Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
File:                     3230302e38352e3232372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          vjHqhpTzZB6K5nBGeWlCtGeMew5ijeZ1ATWq0U0MHGQ=
Subject key identifier:   B9:BD:98:58:6D:31:67:65:2F:3D:FD:88:B2:A0:79:AB:AD:41:DD:B6
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       21679F661641896A16701E69334B369FB9019279
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 17:42:55 +0000
ROA not before:           Tue 05 Mar 2024 17:37:55 +0000
ROA not after:            Tue 04 Mar 2025 17:42:55 +0000
asID:                     12684
IP address blocks:        200.85.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:67:9f:66:16:41:89:6a:16:70:1e:69:33:4b:36:9f:b9:01:92:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Mar  5 17:37:55 2024 GMT
            Not After : Mar  4 17:42:55 2025 GMT
        Subject: CN=B9BD98586D3167652F3DFD88B2A079ABAD41DDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:88:3d:02:cf:cd:8f:13:a0:41:66:c9:81:
                    ad:bc:b3:f8:11:aa:be:28:58:cc:9c:21:97:ce:98:
                    28:07:1c:be:75:e7:ba:9c:d5:15:12:02:5d:32:14:
                    89:3c:7e:0b:c8:a4:19:4b:38:46:0d:3b:14:e0:9d:
                    33:d4:56:f9:2b:9b:a9:c4:fe:97:87:4c:3f:0a:bf:
                    3a:99:9a:85:ef:64:c5:14:9e:50:1a:88:a0:d3:b1:
                    fc:52:4b:63:19:3c:84:ad:b0:0a:5d:ad:77:eb:ca:
                    d3:18:58:db:ac:59:b5:92:a2:cd:80:dd:71:18:55:
                    a4:46:76:a6:7f:20:58:dd:80:5f:10:8b:d6:c9:38:
                    4e:fe:b5:1f:68:13:1e:43:01:ad:5a:88:4e:98:93:
                    71:59:c3:3f:29:e9:e3:67:b1:db:30:8e:a5:88:74:
                    38:92:8f:37:f2:13:6d:b5:85:8b:7b:ed:cb:7f:a3:
                    19:42:fc:b4:c8:af:71:fd:5f:84:01:01:0f:c9:84:
                    13:d3:07:ba:31:05:3a:79:a9:80:a7:15:8d:8d:02:
                    77:a5:ec:bb:47:26:35:58:9f:e0:a0:f9:db:08:56:
                    4b:92:ac:f1:76:fc:28:7e:38:f3:66:31:41:37:3f:
                    7e:f1:90:99:04:28:8c:ec:27:2e:09:30:65:b5:3b:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:98:58:6D:31:67:65:2F:3D:FD:88:B2:A0:79:AB:AD:41:DD:B6
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:5a:44:7f:27:f7:84:8a:d7:ed:b0:e3:55:01:74:79:90:d3:
         ee:40:e8:1f:86:05:00:33:72:15:4b:2c:c6:01:2f:c8:62:ad:
         49:f7:4d:48:0e:d1:1b:02:0a:49:e3:ad:be:13:12:08:ca:4b:
         04:22:dc:38:16:b5:db:1b:39:ae:b7:8e:6e:65:c1:85:27:6f:
         c4:d8:e6:d2:c2:51:66:72:8d:c3:a6:6c:f6:da:dd:6b:5f:61:
         16:ce:82:f4:30:05:74:00:e5:fc:41:0b:47:88:1a:32:18:b4:
         c7:e5:26:e2:06:69:f8:ef:0f:d4:c4:d5:e4:1c:7c:4a:0b:90:
         d7:36:b1:2c:6b:17:05:9c:ac:61:cf:d5:e7:ee:b2:8a:db:b4:
         af:90:5f:9a:6d:73:58:e1:d9:d8:78:bc:ea:41:da:7e:2d:e9:
         85:4c:23:29:ee:2c:5e:63:81:5c:19:68:f3:96:3b:82:d2:d9:
         c5:68:c0:4b:c1:b2:be:d5:63:11:9f:73:f7:dc:16:49:44:11:
         d5:f9:64:c7:b6:23:c4:ce:9c:ae:0d:16:05:66:c6:3f:55:d0:
         fa:7c:5c:1c:11:f1:31:d3:c2:a4:fb:1a:45:59:e9:38:12:0a:
         23:9f:67:bc:3f:6a:fb:89:6c:f5:22:c4:2e:59:1a:4e:03:59:
         4c:1c:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org