Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3139322e302f31392d3234203d3e2036343239.roa
File:                     3230302e32392e3139322e302f31392d3234203d3e2036343239.roa (raw, json)
Hash identifier:          gpGJqYHhjDhvG/3NRibcag5+qE2aIGHCERD3Hv5Jlck=
Subject key identifier:   A2:AB:8A:D1:AC:8B:BD:BD:9A:10:80:84:59:63:5D:81:BF:9E:66:99
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       4FB9D9288295986985F43662F75272C46C43A167
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3139322e302f31392d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:16 +0000
ROA not before:           Tue 04 Feb 2025 18:38:16 +0000
ROA not after:            Tue 03 Feb 2026 18:43:16 +0000
asID:                     6429
IP address blocks:        200.29.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:d9:28:82:95:98:69:85:f4:36:62:f7:52:72:c4:6c:43:a1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:16 2025 GMT
            Not After : Feb  3 18:43:16 2026 GMT
        Subject: CN=A2AB8AD1AC8BBDBD9A10808459635D81BF9E6699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:08:ce:86:7b:a8:a3:2c:6b:11:88:aa:d9:
                    3c:6e:63:eb:02:25:c5:ad:ae:72:76:9a:f0:c2:0f:
                    e0:de:d1:ae:93:c7:a8:9e:b1:92:65:ad:18:f7:72:
                    84:7c:b3:a2:6b:0a:81:f1:e5:e9:7b:d6:12:99:c6:
                    c1:3a:47:05:40:a4:12:72:dd:72:07:e6:98:91:42:
                    1a:5f:6e:58:b9:8a:1a:e6:37:98:e6:15:3d:af:0a:
                    0d:fa:60:1d:2e:9e:61:95:f6:42:8f:18:8e:60:3e:
                    21:1e:57:b8:83:f6:7d:c6:6c:1f:51:90:be:1a:01:
                    c0:44:77:e1:e7:5f:bf:3d:3c:87:b7:66:7e:c8:8c:
                    3d:f7:f5:e7:9b:06:34:4f:80:88:f0:d8:4b:be:b2:
                    71:e0:0f:3a:a9:3a:65:c7:45:1d:e1:99:68:0d:17:
                    c5:b2:1f:16:d8:0c:bd:cd:09:97:3d:f4:c5:bb:05:
                    94:ae:d2:83:2d:96:cc:b5:c5:9a:ae:27:48:61:71:
                    e0:55:25:fd:a7:7e:70:ff:ee:7f:a3:ce:72:f3:7b:
                    dc:7d:5b:23:23:8c:f3:da:13:82:b5:a0:35:21:b3:
                    8f:e0:5f:0a:c1:85:64:88:34:fc:35:6e:4c:b9:d6:
                    bd:66:36:63:0c:3b:e5:72:36:c9:fe:e6:a1:68:2c:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:8A:D1:AC:8B:BD:BD:9A:10:80:84:59:63:5D:81:BF:9E:66:99
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3139322e302f31392d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:01:c0:00:6b:03:9e:7f:07:8e:1d:04:70:e3:4f:1e:15:07:
         b1:1d:da:9f:42:ed:3c:bf:38:30:99:cd:eb:f2:04:21:56:d6:
         cf:91:de:09:fe:f4:98:8d:42:fd:c8:e8:25:52:04:63:65:9b:
         b9:5c:b0:4e:f0:12:75:35:79:1a:8a:39:16:da:dc:7d:46:5b:
         56:d4:3f:9b:39:61:fc:d4:a1:d1:7b:b1:93:47:14:e8:9f:01:
         0c:3b:27:c1:4d:8c:2b:ce:e4:0c:9e:70:07:85:80:d9:9d:14:
         75:2c:1d:9e:b8:eb:b9:56:49:44:4f:42:2f:56:ad:cf:e5:14:
         ed:76:90:2f:7f:20:82:c0:d9:d1:c3:c3:d6:e9:c6:84:f8:54:
         00:c6:1f:ec:ee:7e:84:65:42:ff:6b:fa:f8:a9:17:67:9b:04:
         ca:1d:ee:68:c4:eb:16:20:ca:ef:a9:05:5c:dd:4c:4e:4a:77:
         5b:05:f2:ed:f5:b7:db:f5:07:0f:17:cd:65:23:d5:9a:89:88:
         82:1f:1d:2a:9e:cc:8d:91:4b:21:19:73:b6:9a:27:ae:0f:c7:
         c6:12:a5:a4:49:e3:de:21:79:64:7e:4b:aa:c1:55:63:01:7b:
         41:71:75:58:49:d5:57:8c:23:80:9e:69:23:38:1e:74:70:46:
         67:c6:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:03 2025 by rpki-client