Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          Lf6hrPPxqQPSm1FQ2bD4BtFG24pdW3BGy77E7ih6qMY=
Subject key identifier:   98:C5:43:B9:57:4E:B6:0E:CB:2C:FE:7A:6B:D1:F3:48:E0:1B:E1:1C
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       6960093836724F8ED94118D12B3B8B47888CCAD6
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 05 Mar 2024 18:21:38 +0000
ROA not before:           Tue 05 Mar 2024 18:16:38 +0000
ROA not after:            Tue 04 Mar 2025 18:21:38 +0000
asID:                     271906
IP address blocks:        200.85.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:60:09:38:36:72:4f:8e:d9:41:18:d1:2b:3b:8b:47:88:8c:ca:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Mar  5 18:16:38 2024 GMT
            Not After : Mar  4 18:21:38 2025 GMT
        Subject: CN=98C543B9574EB60ECB2CFE7A6BD1F348E01BE11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:eb:aa:00:f6:93:82:8d:ea:80:32:30:a9:
                    cd:bd:50:44:fe:4f:e6:44:bb:ea:ab:66:3a:d7:93:
                    96:5a:ec:9e:d5:01:a8:d6:89:fc:57:f0:79:17:72:
                    d1:1a:f7:d4:f7:5c:62:51:20:c9:26:d3:3c:0c:e0:
                    10:0a:f6:eb:93:b2:af:0e:9e:b4:92:58:02:39:41:
                    82:2b:2f:2f:9b:52:25:61:ba:ba:70:38:6e:7a:8b:
                    21:f9:b3:77:04:9a:4f:91:2e:66:d6:27:b7:40:37:
                    d5:82:31:a7:aa:fd:2d:d5:e2:9d:26:eb:cf:85:29:
                    ec:f5:29:48:70:cd:15:a1:58:d1:84:5f:1d:4d:74:
                    4c:58:ea:e3:64:21:84:2a:60:cd:1c:55:81:63:a0:
                    75:14:a8:df:4e:88:af:f3:b5:2c:1d:c1:1c:b1:8b:
                    bb:20:cf:60:8d:84:30:aa:cf:d6:3d:a3:47:5b:1d:
                    36:ce:0f:81:72:2e:d0:77:f8:8e:7f:8e:a9:a2:bf:
                    b9:66:1f:d3:86:0b:fb:c2:23:7b:a6:d4:37:7f:ba:
                    aa:db:98:2c:5e:2f:2d:33:9f:f2:78:49:46:cc:d6:
                    7f:3b:74:87:2e:8b:60:48:b3:e8:da:31:79:b6:c5:
                    26:9c:9f:bd:07:80:3f:e5:e5:e5:4c:f4:ef:56:15:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C5:43:B9:57:4E:B6:0E:CB:2C:FE:7A:6B:D1:F3:48:E0:1B:E1:1C
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:e2:5f:bd:59:9f:59:d8:2d:98:d2:4a:c7:30:4f:0b:01:4e:
         6c:d4:cf:a3:2b:eb:f6:d2:23:7f:59:7e:4a:77:57:7e:3c:2a:
         42:72:2c:c5:b2:21:d7:9c:2c:2b:f6:c6:ac:57:28:4b:fe:3d:
         44:dc:53:98:23:6f:c7:d7:99:2b:1d:94:77:4f:59:b6:e8:cd:
