Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          Fo0urELH1hdsqSIPunOplK/MHsj//tefkcuifoqECWE=
Subject key identifier:   21:FF:87:30:8F:BE:8F:20:43:30:38:E0:B2:AA:F8:2F:9C:A1:73:4F
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       4A0E538C9A5A12EF0C236D5AB0A350CD9230F89A
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 04 Feb 2025 18:40:04 +0000
ROA not before:           Tue 04 Feb 2025 18:35:04 +0000
ROA not after:            Tue 03 Feb 2026 18:40:04 +0000
asID:                     271906
IP address blocks:        200.85.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0e:53:8c:9a:5a:12:ef:0c:23:6d:5a:b0:a3:50:cd:92:30:f8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Feb  4 18:35:04 2025 GMT
            Not After : Feb  3 18:40:04 2026 GMT
        Subject: CN=21FF87308FBE8F20433038E0B2AAF82F9CA1734F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:3f:55:1b:54:56:6d:b5:af:ce:f7:37:0b:
                    4f:01:2d:14:a9:02:66:83:bf:94:cc:e8:f7:c8:ac:
                    81:46:6a:38:f7:73:17:cb:0a:63:53:b8:4e:48:f2:
                    1e:4e:a6:57:34:c7:bf:1d:d5:5e:37:d0:6f:4a:71:
                    2a:9f:cf:0b:0e:95:54:84:ac:fe:4d:a1:fe:12:cd:
                    1b:5f:04:82:18:2b:f1:4c:d2:85:0b:be:5e:7f:77:
                    66:c5:a8:d6:86:6f:64:14:56:87:d0:3c:df:a4:e3:
                    86:8d:28:14:ba:f7:48:fe:49:d0:89:64:8e:53:b7:
                    9f:59:23:63:f7:57:14:62:53:89:7e:86:16:2b:fb:
                    50:93:a3:e8:ef:5f:fd:aa:6a:7e:5f:17:74:a5:31:
                    53:0e:02:82:89:90:51:a6:e9:fc:d0:99:6c:72:00:
                    35:cd:c2:0b:6a:b8:e0:a1:89:63:72:45:0b:11:87:
                    3d:a0:82:30:01:d5:b0:68:64:61:e2:b6:ac:26:06:
                    20:5c:32:32:5f:6d:0d:55:5a:4c:4e:f5:29:cf:fc:
                    2a:0a:a0:50:f7:78:e2:31:1e:37:03:a8:e8:d2:11:
                    d0:30:96:b2:1a:f1:c6:c2:cd:02:09:a9:47:44:87:
                    f0:ec:ea:b6:f7:32:1c:02:21:eb:54:9a:c1:cc:ea:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:87:30:8F:BE:8F:20:43:30:38:E0:B2:AA:F8:2F:9C:A1:73:4F
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:b7:73:da:c8:77:a6:d5:9c:ba:f2:c2:c3:54:2d:ef:ae:
         80:cf:25:8d:3c:ab:a4:98:e0:0b:71:9e:55:82:03:f6:a6:02:
         e1:05:26:dc:91:89:32:77:a7:7f:38:41:ea:14:28:49:43:67:
         be:48:6c:a7:60:3b:5a:7c:ec:76:f1:3b:36:24:f9:92:ed:75:
         57:86:35:7f:e2:1b:e2:07:5b:bb:c8:83:32:21:a1:ed:68:2f:
         15:6a:8a:cd:49:96:73:9f:e8:b2:ab:1b:01:82:c7:5c:c1:f6:
         98:47:4d:fe:20:a5:1b:b2:9c:33:e4:29:d0:df:96:5b:b5:ac:
         07:79:6d:db:97:a5:8a:07:28:06:61:f3:1b:02:42:77:f8:5f:
         59:3c:25:7a:a6:76:e4:e5:ab:0b:5e:dd:06:8d:96:f9:ec:b0:
         98:94:42:3f:71:a5:d2:28:c8:64:96:24:7c:ef:c8:55:98:03:
         80:db:0e:4c:8a:1b:25:58:31:39:aa:e0:3c:98:d5:d1:73:b1:
         33:8d:82:50:a3:b0:9c:c0:94:00:b1:a3:c9:c1:10:88:ac:ca:
         0b:c0:88:42:d3:72:ba:1b:d2:9b:6c:dd:e0:db:6b:42:2a:e4:
         f2:03:6d:2e:78:69:46:05:f5:81:3c:e8:70:e0:90:6a:09:ac:
         5b:08:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:36 2025 by rpki-client