Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234372e302f32342d3234203d3e203132363834.roa
File:                     3230302e38352e3234372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          UQtyJ4LAvS1Xtg8Io0UGWyySriL+xlJt32TZqDuQHiQ=
Subject key identifier:   B9:F5:26:15:62:81:B3:B4:2F:92:13:52:E9:D6:95:DD:94:45:1F:F4
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       39E3311CDB63DF080020F2F39C8A8BE9AFED5E30
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234372e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 17:42:56 +0000
ROA not before:           Tue 05 Mar 2024 17:37:56 +0000
ROA not after:            Tue 04 Mar 2025 17:42:56 +0000
asID:                     12684
IP address blocks:        200.85.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e3:31:1c:db:63:df:08:00:20:f2:f3:9c:8a:8b:e9:af:ed:5e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Mar  5 17:37:56 2024 GMT
            Not After : Mar  4 17:42:56 2025 GMT
        Subject: CN=B9F526156281B3B42F921352E9D695DD94451FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:9a:22:a5:ba:f3:0c:ca:7b:e4:7c:5d:40:
                    35:33:77:df:57:7e:68:d1:9c:61:a7:26:7c:ae:ba:
                    b6:6d:9e:2c:bd:b2:70:79:1a:b0:2f:8b:db:18:2a:
                    9c:14:0a:fa:90:6d:f6:58:ed:ff:c0:0a:64:5b:fc:
                    1e:d8:b1:a7:0a:74:42:1b:bf:38:eb:20:68:46:d6:
                    b9:04:82:05:a3:38:a4:79:6d:87:93:84:c0:d7:a5:
                    1d:51:ae:0c:ea:c0:b6:de:d9:24:2a:2c:3f:2a:a6:
                    73:24:ea:3d:77:49:72:a7:09:46:82:4f:6a:1c:a7:
                    69:a9:a7:db:56:2f:b3:05:a8:36:08:9d:8a:cd:68:
                    2c:31:c9:a7:d2:c5:87:7f:38:09:4f:01:50:b0:2a:
                    e5:fb:95:a0:23:d8:e8:d3:0c:08:65:c6:a9:69:f0:
                    b3:20:ba:86:0b:3d:c5:3c:91:b1:86:ba:9c:46:46:
                    21:60:a0:61:47:42:f4:1b:c7:1d:79:2b:98:ab:9c:
                    11:77:92:88:63:05:c3:dc:d8:37:eb:27:f6:60:ef:
                    0c:ed:a6:1d:51:7c:ff:67:c8:6c:8e:a5:63:81:33:
                    32:52:77:f6:38:d1:3c:da:86:4c:da:27:a8:f3:23:
                    58:a3:f6:d1:b5:61:74:3b:3f:dd:27:f2:8f:9e:ef:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:26:15:62:81:B3:B4:2F:92:13:52:E9:D6:95:DD:94:45:1F:F4
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234372e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:19:76:ea:82:dc:fe:fb:d0:ff:fc:90:67:38:47:b7:24:
         5d:66:1b:ce:77:9b:c2:1b:24:e9:73:d1:47:d2:8b:77:cd:4e:
         04:7d:1f:88:10:a4:48:40:41:c6:48:15:1b:07:1a:61:55:71:
         2a:52:f8:a9:c3:17:ba:1d:b1:7e:20:c6:c9:50:db:b8:fb:25:
         14:52:65:35:ca:5a:c7:30:72:ce:d1:e1:b7:cd:5e:a0:f6:6a:
         9a:f0:c6:cd:32:a0:c8:8a:4d:c0:16:46:09:79:59:79:c6:94:
         36:01:44:e5:03:b2:39:7f:b9:39:dc:cd:06:d0:fa:6a:46:08:
         d3:60:39:18:c7:74:96:bf:f6:b7:ba:a5:0e:ad:d2:2d:32:f0:
         f8:46:49:13:56:79:1f:da:69:0e:d3:17:97:ef:09:00:af:de:
         5c:8f:d7:55:1e:b7:ae:a4:e7:7f:62:72:5b:4a:92:fe:3d:9c:
         6f:56:b6:3b:d9:17:fe:7a:c1:5a:0c:c5:d0:bb:83:37:01:dc:
         c2:c1:9d:19:70:cf:c4:0f:89:ec:3f:72:b1:a6:b5:3b:3b:70:
         c1:3d:7d:17:60:eb:cf:a9:60:e3:5e:d9:19:34:86:df:d2:fe:
         0f:0f:3d:26:7d:a3:8f:c0:de:1c:24:e0:ab:11:89:f7:91:53:
         c7:1f:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org