Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36352e302f32342d3234203d3e203532333836.roa
File:                     3230302e38352e36352e302f32342d3234203d3e203532333836.roa (raw, json)
Hash identifier:          EOm4iAtLibaIQjEUPEOfxhvBHryK5eUNYQxXPlsdYWY=
Subject key identifier:   48:38:45:CD:80:47:B7:69:48:E0:A7:EA:A3:20:E5:56:E1:EA:FE:F0
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       213D47CD3270E92A62992BBA722A569305279F90
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36352e302f32342d3234203d3e203532333836.roa
Signing time:             Tue 28 May 2024 13:15:00 +0000
ROA not before:           Tue 28 May 2024 13:10:00 +0000
ROA not after:            Tue 27 May 2025 13:15:00 +0000
asID:                     52386
IP address blocks:        200.85.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:47:cd:32:70:e9:2a:62:99:2b:ba:72:2a:56:93:05:27:9f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: May 28 13:10:00 2024 GMT
            Not After : May 27 13:15:00 2025 GMT
        Subject: CN=483845CD8047B76948E0A7EAA320E556E1EAFEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:df:cf:22:77:c4:e4:5b:3f:71:42:42:cc:
                    0e:2c:e9:55:fb:51:d6:4b:2b:b9:e3:d6:dc:16:59:
                    30:91:42:b2:8c:1b:7d:90:25:f6:33:91:f5:55:ef:
                    18:19:85:fd:8b:54:57:72:b6:5e:5a:1d:9f:c9:13:
                    d1:47:22:3e:3a:f8:72:78:de:2f:c9:7d:79:92:fa:
                    84:0f:23:47:f2:f4:02:db:dd:92:60:28:60:b1:55:
                    98:49:64:b8:98:e6:94:54:1c:94:22:3f:60:bf:db:
                    cd:ed:f5:c8:50:f2:ae:10:02:ab:85:2f:be:5f:1c:
                    e4:27:7a:41:b9:d7:97:a4:f5:aa:24:5a:e7:62:c3:
                    c6:6a:36:7f:0f:10:5b:81:b8:4f:2e:04:10:f0:26:
                    af:b7:14:f6:c1:b7:ec:08:9f:c4:30:ca:6a:f6:d8:
                    e8:f8:7c:ab:6b:2c:c4:4f:4e:e2:47:22:c1:8c:95:
                    47:1d:d8:fb:fe:8f:4e:3f:d2:61:06:42:59:6c:82:
                    d0:1f:82:98:76:60:a5:85:92:ef:e9:9a:a4:10:33:
                    76:03:84:61:62:82:cf:e2:a4:76:ff:6c:bc:32:55:
                    ce:06:ba:72:ee:bb:58:b6:79:4b:57:7a:78:42:73:
                    b0:76:ca:ee:3e:dd:e8:c0:e7:5d:cc:e8:65:04:15:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:45:CD:80:47:B7:69:48:E0:A7:EA:A3:20:E5:56:E1:EA:FE:F0
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e38352e36352e302f32342d3234203d3e203532333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:fb:8f:a5:9b:c4:36:d4:91:99:50:94:c4:28:4c:fd:81:
         8b:a3:df:2d:78:88:d3:26:49:cf:15:6b:d9:8f:2a:0a:de:50:
         64:66:c5:1f:aa:49:15:03:a2:0e:23:65:ba:53:ad:82:f2:68:
         e7:6d:5a:12:30:01:df:51:d3:f4:2d:ff:ca:61:f5:d4:82:4a:
         ff:b9:99:58:af:4e:28:6d:1c:c8:76:9f:98:6c:dd:24:84:9c:
         c8:b5:d9:fa:7d:b8:44:c0:13:dd:c1:c5:b3:e0:54:f0:2a:55:
         f6:7b:33:d8:d1:de:be:f9:78:8c:fb:ab:8b:e6:dd:06:e2:c7:
         7a:6c:18:ea:59:f3:fe:3f:84:e8:0a:ae:1b:0e:f4:28:51:e9:
         43:fd:9d:09:0a:94:2a:27:10:74:eb:7f:bd:fa:1d:81:14:64:
         ff:ad:e0:89:45:36:56:e6:0e:e2:2e:1e:8a:30:b4:6a:04:f8:
         a5:54:c0:37:18:17:a2:ba:4d:9f:33:74:17:dc:2c:d7:92:dc:
         4b:31:84:b5:66:8e:b7:fd:4e:77:fb:d4:77:ab:86:fc:f9:6e:
         47:f1:e3:20:41:09:a9:f1:43:86:b9:4c:96:68:91:f9:27:c5:
         50:c1:56:b7:23:1a:75:ac:fc:28:68:6f:8b:a8:93:68:9f:f8:
         fe:aa:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org