Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa
File:                     3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa (raw, json)
Hash identifier:          CT5Hj5Y4kRNO5ZxKt1UlHIGeZSvonJwBCnJdnH69gAc=
Subject key identifier:   14:46:56:8C:75:45:07:DA:A3:7B:11:8D:35:51:B1:DE:9D:BF:2D:C8
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       195C45D0F09D6EFF8AD1D957AE5D1986FFD22516
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa
Signing time:             Tue 04 Feb 2025 18:40:01 +0000
ROA not before:           Tue 04 Feb 2025 18:35:01 +0000
ROA not after:            Tue 03 Feb 2026 18:40:01 +0000
asID:                     211397
IP address blocks:        200.85.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5c:45:d0:f0:9d:6e:ff:8a:d1:d9:57:ae:5d:19:86:ff:d2:25:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Feb  4 18:35:01 2025 GMT
            Not After : Feb  3 18:40:01 2026 GMT
        Subject: CN=1446568C754507DAA37B118D3551B1DE9DBF2DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:09:af:09:a8:b5:b9:81:9d:4b:08:79:28:
                    c3:fc:4c:f6:49:50:93:ef:5c:38:7b:a6:db:3f:29:
                    91:42:a9:40:7a:44:af:b1:47:ec:8b:ed:c9:c2:cc:
                    a6:bd:58:9a:a5:ef:80:c5:b7:e8:63:c1:67:f0:37:
                    f1:eb:54:5b:3a:8a:27:21:6a:71:6d:5d:f1:65:c1:
                    54:00:bc:71:3b:92:74:e8:c3:b7:ea:ae:a9:46:25:
                    5f:a6:f3:b8:d9:7a:2f:bc:79:24:ca:69:8f:5a:26:
                    db:e0:a6:36:bd:d2:51:d6:5e:c2:4b:a5:5a:94:11:
                    7c:72:e8:30:ba:6b:c8:66:fd:50:68:c5:17:02:70:
                    43:39:7e:fb:5c:73:15:56:29:18:56:6a:37:8c:0f:
                    d1:ab:2e:fd:a4:d2:94:aa:16:37:66:8f:bd:66:14:
                    4a:9b:10:17:ee:d4:28:77:b6:6b:3b:df:01:a0:09:
                    a8:47:80:78:35:90:3b:d6:eb:89:59:ef:d1:41:b1:
                    6e:d9:4b:2d:dd:42:39:7d:17:39:34:f7:1b:e1:2b:
                    79:39:87:70:fc:08:50:d3:18:9e:13:be:87:59:b2:
                    e9:d5:5a:f1:84:97:f6:8f:aa:89:d4:f7:b7:04:65:
                    4f:83:c8:c7:62:b0:7c:31:ad:9f:b6:52:dc:1f:1b:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:46:56:8C:75:45:07:DA:A3:7B:11:8D:35:51:B1:DE:9D:BF:2D:C8
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:90:c5:e5:be:4f:ec:47:f9:28:91:19:f1:b5:65:d0:b2:50:
         e9:ea:ad:f7:fa:0b:84:12:3b:af:58:fd:50:54:3a:d1:db:45:
         96:35:6c:ad:b0:f3:c4:49:ca:d6:47:4e:c8:f8:a6:6e:a3:27:
         15:fe:66:ca:c3:9f:80:97:d3:b1:a8:95:6c:dc:04:82:c8:c4:
         7c:d9:d4:c2:9f:c1:7a:78:1b:78:43:c4:1f:72:97:9e:59:5c:
         86:29:78:01:79:a9:17:f6:2c:0d:fb:4b:4e:43:6a:e7:17:a4:
         7c:8e:a8:0e:43:d3:d2:5e:cb:8e:f1:0d:69:60:5a:ce:18:e3:
         43:e5:b9:6f:49:c6:63:3e:e4:3a:ae:04:02:ef:4f:2f:19:2c:
         7a:31:89:d3:5a:14:5b:51:c6:b0:5c:dc:34:9a:1e:3c:67:0a:
         48:9d:0d:e5:15:15:40:28:1d:77:df:61:ff:08:5c:29:e4:4f:
         b7:55:a2:81:f2:a2:7d:57:21:e4:bc:b2:13:e4:c6:4f:96:e9:
         af:96:8e:de:75:f1:bc:38:3b:e8:12:90:61:6e:cc:67:f7:89:
         15:49:5b:06:48:da:19:fc:64:1d:6e:b1:aa:8c:3c:69:40:18:
         33:5d:77:81:18:f7:17:84:d8:6b:5e:3a:2c:26:3b:ba:3b:86:
         6d:42:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:13 2025 by rpki-client