Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/3230302e38352e3137362e302f32312d3234203d3e203238303039.roa
File:                     3230302e38352e3137362e302f32312d3234203d3e203238303039.roa (raw, json)
Hash identifier:          JmOqN2UGN7p7xCE+B7AZgi6Ky0rrEvlKRMCXSh6ABZ0=
Subject key identifier:   8A:CF:10:F7:5A:D8:F0:52:59:43:D3:31:04:D6:F8:F7:26:48:56:3D
Certificate issuer:       /CN=B2866080BB7E2072C6871B23409ACE82D8A3551A
Certificate serial:       2516FF2F2F24F51D13FA8D831CE3B345825CC7B2
Authority key identifier: B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/3230302e38352e3137362e302f32312d3234203d3e203238303039.roa
Signing time:             Tue 04 Feb 2025 18:50:17 +0000
ROA not before:           Tue 04 Feb 2025 18:45:17 +0000
ROA not after:            Tue 03 Feb 2026 18:50:17 +0000
asID:                     28009
IP address blocks:        200.85.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:16:ff:2f:2f:24:f5:1d:13:fa:8d:83:1c:e3:b3:45:82:5c:c7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2866080BB7E2072C6871B23409ACE82D8A3551A
        Validity
            Not Before: Feb  4 18:45:17 2025 GMT
            Not After : Feb  3 18:50:17 2026 GMT
        Subject: CN=8ACF10F75AD8F0525943D33104D6F8F72648563D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:b7:7f:e5:ad:0e:33:31:a8:9c:01:16:ce:
                    00:a5:17:5a:55:6a:5f:14:2d:1d:fc:b1:3b:b4:88:
                    f1:cd:68:92:93:dc:15:d3:57:55:44:5e:59:32:dd:
                    e4:41:2a:06:e0:a5:cb:03:a3:2a:32:a8:43:44:6d:
                    62:a3:3e:88:0a:c4:95:95:93:39:87:0a:26:01:f9:
                    1b:b3:f9:31:e7:84:d2:80:fb:e8:ac:01:aa:ed:92:
                    03:6c:7e:f9:94:3b:1e:36:ae:a3:b2:a4:c1:23:a6:
                    08:2a:37:a1:6f:6a:74:2b:79:c0:e0:78:4e:7e:d8:
                    b3:d0:76:5f:f8:30:c6:69:ed:ed:ee:41:b6:16:2f:
                    b7:44:f5:22:f9:0c:56:c7:00:ee:d8:33:bd:88:b6:
                    6d:eb:84:d0:62:e8:9d:9e:7e:5c:f6:f7:2e:23:ca:
                    14:68:16:5b:ca:47:8c:cb:74:c1:51:10:0c:68:0e:
                    5f:1d:a4:f2:cb:e4:7f:b4:10:77:d3:37:0d:4b:aa:
                    59:13:fd:95:74:96:aa:ab:6b:f3:c1:e1:1e:93:ab:
                    52:39:15:9e:7d:1c:f0:a8:fc:a9:80:e4:19:87:ff:
                    00:44:93:be:83:50:95:05:8c:3e:9f:00:7c:b6:89:
                    24:ee:d0:a0:b5:9e:a0:26:c2:62:04:12:20:c6:3c:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:10:F7:5A:D8:F0:52:59:43:D3:31:04:D6:F8:F7:26:48:56:3D
            X509v3 Authority Key Identifier:
                keyid:B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/3230302e38352e3137362e302f32312d3234203d3e203238303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:35:a2:75:9f:31:07:a2:25:6d:77:bc:18:e4:aa:79:bd:
         35:ef:0b:c7:b8:16:4f:24:83:f1:40:28:d8:e8:f9:13:62:2d:
         b2:6d:fa:33:b0:fe:22:9b:7e:c2:86:46:3b:d6:04:1c:fb:cb:
         88:b2:6d:a8:c8:47:1d:c1:39:fd:f0:c6:ee:11:c3:f6:c0:fd:
         40:c7:1e:5b:56:42:a7:a5:a8:40:05:b1:00:74:e8:bf:76:b4:
         0b:fc:a1:f8:2a:bf:05:90:0e:42:f8:2d:de:6d:55:2c:59:6f:
         e1:34:fc:d0:cc:d4:16:e3:2b:85:d3:c4:f9:25:5d:ec:ab:28:
         c1:37:ca:b0:33:d2:62:50:43:13:84:a2:b4:5c:cf:a0:4a:57:
         83:55:49:15:5d:7f:c1:43:1a:10:76:73:7f:dd:6b:bb:5a:4d:
         51:8f:b2:01:e5:ad:be:4a:97:74:eb:01:11:cf:9c:a9:66:c1:
         ee:e7:8e:b1:41:6b:4c:6e:d6:a5:3f:c1:d2:b8:14:42:ba:84:
         c4:13:32:3c:cb:95:81:3e:85:d8:c2:15:d2:9b:15:86:08:33:
         b8:f5:1e:c4:ad:ed:e5:84:00:3d:3e:30:00:50:d3:36:e5:da:
         41:04:1f:35:6d:ce:29:c5:ae:01:db:2e:bd:ab:41:ae:fe:dd:
         0d:44:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:49 2025 by rpki-client