Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
File:                     3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa (raw, json)
Hash identifier:          Gtw4vFTXjN1zdIl5hgLwmyFBuyb0iug+vaw2HkmkJZ0=
Subject key identifier:   D9:65:70:60:B7:15:ED:97:AF:54:C3:E0:B0:ED:68:50:4B:A1:64:4E
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       27C62F4F22FEE7B0938933304FC51D8A857AF9DB
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
Signing time:             Tue 05 Mar 2024 18:21:36 +0000
ROA not before:           Tue 05 Mar 2024 18:16:36 +0000
ROA not after:            Tue 04 Mar 2025 18:21:36 +0000
asID:                     272913
IP address blocks:        200.85.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c6:2f:4f:22:fe:e7:b0:93:89:33:30:4f:c5:1d:8a:85:7a:f9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Mar  5 18:16:36 2024 GMT
            Not After : Mar  4 18:21:36 2025 GMT
        Subject: CN=D9657060B715ED97AF54C3E0B0ED68504BA1644E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0e:e6:1c:29:38:8a:13:25:aa:95:87:81:7a:
                    c4:ed:62:64:19:7c:a3:12:2e:d0:1e:95:c8:8b:21:
                    c9:3d:dc:3b:08:f6:f4:9e:19:21:d5:b1:de:88:b2:
                    0f:f4:88:02:e7:fc:4c:c4:c7:04:61:50:80:e3:f6:
                    45:72:41:ea:27:61:47:7e:b4:a6:fd:4e:20:71:8d:
                    b8:da:4a:5d:32:80:c0:7c:0e:30:57:90:ea:7a:29:
                    ba:6f:fe:56:9f:0f:27:c7:59:48:68:b6:7a:d8:00:
                    bb:cb:85:ce:25:ae:47:2d:12:03:57:1b:48:97:d4:
                    92:a6:bd:7e:0d:ed:31:98:8c:bc:7a:2c:35:5c:7a:
                    95:e8:83:47:ba:d7:e8:82:db:b8:32:3e:72:ba:3f:
                    43:11:97:83:ea:d1:55:77:df:57:f7:81:d0:41:f5:
                    87:68:c8:b4:e3:eb:58:69:c8:ad:ce:c4:28:6e:9f:
                    68:76:43:e7:c0:3c:8b:4e:79:15:b3:26:b8:dc:de:
                    63:ee:ff:f3:0e:fd:66:89:8c:2e:0a:94:72:0d:ce:
                    4e:56:bc:a0:08:8e:d5:c3:21:8d:73:29:0f:86:64:
                    27:7a:30:42:07:35:7a:26:f5:8f:22:43:3e:87:98:
                    ee:ce:1d:a7:30:3d:d6:69:c4:c6:f9:29:36:cf:b2:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:65:70:60:B7:15:ED:97:AF:54:C3:E0:B0:ED:68:50:4B:A1:64:4E
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:f6:28:cc:78:d0:85:e3:15:ef:4c:88:9d:48:7b:c4:fe:
         7b:cb:8d:85:6e:4c:39:35:e3:71:fb:02:22:38:f5:95:6c:0f:
         d5:61:5b:af:76:06:5e:06:df:e0:9a:0c:2f:79:87:92:9d:f5:
         4d:c5:34:83:86:9b:c0:08:b1:db:da:05:4e:0a:78:99:eb:d6:
         87:85:2a:41:87:9a:58:af:41:d5:f1:f0:92:36:52:75:4d:5a:
         bc:fd:a3:36:50:35:01:db:fb:63:65:f0:50:4c:06:d0:e0:bc:
         c7:85:d5:a7:aa:13:7e:a2:a1:d7:05:6c:b4:5b:24:2b:46:00:
         53:cb:fd:16:32:02:14:88:05:6a:cc:aa:ff:f6:fa:db:31:f3:
         00:bc:4a:30:65:cd:97:51:f6:25:88:57:54:0a:5a:92:ff:81:
         ab:78:17:a5:e1:3c:df:92:39:b9:62:a9:e3:1a:5c:bc:b4:9a:
         c6:70:a0:b7:11:01:f1:2c:8c:69:27:28:8d:f7:d1:78:2c:08:
         1a:b6:0e:4c:42:6a:8d:6c:d2:10:90:20:de:a0:93:13:4a:fa:
         65:4c:30:fa:41:c9:bb:fb:d3:80:41:93:88:23:d0:0c:e8:10:
         5d:f0:10:2a:52:da:21:15:cd:1c:80:b4:f4:3c:df:7f:9c:28:
         ac:97:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org