         32:6c:eb:e5:7e:41:4b:ba:2c:09:7c:91:de:25:20:7a:ba:d1:
         16:81:f0:03:8a:4f:ce:50:21:60:9e:9b:51:e6:02:1c:80:d1:
         cb:c5:22:ca:4f:ef:5a:30:99:b8:8e:f2:5e:07:8d:0a:8f:77:
         32:01:be:d9:20:4b:27:63:ed:8a:21:ba:ef:e8:61:d1:ff:2c:
         17:aa:51:1c:6b:93:fc:90:ce:ea:e5:92:d9:70:45:33:4c:d5:
         5b:40:f9:5a:69:ca:95:a4:8d:1c:a5:aa:b0:94:4f:dc:bd:d6:
         48:bb:41:cc:49:a2:c6:b2:92:5c:c8:40:f5:5f:38:85:0d:d7:
         8e:9f:ae:85:f6:19:49:5f:bc:e9:7b:bd:89:7d:7c:b7:23:bd:
         f6:ad:60:4c:95:37:09:04:ff:ad:a3:26:5f:64:87:b0:bb:fb:
         ab:5d:78:75:52:63:6d:60:50:07:48:87:c0:9a:95:42:a4:0d:
         c2:92:e0:74
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaWAJODZyT47ZQRjRKzuLR4iMytYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM2OEVERkU5RUZDOTc1QUY4OTJBQzkyQjZBRTE5MTRB
M0IyRDBEMzAeFw0yNDAzMDUxODE2MzhaFw0yNTAzMDQxODIxMzhaMDMxMTAvBgNV
BAMTKDk4QzU0M0I5NTc0RUI2MEVDQjJDRkU3QTZCRDFGMzQ4RTAxQkUxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/N+uqAPaTgo3qgDIwqc29UET+
T+ZEu+qrZjrXk5Za7J7VAajWifxX8HkXctEa99T3XGJRIMkm0zwM4BAK9uuTsq8O
nrSSWAI5QYIrLy+bUiVhurpwOG56iyH5s3cEmk+RLmbWJ7dAN9WCMaeq/S3V4p0m
68+FKez1KUhwzRWhWNGEXx1NdExY6uNkIYQqYM0cVYFjoHUUqN9OiK/ztSwdwRyx
i7sgz2CNhDCqz9Y9o0dbHTbOD4FyLtB3+I5/jqmiv7lmH9OGC/vCI3um1Dd/uqrb
mCxeLy0zn/J4SUbM1n87dIcui2BIs+jaMXm2xSacn70HgD/l5eVM9O9WFWA3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmMVDuVdOtg7LLP56a9HzSOAb4RwwHwYDVR0j
BBgwFoAUrGjt/p78l1r4kqyStq4ZFKOy0NMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQThGQjlCNTBCRDZGNkJEQjkwNUQ0RjUyOTVFMzlFNzc3
MEJFQUJDMjQ3MUYyQjQ1OTg5QjM2MTk4Q0ZBRjY3LzAvQUM2OEVERkU5RUZDOTc1
QUY4OTJBQzkyQjZBRTE5MTRBM0IyRDBEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzY4RURGRTlFRkM5NzVBRjg5
MkFDOTJCNkFFMTkxNEEzQjJEMEQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUE4RkI5QjUwQkQ2RjZCREI5MDVENEY1Mjk1RTM5RTc3NzBCRUFCQzI0
NzFGMkI0NTk4OUIzNjE5OENGQUY2Ny8wLzMyMzAzMDJlMzgzNTJlMzEzMzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyFWC
MA0GCSqGSIb3DQEBCwUAA4IBAQC+4l+9WZ9Z2C2Y0krHME8LAU5s1M+jK+v20iN/
WX5Kd1d+PCpCcizFsiHXnCwr9sasVyhL/j1E3FOYI2/H15krHZR3T1m26M0ybOvl
fkFLuiwJfJHeJSB6utEWgfADik/OUCFgnptR5gIcgNHLxSLKT+9aMJm4jvJeB40K
j3cyAb7ZIEsnY+2KIbrv6GHR/ywXqlEca5P8kM7q5ZLZcEUzTNVbQPlaacqVpI0c
paqwlE/cvdZIu0HMSaLGspJcyED1XziFDdeOn66F9hlJX7zpe72JfXy3I732rWBM
lTcJBP+toyZfZIewu/urXXh1UmNtYFAHSIfAmpVCpA3CkuB0
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org