f:53:
                    e1:ac:10:c7:4f:1c:a4:b2:ec:d2:fe:ba:2b:a2:86:
                    76:83:9b:20:86:b3:0c:a7:49:22:f8:bb:d2:9a:1e:
                    91:35:09:e4:5c:b9:b8:b4:b6:63:db:fd:9a:3d:dc:
                    4f:96:ed:41:88:4f:27:50:e2:de:a7:6b:88:58:59:
                    09:e9:d7:9f:7b:b8:1f:cb:05:73:c4:c3:73:12:fe:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F1:F6:5D:79:E8:6C:EE:C9:E1:2E:B8:5E:FB:69:23:7F:36:E9:C9
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e31312e302f32342d3234203d3e203139323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:93:b0:75:07:15:00:07:71:35:a5:f1:0d:25:ff:fa:fc:f6:
         36:4c:62:8c:eb:01:42:db:73:39:cd:c0:4d:90:5c:29:65:e0:
         fb:19:bd:e8:f4:ac:ef:6f:ba:6c:58:fb:b2:45:47:77:2a:8c:
         e1:72:66:5d:d5:7f:a5:79:fb:24:ea:29:f1:31:c8:f9:96:ad:
         cf:d0:c3:be:09:8f:15:f2:20:66:86:7b:68:c2:d0:86:c2:55:
         7a:1d:a7:2e:bc:df:c7:6b:40:a0:ce:97:62:61:67:92:e0:a1:
         99:e1:8f:12:cf:aa:e1:48:f9:2a:08:d0:46:e4:80:57:84:95:
         4f:a0:33:64:d5:26:1b:d3:ed:5e:12:22:48:a5:e9:f5:3e:7a:
         3a:a2:ce:52:12:0b:e9:af:40:38:85:ec:f3:b0:a6:91:c8:6f:
         bb:7c:44:de:53:8d:64:0e:e5:33:07:44:d0:a6:05:04:6c:7f:
         51:88:f7:71:1c:ec:96:6f:f5:55:5a:fd:36:cd:a8:ad:5c:2d:
         f2:12:7d:a3:60:e4:5b:bd:96:10:8c:2f:6e:43:0a:0e:3b:6f:
         59:22:53:34:1d:2d:8a:eb:49:35:63:51:c6:d9:30:2f:7f:c6:
         ec:f9:66:2b:d7:5f:15:87:e5:11:17:17:92:2a:66:46:1f:97:
         6c:df:6f:05
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUC2Xx/UzZKdIs57gIihJ0UAJ/Bd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNTAyMDQxODM4MDlaFw0yNjAyMDMxODQzMDlaMDMxMTAvBgNV
BAMTKDg2RjFGNjVENzlFODZDRUVDOUUxMkVCODVFRkI2OTIzN0YzNkU5QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoF6mzmge0JCNNRl8+Yu4xbMf
zWEZI15Mjb5jjdTqSINh+fcuaXDgJr43wr05y+e03kGKbPiwzmLnOD/MePWf+/js
YVvfIOx005ecHA2Z76o7Ma/Cbd8HSELbTBrG9waU7X4oMXjm48belQxayQshqfOb
Eqx7NO+BvNmFUjOtW/Oqm2PU1tUh7GeBvkHbVPvYWad1efVw4XlBYGBLLt6pM9io
WCvwpv37WdYhU0M0dqBvU+GsEMdPHKSy7NL+uiuihnaDmyCGswynSSL4u9KaHpE1
CeRcubi0tmPb/Zo93E+W7UGITydQ4t6na4hYWQnp1597uB/LBXPEw3MS/n8HAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUhvH2XXnobO7J4S64XvtpI3826ckwHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzIzNzJlMzEzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzMjM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIGwswDQYJ
KoZIhvcNAQELBQADggEBADGTsHUHFQAHcTWl8Q0l//r89jZMYozrAULbcznNwE2Q
XCll4PsZvej0rO9vumxY+7JFR3cqjOFyZl3Vf6V5+yTqKfExyPmWrc/Qw74JjxXy
IGaGe2jC0IbCVXodpy6838drQKDOl2JhZ5LgoZnhjxLPquFI+SoI0EbkgFeElU+g
M2TVJhvT7V4SIkil6fU+ejqizlISC+mvQDiF7POwppHIb7t8RN5TjWQO5TMHRNCm
BQRsf1GI93Ec7JZv9VVa/TbNqK1cLfISfaNg5Fu9lhCML25DCg47b1kiUzQdLYrr
STVjUcbZMC9/xuz5ZivXXxWH5REXF5IqZkYfl2zfbwU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:28:03 2025 by rpki-client