Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          arP02UrGaigHG1aBxDctBrchXVRa+Vo1UoyWxUr3a38=
Subject key identifier:   98:0E:2D:10:7C:C7:33:69:30:49:2E:84:CC:1E:26:C3:FC:55:1B:FC
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       458F7C028D98F614C240C113042BCF0A17E7C5
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 05 Mar 2024 18:21:35 +0000
ROA not before:           Tue 05 Mar 2024 18:16:35 +0000
ROA not after:            Tue 04 Mar 2025 18:21:35 +0000
asID:                     271906
IP address blocks:        200.85.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8f:7c:02:8d:98:f6:14:c2:40:c1:13:04:2b:cf:0a:17:e7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Mar  5 18:16:35 2024 GMT
            Not After : Mar  4 18:21:35 2025 GMT
        Subject: CN=980E2D107CC7336930492E84CC1E26C3FC551BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:3e:77:1c:0e:93:ad:38:78:0d:4d:5b:ae:
                    8f:7d:18:18:87:f9:74:a4:ff:b0:a0:3d:d6:6a:23:
                    21:46:59:16:90:b5:7f:8b:d3:1f:da:ef:c3:21:a8:
                    3c:9f:59:37:46:b5:b2:db:44:13:7d:aa:75:78:39:
                    86:0e:2d:51:60:5a:1e:d2:59:be:a3:b4:64:28:e0:
                    c6:81:72:ce:f4:6e:20:5a:07:a6:a5:2b:e8:c4:ec:
                    df:ff:a4:29:21:d6:88:df:ac:35:e3:d2:2a:62:73:
                    d6:cc:ca:c1:d6:c6:31:27:dc:bd:ff:a3:34:d7:eb:
                    53:69:ab:b5:c2:43:1b:d0:4b:d7:da:97:57:e5:d9:
                    f4:1c:67:86:d1:f4:f2:e1:65:dd:a7:25:0d:3f:f8:
                    f6:c8:c8:4a:3e:85:1d:c6:13:bf:ab:19:c3:66:49:
                    fc:f9:45:d5:36:33:49:1b:82:f7:6e:3c:2e:ae:47:
                    d3:02:03:b2:b1:d1:65:73:e6:ae:05:ca:05:ec:ee:
                    7a:bb:80:c7:a8:7d:23:2a:66:76:83:0e:74:8a:ee:
                    33:5a:0b:5d:b7:58:38:f3:09:6b:27:1f:33:ef:9d:
                    1e:03:ff:87:15:80:6a:0b:0a:bb:5e:bd:0d:e8:27:
                    bc:80:ec:8e:6e:79:82:2f:5f:68:d3:61:ba:ba:b7:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:2D:10:7C:C7:33:69:30:49:2E:84:CC:1E:26:C3:FC:55:1B:FC
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:17:53:46:95:d3:63:2d:5b:e8:c0:08:8e:82:90:74:43:ca:
         ad:cc:d0:be:a8:6b:de:59:71:1b:77:b2:a4:4b:6a:ec:c7:c2:
         45:57:f8:fd:f9:94:69:e6:55:25:4a:65:d3:9e:b9:b3:c4:23:
         d5:de:98:57:45:0b:7b:5f:af:38:1c:3e:70:80:00:a7:83:c2:
         b1:64:9a:cb:bd:90:0c:6c:08:c6:83:ff:af:34:cc:63:37:09:
         c5:40:7c:d5:d8:0b:96:10:40:f4:ef:30:18:04:d5:1f:cf:ee:
