Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          Yh2d3v88JauBxyENTiZkCLfi50ynBqvB+94bBEudO8o=
Subject key identifier:   02:35:53:F9:EE:59:3E:30:39:7C:CE:85:EB:24:06:20:46:C1:98:2F
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       786B49413BE4F0C44692EB1ABC52429760AD1924
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 05 Mar 2024 18:21:36 +0000
ROA not before:           Tue 05 Mar 2024 18:16:36 +0000
ROA not after:            Tue 04 Mar 2025 18:21:36 +0000
asID:                     271906
IP address blocks:        200.85.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6b:49:41:3b:e4:f0:c4:46:92:eb:1a:bc:52:42:97:60:ad:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Mar  5 18:16:36 2024 GMT
            Not After : Mar  4 18:21:36 2025 GMT
        Subject: CN=023553F9EE593E30397CCE85EB24062046C1982F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:c9:6e:df:b6:9e:2e:3f:3e:4b:21:40:e6:
                    4d:17:14:36:70:38:54:ae:63:4c:9a:8c:a7:d1:a3:
                    19:6b:96:39:88:8d:5d:5c:e1:b0:d4:3d:8e:a9:5a:
                    ba:e3:ef:79:6b:1f:a6:8a:cb:4a:f5:d2:0b:3a:2d:
                    24:3a:22:b9:df:76:86:81:a2:08:ee:da:0e:18:92:
                    01:18:0d:d5:0f:4d:62:83:4d:56:3b:89:24:93:36:
                    15:5a:f4:3b:a2:2c:bc:56:a7:e1:97:a5:69:c0:21:
                    27:3d:c9:1c:8d:a5:e1:6e:a5:9d:69:24:cf:16:fe:
                    86:6f:18:a5:19:8b:c7:aa:43:a5:1c:09:f9:fe:57:
                    21:6e:c4:5b:63:b0:31:5d:a2:5d:09:fa:0b:4b:6c:
                    52:08:6e:23:b0:52:14:2f:bb:b8:7f:cd:49:03:a0:
                    89:f3:d4:98:c2:b3:46:a5:09:45:e2:38:59:af:1b:
                    dc:94:0c:26:2d:0f:1d:a8:bb:ab:99:53:c9:59:02:
                    e8:83:b6:82:68:9f:73:af:9c:3f:65:d8:56:e6:17:
                    d0:82:35:e6:a0:5a:80:a2:be:5c:74:2f:e8:0b:96:
                    36:04:e7:c4:cc:40:28:08:b4:5b:f5:11:07:e4:e6:
                    98:e0:4e:c6:8c:ac:35:48:42:ce:b9:d2:ff:ad:3a:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:35:53:F9:EE:59:3E:30:39:7C:CE:85:EB:24:06:20:46:C1:98:2F
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:54:20:35:12:a5:a2:ab:f9:1d:20:ef:11:54:cd:01:85:
         fb:f1:a2:4f:56:31:51:7a:68:b6:5f:72:cb:18:8d:32:92:6e:
         c4:8f:70:28:23:ca:e8:cb:85:9d:e5:a9:ea:d6:b1:65:9a:3c:
         bb:07:62:d2:7a:a2:a9:76:14:4f:82:52:53:b0:71:58:c2:5f:
         cc:80:f9:89:ee:1f:5e:a3:8f:51:bc:51:85:5b:64:f1:e2:13:
         f5:38:62:94:ca:94:00:85:bb:97:58:48:3d:09:19:58:5d:66:
         bb:a7:22:6b:24:05:b7:92:76:05:f7:2d:f9:a8:f7:0f:52:42:
         22:98:a3:2c:6b:60:c5:80:a8:f4:9d:df:f6:86:8f:12:5b:7e:
         70:07:03:74:63:45:ce:bf:10:e2:d3:17:28:1f:c4:ca:16:62:
         3c:d1:f7:34:c3:15:0a:77:3b:6e:4e:b0:9a:b2:0b:66:27:05:
         8b:87:3a:ca:40:f2:c6:71:c4:f4:35:49:ff:40:9c:cd:ff:b6:
         63:12:78:d8:13:31:b8:04:37:06:92:38:f4:07:85:5b:4e:62:
         72:bc:c5:cb:02:c9:95:a7:ce:08:73:4d:f4:50:e3:08:88:ba:
         e9:7a:d2:24:ce:66:9b:6d:37:1d:82:0a:e4:d2:7c:92:f7:d9:
         8d:c4:9b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org