Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa
File:                     3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa (raw, json)
Hash identifier:          34D2wwt2y6mgG/139msk9w0a91W6rg5fGWnDKPNFls4=
Subject key identifier:   3F:44:5D:2A:EA:80:F8:B5:60:AE:C2:C0:6B:9C:A2:79:D2:77:E8:73
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       42B18786362189422E8FE40024A496B45AD611FF
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa
Signing time:             Tue 05 Mar 2024 18:21:38 +0000
ROA not before:           Tue 05 Mar 2024 18:16:38 +0000
ROA not after:            Tue 04 Mar 2025 18:21:38 +0000
asID:                     272913
IP address blocks:        200.85.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:87:86:36:21:89:42:2e:8f:e4:00:24:a4:96:b4:5a:d6:11:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Mar  5 18:16:38 2024 GMT
            Not After : Mar  4 18:21:38 2025 GMT
        Subject: CN=3F445D2AEA80F8B560AEC2C06B9CA279D277E873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:7d:93:77:d9:a4:26:6e:6f:55:16:61:0e:
                    15:bb:d7:b3:50:97:60:35:c5:f6:3c:a2:33:03:fe:
                    a0:68:02:a3:66:1f:c5:8a:68:ea:24:b3:3e:ac:05:
                    6c:8c:88:dc:57:42:14:8f:38:76:79:e0:bb:15:58:
                    6e:31:ff:7f:cf:1a:10:68:e8:d7:a1:f4:4a:be:ca:
                    06:44:f9:b6:94:79:35:2c:d3:7c:27:eb:c9:cd:6c:
                    8e:02:99:e1:41:a6:7d:7c:42:97:63:e2:5f:e3:ca:
                    ea:9e:96:f9:aa:7b:71:d5:a9:f4:41:24:86:32:5a:
                    20:0f:8d:34:06:48:6b:69:87:57:51:e2:89:81:03:
                    b2:95:35:61:3c:74:42:20:cd:40:04:b1:5a:19:23:
                    41:9f:67:dd:05:a7:69:4d:35:78:c9:4c:09:d7:7a:
                    b4:fb:a4:df:b4:97:56:42:63:ce:76:87:0d:95:52:
                    43:84:9c:81:1d:1b:11:d6:9a:9b:54:32:d9:7b:b1:
                    21:34:9f:a2:31:ce:e4:88:1d:3d:19:f9:94:06:a0:
                    f5:4b:85:11:6d:51:80:42:5c:d1:e7:81:3f:84:92:
                    5e:49:c0:91:d7:28:53:d5:24:ed:15:8c:54:8c:5d:
                    a9:18:6d:e2:18:18:35:3c:ec:a5:a2:70:c4:12:d5:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:5D:2A:EA:80:F8:B5:60:AE:C2:C0:6B:9C:A2:79:D2:77:E8:73
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:ca:28:72:6a:e6:de:5d:5e:24:3d:a5:63:96:41:99:82:
         26:59:2b:90:68:f8:96:0e:71:42:0e:e2:ba:31:8e:a1:8d:ce:
         03:c6:89:4c:e4:b5:02:20:6b:bf:a9:84:60:4b:78:b9:d0:6a:
         31:2f:ab:2b:83:f5:ed:f5:23:0e:ba:7c:a4:cc:56:93:05:57:
         d9:57:33:a1:39:6a:3f:a5:db:c7:e9:4f:61:64:c6:25:90:a4:
         0c:0d:17:b8:a7:8f:42:0c:6b:08:72:69:a6:93:bf:34:f8:30:
         88:1b:ec:d7:2d:33:8f:e7:23:1d:19:e6:08:c5:9d:8c:95:4f:
         5d:6e:d3:73:84:4e:21:de:4f:3d:33:3b:ff:bc:ef:b8:85:31:
         18:a9:07:6f:15:8a:27:13:26:4f:f6:59:6f:61:f2:a9:15:09:
         b9:76:45:9b:fe:b7:58:e9:16:6a:68:71:b4:7a:b2:77:53:54:
         47:8f:c1:1b:42:67:9b:d8:55:2c:7a:07:6f:7d:7b:59:fc:f1:
         cf:68:87:ba:e6:4a:63:64:46:aa:92:88:9d:02:83:ef:d0:6f:
         37:ef:c7:56:93:b4:e7:66:11:3c:f9:89:a4:91:20:47:f1:69:
         df:b0:5d:7d:8e:2d:23:33:13:de:5f:df:df:12:f9:c2:a0:45:
         96:32:ff:e2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQrGHhjYhiUIuj+QAJKSWtFrWEf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM2OEVERkU5RUZDOTc1QUY4OTJBQzkyQjZBRTE5MTRB
M0IyRDBEMzAeFw0yNDAzMDUxODE2MzhaFw0yNTAzMDQxODIxMzhaMDMxMTAvBgNV
BAMTKDNGNDQ1RDJBRUE4MEY4QjU2MEFFQzJDMDZCOUNBMjc5RDI3N0U4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Jn2Td9mkJm5vVRZhDhW717NQ
l2A1xfY8ojMD/qBoAqNmH8WKaOoksz6sBWyMiNxXQhSPOHZ54LsVWG4x/3/PGhBo
6Neh9Eq+ygZE+baUeTUs03wn68nNbI4CmeFBpn18Qpdj4l/jyuqelvmqe3HVqfRB
JIYyWiAPjTQGSGtph1dR4omBA7KVNWE8dEIgzUAEsVoZI0GfZ90Fp2lNNXjJTAnX
erT7pN+0l1ZCY852hw2VUkOEnIEdGxHWmptUMtl7sSE0n6IxzuSIHT0Z+ZQGoPVL
hRFtUYBCXNHngT+Ekl5JwJHXKFPVJO0VjFSMXakYbeIYGDU87KWicMQS1bJXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUP0RdKuqA+LVgrsLAa5yiedJ36HMwHwYDVR0j
BBgwFoAUrGjt/p78l1r4kqyStq4ZFKOy0NMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQThGQjlCNTBCRDZGNkJEQjkwNUQ0RjUyOTVFMzlFNzc3
MEJFQUJDMjQ3MUYyQjQ1OTg5QjM2MTk4Q0ZBRjY3LzAvQUM2OEVERkU5RUZDOTc1
QUY4OTJBQzkyQjZBRTE5MTRBM0IyRDBEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzY4RURGRTlFRkM5NzVBRjg5
MkFDOTJCNkFFMTkxNEEzQjJEMEQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUE4RkI5QjUwQkQ2RjZCREI5MDVENEY1Mjk1RTM5RTc3NzBCRUFCQzI0
NzFGMkI0NTk4OUIzNjE5OENGQUY2Ny8wLzMyMzAzMDJlMzgzNTJlMzEzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyFWH
MA0GCSqGSIb3DQEBCwUAA4IBAQBdqcoocmrm3l1eJD2lY5ZBmYImWSuQaPiWDnFC
DuK6MY6hjc4DxolM5LUCIGu/qYRgS3i50GoxL6srg/Xt9SMOunykzFaTBVfZVzOh
OWo/pdvH6U9hZMYlkKQMDRe4p49CDGsIcmmmk780+DCIG+zXLTOP5yMdGeYIxZ2M
lU9dbtNzhE4h3k89Mzv/vO+4hTEYqQdvFYonEyZP9llvYfKpFQm5dkWb/rdY6RZq
aHG0erJ3U1RHj8EbQmeb2FUsegdvfXtZ/PHPaIe65kpjZEaqkoidAoPv0G8378dW
k7TnZhE8+YmkkSBH8WnfsF19ji0jMxPeX9/fEvnCoEWWMv/i
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org