         2b:bc:80:2d:27:d0:ee:d6:1f:30:7a:eb:1b:9a:d2:a0:76:6d:
         bb:67:ff:24:b1:79:6d:10:fd:3b:7a:ac:25:b1:81:71:b4:c8:
         73:48:4c:9e:a5:e1:2f:b7:fb:3f:9e:ed:d4:c0:19:67:91:06:
         01:e6:81:85:b8:e6:c8:c0:10:14:b4:2d:e4:ec:42:fa:e0:38:
         d6:8d:77:50:1d:e4:b7:f9:00:f9:bc:84:d8:04:06:2a:e3:d2:
         d0:2f:2a:e7:f2:8d:16:fc:94:fa:08:0b:dc:77:3a:65:37:78:
         3f:41:61:db:29:1e:c0:bf:fa:87:fc:5f:cc:5c:3b:2b:5c:e2:
         c0:2d:2f:52:4a:4d:7b:3a:93:9b:ee:84:37:df:e8:f8:44:41:
         d1:61:01:6f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgITRY98Ao2Y9hTCQMETBCvPChfnxTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhBQzY4RURGRTlFRkM5NzVBRjg5MkFDOTJCNkFFMTkxNEEz
QjJEMEQzMB4XDTI0MDMwNTE4MTYzNVoXDTI1MDMwNDE4MjEzNVowMzExMC8GA1UE
AxMoOTgwRTJEMTA3Q0M3MzM2OTMwNDkyRTg0Q0MxRTI2QzNGQzU1MUJGQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhuPnccDpOtOHgNTVuuj30YGIf5
dKT/sKA91mojIUZZFpC1f4vTH9rvwyGoPJ9ZN0a1sttEE32qdXg5hg4tUWBaHtJZ
vqO0ZCjgxoFyzvRuIFoHpqUr6MTs3/+kKSHWiN+sNePSKmJz1szKwdbGMSfcvf+j
NNfrU2mrtcJDG9BL19qXV+XZ9BxnhtH08uFl3aclDT/49sjISj6FHcYTv6sZw2ZJ
/PlF1TYzSRuC9248Lq5H0wIDsrHRZXPmrgXKBezueruAx6h9IypmdoMOdIruM1oL
XbdYOPMJaycfM++dHgP/hxWAagsKu169DegnvIDsjm55gi9faNNhurq33zECAwEA
AaOCAsowggLGMB0GA1UdDgQWBBSYDi0QfMczaTBJLoTMHibD/FUb/DAfBgNVHSME
GDAWgBSsaO3+nvyXWviSrJK2rhkUo7LQ0zAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzFBOEZCOUI1MEJENkY2QkRCOTA1RDRGNTI5NUUzOUU3Nzcw
QkVBQkMyNDcxRjJCNDU5ODlCMzYxOThDRkFGNjcvMC9BQzY4RURGRTlFRkM5NzVB
Rjg5MkFDOTJCNkFFMTkxNEEzQjJEMEQzLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0FDNjhFREZFOUVGQzk3NUFGODky
QUM5MkI2QUUxOTE0QTNCMkQwRDMuY2VyMIHJBggrBgEFBQcBCwSBvDCBuTCBtgYI
KwYBBQUHMAuGgalyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQThGQjlCNTBCRDZGNkJEQjkwNUQ0RjUyOTVFMzlFNzc3MEJFQUJDMjQ3
MUYyQjQ1OTg5QjM2MTk4Q0ZBRjY3LzAvMzIzMDMwMmUzODM1MmUzMTM0MzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEzOTMwMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIVY8w
DQYJKoZIhvcNAQELBQADggEBAAkXU0aV02MtW+jACI6CkHRDyq3M0L6oa95ZcRt3
sqRLauzHwkVX+P35lGnmVSVKZdOeubPEI9XemFdFC3tfrzgcPnCAAKeDwrFkmsu9
kAxsCMaD/680zGM3CcVAfNXYC5YQQPTvMBgE1R/P7iu8gC0n0O7WHzB66xua0qB2
bbtn/ySxeW0Q/Tt6rCWxgXG0yHNITJ6l4S+3+z+e7dTAGWeRBgHmgYW45sjAEBS0
LeTsQvrgONaNd1Ad5Lf5APm8hNgEBirj0tAvKufyjRb8lPoIC9x3OmU3eD9BYdsp
HsC/+of8X8xcOytc4sAtL1JKTXs6k5vuhDff6PhEQdFhAW8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:16 2024 by rpki-client on console-ams.rpki-client.org