Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
File:                     3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa (raw, json)
Hash identifier:          PDcJrxOo4RZOoPhfWKyqSldi7aKiV+REugj1Dkb0M/A=
Subject key identifier:   A4:74:59:6D:2B:91:71:63:06:C6:CA:BD:71:6A:67:18:C7:3C:DA:E4
Certificate issuer:       /CN=749800288DD85BE233671D21F84E85060EC5FBAD
Certificate serial:       5D1B3BB322462709ADFDD286D4EF3ECCC5A22869
Authority key identifier: 74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa
Signing time:             Tue 04 Feb 2025 18:13:14 +0000
ROA not before:           Tue 04 Feb 2025 18:08:14 +0000
ROA not after:            Tue 03 Feb 2026 18:13:14 +0000
asID:                     265708
IP address blocks:        200.85.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1b:3b:b3:22:46:27:09:ad:fd:d2:86:d4:ef:3e:cc:c5:a2:28:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749800288DD85BE233671D21F84E85060EC5FBAD
        Validity
            Not Before: Feb  4 18:08:14 2025 GMT
            Not After : Feb  3 18:13:14 2026 GMT
        Subject: CN=A474596D2B91716306C6CABD716A6718C73CDAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:ba:21:fd:f7:09:06:7a:1b:98:d5:7d:db:
                    21:4d:ef:6d:ae:0f:ee:bd:5d:a1:91:d2:24:7c:e7:
                    65:b2:0e:6c:9b:15:47:be:88:69:51:ee:75:3d:46:
                    c1:02:84:db:0d:ea:5a:78:ef:f4:37:0e:f7:97:c8:
                    c4:66:77:77:fc:9b:2b:7f:ed:02:83:07:73:26:b5:
                    9d:2f:ee:2d:7b:1e:81:32:e5:87:73:34:17:b5:f2:
                    3b:73:85:a7:a3:db:25:95:4b:e6:0e:62:4e:57:17:
                    e9:68:fe:7f:79:ac:d2:fd:b2:f0:36:b1:21:85:20:
                    c5:a2:ec:73:8e:13:8c:3d:a8:a6:ec:4b:fc:41:26:
                    83:50:23:36:5a:94:7e:b0:f5:db:cb:36:d3:24:af:
                    d1:a4:04:79:70:56:0f:d7:45:bc:4a:20:12:c2:53:
                    e2:36:c6:fd:06:17:13:7f:fa:b4:e1:3e:26:e1:35:
                    1f:ee:4c:a8:19:bd:2b:eb:28:a1:8b:90:00:60:6e:
                    84:4f:6e:ca:b5:3c:13:a9:be:45:b1:ca:fa:17:92:
                    9d:8d:ea:d3:40:37:88:21:df:60:8d:41:bc:0d:8b:
                    d5:6e:23:6c:f8:6b:90:3c:23:8a:49:40:96:90:8f:
                    07:0f:13:a1:bb:36:9b:06:9d:76:24:6c:92:e8:94:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:59:6D:2B:91:71:63:06:C6:CA:BD:71:6A:67:18:C7:3C:DA:E4
            X509v3 Authority Key Identifier:
                keyid:74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/3230302e38352e3133362e302f32322d3234203d3e20323635373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:7a:99:ba:a6:61:f5:fb:69:ff:ce:a6:c2:cf:03:c8:28:
         1f:78:5e:a7:9a:a5:75:14:da:2b:f0:85:a4:72:c9:9d:c9:ba:
         14:1d:3f:4a:7f:fb:43:cb:66:51:92:83:6b:c5:c5:b3:7f:5f:
         4c:2b:5f:62:2e:d2:6f:ab:cf:30:be:87:f5:a7:d2:91:4f:94:
         65:1b:61:89:0e:73:46:77:cc:8f:29:2c:6a:ef:c6:79:94:f4:
         3b:99:ee:06:80:28:dd:82:20:c0:16:5e:e5:e3:01:39:cb:52:
         52:db:b7:14:99:35:5c:63:52:ab:a0:ba:54:0b:f1:08:f1:ee:
         48:55:3b:ba:9f:e8:84:6f:88:dd:69:cd:76:22:71:d8:0d:35:
         3b:dc:3c:4f:61:ca:aa:31:2d:19:f2:7c:a4:ac:b8:bf:b8:c9:
         77:a8:45:d6:07:da:83:55:d3:45:eb:e8:a2:a2:5f:05:5c:68:
         4b:35:73:52:b0:0b:6b:18:f8:df:4f:34:7f:16:fc:d0:49:c7:
         e4:d5:67:8c:9d:97:a8:36:5f:38:5d:1a:dd:23:c0:f3:ca:2b:
         76:c0:35:c7:2e:35:9f:21:84:9a:98:e2:9a:0e:00:bc:16:9d:
         04:fe:75:ed:61:80:4a:21:52:f4:9d:00:c7:6d:3d:7a:0b:69:
         04:64:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:35:46 2025 by rpki-client