Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          60G7GFeeu3Kl+37Lx3m+J3SFMzIrcm1fDZoKCi92TPo=
Subject key identifier:   C1:BA:CE:95:38:7A:D4:A6:B5:98:45:1E:B0:E2:C6:CB:20:39:66:22
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       1F353A053007B0050B724B0463C4BAECA7ED5779
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 05 Mar 2024 18:21:38 +0000
ROA not before:           Tue 05 Mar 2024 18:16:38 +0000
ROA not after:            Tue 04 Mar 2025 18:21:38 +0000
asID:                     271906
IP address blocks:        200.85.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:35:3a:05:30:07:b0:05:0b:72:4b:04:63:c4:ba:ec:a7:ed:57:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Mar  5 18:16:38 2024 GMT
            Not After : Mar  4 18:21:38 2025 GMT
        Subject: CN=C1BACE95387AD4A6B598451EB0E2C6CB20396622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:61:7d:9d:ff:c0:6c:0e:99:4b:3b:9a:1e:
                    1b:29:be:d8:b4:26:b1:69:7b:bb:fe:85:00:d0:d8:
                    49:ad:60:a9:d4:8e:7e:b9:9c:cc:73:01:75:b2:7f:
                    86:57:90:c1:52:5a:48:cf:52:d8:a5:8e:55:64:94:
                    19:23:f3:ec:90:b5:58:c7:3a:39:a7:1a:f3:bf:fa:
                    d3:d1:87:e7:96:99:df:c6:56:89:5d:24:41:9c:1f:
                    1b:57:50:ac:49:50:66:b4:f8:e1:25:9c:97:9b:dc:
                    87:8a:df:1c:87:18:fb:43:a3:a5:6f:e4:f5:12:46:
                    99:8a:36:ac:22:bd:57:3d:41:fb:69:20:b4:96:f2:
                    8a:ef:5a:f7:1b:6a:cd:03:4a:34:59:e9:bd:ef:aa:
                    8e:f1:73:40:9d:56:84:a8:72:f6:2b:9e:18:c8:38:
                    25:bf:e3:0f:a7:38:47:06:5d:51:6e:d4:01:eb:06:
                    e2:c1:a8:10:c4:e6:61:31:1a:7e:ba:b1:09:f6:0b:
                    f3:9e:fc:94:e2:4f:d2:c7:84:86:48:ff:f4:bb:5c:
                    ee:91:3e:ce:bf:a5:8c:07:05:ee:67:ce:53:a2:dc:
                    44:bb:0b:8d:91:8c:17:4a:3f:14:11:a3:25:36:d2:
                    98:9a:f7:9e:14:a0:9a:56:42:26:04:90:3f:a5:66:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BA:CE:95:38:7A:D4:A6:B5:98:45:1E:B0:E2:C6:CB:20:39:66:22
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:17:d9:06:de:0b:c5:5c:69:fa:1a:55:bc:f4:fb:ea:7e:f9:
         7e:ac:43:ef:c8:f0:8a:4a:83:ca:27:31:27:22:96:e4:25:ca:
         96:cc:78:d2:4c:88:c8:a0:ac:64:22:84:8f:6b:3a:6a:b2:45:
         e7:91:67:19:13:fe:9d:c9:dc:eb:e4:5c:17:4b:a6:8b:c1:da:
         37:91:01:85:e6:fa:49:87:6c:84:d8:72:e8:e5:c9:88:87:c6:
         e5:a7:e2:49:1b:c5:1b:c5:15:a3:3b:c5:86:60:c0:87:ef:fe:
         16:b0:d2:74:81:27:c1:89:a5:b8:e4:0e:3b:44:9b:b7:b8:a7:
         81:e7:53:ee:87:c8:a7:6b:b8:d5:2b:15:b4:dd:9a:70:d5:e7:
         01:39:62:83:e6:46:5d:c3:7d:9a:a3:5a:12:6b:fe:8e:68:46:
         11:ae:f4:bc:18:e5:eb:56:b2:74:84:9e:0a:18:73:74:2e:f0:
         3e:ec:11:d4:b9:53:63:bc:7e:52:7d:3d:8e:77:28:62:1f:d1:
         b9:01:ed:af:9a:85:24:59:9d:50:2d:ae:d6:09:af:dc:99:2d:
         65:2a:fd:a7:7d:f0:ec:39:2e:4b:cb:41:e2:40:fb:8a:ed:8b:
         e1:63:70:a5:79:ca:ca:8c:72:2b:6d:4a:b1:5b:8c:c2:a2:ac:
         6e:a1:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org