Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
File:                     3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa (raw, json)
Hash identifier:          mRm3sM9nVwwEFpbE+p1vLSYxd4fJyyQ1qJDPZGCTtVE=
Subject key identifier:   8A:EE:D9:4E:B1:DC:70:14:7C:B6:B1:21:F3:A7:E1:3C:16:BA:C3:02
Certificate issuer:       /CN=749800288DD85BE233671D21F84E85060EC5FBAD
Certificate serial:       5383D6C9FC8465F8E28A7A4AD9085ADFAC27F79A
Authority key identifier: 74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
Signing time:             Tue 05 Mar 2024 17:43:20 +0000
ROA not before:           Tue 05 Mar 2024 17:38:20 +0000
ROA not after:            Tue 04 Mar 2025 17:43:20 +0000
asID:                     265708
IP address blocks:        200.85.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:83:d6:c9:fc:84:65:f8:e2:8a:7a:4a:d9:08:5a:df:ac:27:f7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749800288DD85BE233671D21F84E85060EC5FBAD
        Validity
            Not Before: Mar  5 17:38:20 2024 GMT
            Not After : Mar  4 17:43:20 2025 GMT
        Subject: CN=8AEED94EB1DC70147CB6B121F3A7E13C16BAC302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:5a:3a:37:ec:43:c0:13:46:be:49:7c:0c:
                    99:95:32:62:9e:e5:d4:55:99:3b:f1:6c:c6:58:8d:
                    61:fa:6a:49:1d:b1:6b:b0:68:01:36:07:a4:4f:d2:
                    31:73:66:65:89:b3:f2:37:15:ce:d5:f8:e1:aa:57:
                    e5:68:ea:a8:d9:4e:41:90:72:d6:2a:be:65:e0:fc:
                    9b:ab:8e:dc:36:9e:7c:d3:c8:0e:80:23:9b:c5:f0:
                    55:9b:17:b9:a9:68:17:87:8f:77:d8:e0:e7:bc:dd:
                    63:68:b7:f4:66:da:cd:c0:23:34:36:0e:17:b4:0c:
                    47:11:72:ef:8f:fb:87:ae:42:ff:d6:51:26:40:50:
                    c1:36:c2:c1:29:69:24:75:12:8f:37:f3:1f:4b:a4:
                    2e:ae:0b:02:f1:a2:8b:dd:f5:21:82:d3:b6:19:a9:
                    6a:b0:94:61:2d:df:4a:f5:a5:bc:a4:2a:26:ee:92:
                    72:c4:fe:b8:05:76:22:1a:b2:97:d7:22:35:38:ef:
                    a7:a2:77:ce:7c:60:3e:e1:93:d1:34:28:24:1a:4f:
                    72:c2:40:20:ae:0a:79:9e:d0:77:a4:0f:de:f8:75:
                    3b:94:ba:f4:65:d2:e9:f0:d3:1e:99:81:a1:3b:d6:
                    2c:be:d3:72:fa:55:38:28:61:b0:f5:4f:3a:97:d0:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:D9:4E:B1:DC:70:14:7C:B6:B1:21:F3:A7:E1:3C:16:BA:C3:02
            X509v3 Authority Key Identifier:
                keyid:74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:12:01:da:2a:9d:73:04:0f:19:f2:89:10:c1:77:66:2f:
         62:de:2a:98:74:ba:8f:9f:c4:95:95:99:4c:4d:15:c6:0c:fe:
         15:01:47:0f:88:cc:82:60:7f:0e:93:37:d1:bc:13:2e:56:73:
         e8:bf:23:db:34:48:c2:36:cb:1a:f1:85:49:ce:8a:a5:15:95:
         bf:bf:93:b5:16:5f:93:43:41:bf:77:2d:1d:3d:be:46:c0:cb:
         0e:df:48:9e:d4:fa:1d:12:42:7c:b2:81:00:df:98:49:02:d0:
         71:14:27:cc:ab:2f:b1:b4:f3:f0:11:c2:e2:44:78:ee:a8:42:
         04:3c:77:ae:e8:20:4f:97:04:c4:87:dd:29:9a:36:06:f7:4a:
         35:2e:74:e2:d5:c8:96:92:91:c7:8a:a2:db:1d:3b:82:dc:8c:
         ec:eb:02:6b:79:9c:7c:a2:d6:e7:28:3b:6e:61:16:eb:3e:18:
         35:64:8f:a0:5b:0e:e4:55:48:31:21:19:5f:50:bb:e9:58:ff:
         ce:c5:8f:10:7c:10:02:05:b6:a7:d9:f4:b5:60:9e:98:bc:13:
         e6:28:43:70:6c:11:99:e4:bb:55:24:a6:a1:23:bd:f7:ea:d3:
         95:83:61:99:fc:f2:80:fa:6b:1a:16:d5:0f:55:9d:5c:0f:fd:
         2c:90:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org