Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38362e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e38362e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          40UKn4tMNsJT26StkNJJH+isWDXFMv7SmZU+6ZADlYw=
Subject key identifier:   45:D5:5D:60:7D:9B:8C:2A:2D:13:7B:DD:80:54:35:99:D2:3D:A8:4B
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       09939E62F78A6D3AF8EDDCDD1A8EC0201ACDB2A0
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38362e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:19 +0000
ROA not before:           Tue 05 Mar 2024 18:04:19 +0000
ROA not after:            Tue 04 Mar 2025 18:09:19 +0000
asID:                     22047
IP address blocks:        200.86.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 18:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:93:9e:62:f7:8a:6d:3a:f8:ed:dc:dd:1a:8e:c0:20:1a:cd:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:19 2024 GMT
            Not After : Mar  4 18:09:19 2025 GMT
        Subject: CN=45D55D607D9B8C2A2D137BDD80543599D23DA84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:dd:31:75:ed:29:16:68:91:14:88:6e:e2:
                    c4:2c:82:c3:d4:ce:07:f7:7a:88:c9:67:6f:95:f6:
                    3c:82:b8:ab:10:bb:05:8c:31:72:be:80:db:db:8d:
                    fe:e8:a1:91:d5:53:f5:f5:2d:80:91:2d:95:62:69:
                    dd:34:5d:e0:e6:df:39:f6:a7:22:c9:86:07:30:2e:
                    ef:bf:b3:90:65:d1:8f:25:1b:85:ed:f3:77:95:88:
                    4e:10:d8:0d:61:71:82:46:7b:cf:92:25:dd:dd:65:
                    4d:22:62:21:a6:7f:c9:19:5d:49:bf:8f:8e:6f:ca:
                    b5:d8:bb:c1:e6:ca:0b:18:ce:bd:88:ad:c9:5e:11:
                    7e:62:a9:4c:c0:88:d8:fd:7f:04:6b:a3:6a:23:05:
                    48:a8:ad:21:7d:10:9f:b2:c4:df:77:b7:21:b5:36:
                    d6:9f:68:12:cd:8d:a6:68:d0:82:69:3b:96:72:14:
                    2e:52:02:b2:d9:96:13:35:ad:1c:b6:9c:5a:df:aa:
                    ee:88:82:7c:83:59:98:7c:96:14:40:34:f0:6a:65:
                    1c:e5:67:66:83:64:18:16:35:17:41:15:c0:9c:9c:
                    aa:c4:fb:f9:cb:5f:26:13:e0:4a:a8:e8:54:a1:ca:
                    62:2b:4f:08:22:b1:57:ce:5a:f8:21:ba:cf:72:a8:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:5D:60:7D:9B:8C:2A:2D:13:7B:DD:80:54:35:99:D2:3D:A8:4B
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38362e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:89:d5:ec:4e:cf:d5:0c:c3:78:fc:66:a1:d0:6e:41:cd:
         e9:98:df:0c:f8:27:7f:ed:2f:6e:b4:2d:2c:7e:f8:bf:9c:f9:
         30:81:79:1b:f7:64:69:1e:76:0f:7e:22:4f:04:72:de:79:37:
         16:06:cb:3f:24:9a:2f:a7:96:3f:4f:4f:8e:e3:45:75:d4:73:
         5b:9b:06:ae:66:d6:98:39:51:1c:20:9e:ea:4f:c9:a6:8c:21:
         b3:e7:46:f5:0a:a4:35:3c:c2:27:f1:4a:a6:b7:f1:c7:be:4d:
         e0:0e:17:c9:1d:6f:fb:98:c2:81:fe:1a:ca:f9:b6:55:da:4d:
         8a:48:c6:38:1b:41:f6:a2:f0:5a:f1:c7:05:d4:b2:e2:36:17:
         dc:55:7b:20:d8:c1:53:24:90:c2:09:84:3f:52:82:6f:70:8d:
         da:98:c4:87:35:f9:f3:7b:e9:51:0a:24:c0:b5:24:b4:45:2a:
         87:55:fe:57:d3:a0:19:f1:6a:5a:8a:f8:6d:4f:38:cc:65:3e:
         59:7d:f1:3b:38:1d:f6:a8:ed:9b:e2:e1:b1:31:a7:f9:ab:68:
         1d:46:12:9e:3f:57:89:6a:1e:47:68:4e:b9:ae:6c:a6:b1:e4:
         33:94:49:f8:17:37:7e:13:26:c1:11:a8:35:2c:e5:de:86:82:
         00:be:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org