Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234372e302f32342d3234203d3e203132363834.roa
File:                     3230302e38352e3234372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          920bpW8tThTaHqRoQKdNucJxgVc/TW0sbY6muF8Caic=
Subject key identifier:   ED:D6:07:BA:2A:E9:F1:5C:B4:C8:F1:EB:0B:DB:4F:A7:73:81:24:B2
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       4B11A06B28D609C3E586C3B898E7A4440D95E204
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234372e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:00:24 +0000
ROA not before:           Tue 04 Feb 2025 17:55:24 +0000
ROA not after:            Tue 03 Feb 2026 18:00:24 +0000
asID:                     12684
IP address blocks:        200.85.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:11:a0:6b:28:d6:09:c3:e5:86:c3:b8:98:e7:a4:44:0d:95:e2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Feb  4 17:55:24 2025 GMT
            Not After : Feb  3 18:00:24 2026 GMT
        Subject: CN=EDD607BA2AE9F15CB4C8F1EB0BDB4FA7738124B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:b3:d6:9b:6b:71:60:c4:b3:68:ac:a1:36:
                    ea:55:bc:aa:da:a0:c7:e0:c8:b4:30:5c:92:08:69:
                    ff:59:0c:56:4f:0e:de:a2:6e:5f:7b:fc:fd:f4:55:
                    ff:5b:d3:87:0f:e3:ac:60:48:4f:48:5e:c3:46:6a:
                    f0:90:9c:eb:1d:20:43:d9:6f:29:62:1f:58:e8:50:
                    94:28:c7:6b:eb:cb:b3:94:59:09:36:e3:7e:f4:84:
                    60:4a:19:69:cd:66:01:3a:72:37:f9:e6:1f:ed:75:
                    76:9b:0d:a6:ce:83:26:80:54:1e:01:90:73:3c:3a:
                    7a:6c:34:cd:94:11:f9:26:4e:38:c0:18:04:15:a2:
                    52:7b:8c:e1:55:1d:79:3e:bb:dc:aa:43:8c:e2:53:
                    4d:d6:02:77:8f:c3:d1:38:1b:6c:fa:f3:af:4a:fb:
                    b7:f9:92:a1:39:b8:9c:eb:4d:18:a2:ef:64:b6:26:
                    b0:14:0e:31:58:0b:cc:bb:6c:b6:8f:3b:c6:a2:37:
                    00:42:9e:5d:e7:40:69:96:0a:27:b5:74:60:9f:0c:
                    80:69:a4:5b:74:48:be:9a:ca:82:b3:7a:e3:ec:2a:
                    24:4a:9f:2a:a9:23:c4:d7:b1:5d:df:51:35:3c:96:
                    7b:6d:89:fb:d5:83:91:39:88:91:8b:19:a5:a0:77:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:07:BA:2A:E9:F1:5C:B4:C8:F1:EB:0B:DB:4F:A7:73:81:24:B2
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3234372e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:30:61:81:b4:bb:65:09:dd:78:7b:f2:90:15:56:6d:62:80:
         eb:89:f9:a4:e8:f9:40:fb:84:bd:06:8a:07:38:d4:05:a7:5a:
         ae:b5:54:35:0d:ae:74:f6:75:59:3b:58:32:49:30:0f:3b:65:
         be:09:0c:1d:11:61:a6:2c:4e:d2:44:77:42:95:55:93:b1:e8:
         38:3d:7b:5f:0a:26:c6:97:1c:a9:a0:f4:5c:30:be:dc:94:f3:
         cf:7d:df:ae:b0:fa:21:56:39:a3:ca:f0:6d:d1:2e:a7:fb:b1:
         6e:8e:9e:53:00:03:6c:52:27:3d:93:76:20:fc:b9:4a:e6:69:
         9e:f4:d1:96:6b:33:a0:cc:5a:4f:c7:8c:6f:d5:d9:40:ac:ba:
         b5:1e:ac:69:de:f5:53:0d:9b:98:bd:4c:02:d7:6a:d7:28:12:
         cf:b7:45:06:e6:38:5a:30:4a:6a:52:a9:0f:8a:75:50:b8:89:
         de:5e:ef:c4:6c:08:a6:18:59:75:8b:1b:d4:66:e2:fc:0e:0b:
         c8:61:1b:c6:6e:86:bc:83:ca:22:56:af:9f:d0:da:a9:fa:b7:
         e1:fe:a0:2f:62:85:e0:b8:9f:a2:e3:e7:bc:25:c8:30:36:3d:
         19:3d:b4:04:70:a7:39:7e:6d:f5:90:3d:e7:ac:7f:34:1d:36:
         17:81:f5:46
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSxGgayjWCcPlhsO4mOekRA2V4gQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRTM0MjEwNzY0QkNENDJDQjZDMEZDRDkzODI4QTAx
NjYyM0VGMTAeFw0yNTAyMDQxNzU1MjRaFw0yNjAyMDMxODAwMjRaMDMxMTAvBgNV
BAMTKEVERDYwN0JBMkFFOUYxNUNCNEM4RjFFQjBCREI0RkE3NzM4MTI0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFe7PWm2txYMSzaKyhNupVvKra
oMfgyLQwXJIIaf9ZDFZPDt6ibl97/P30Vf9b04cP46xgSE9IXsNGavCQnOsdIEPZ
byliH1joUJQox2vry7OUWQk24370hGBKGWnNZgE6cjf55h/tdXabDabOgyaAVB4B
kHM8OnpsNM2UEfkmTjjAGAQVolJ7jOFVHXk+u9yqQ4ziU03WAnePw9E4G2z6869K
+7f5kqE5uJzrTRii72S2JrAUDjFYC8y7bLaPO8aiNwBCnl3nQGmWCie1dGCfDIBp
pFt0SL6ayoKzeuPsKiRKnyqpI8TXsV3fUTU8lnttifvVg5E5iJGLGaWgd171AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7dYHuirp8Vy0yPHrC9tPp3OBJLIwHwYDVR0j
BBgwFoAUzv40IQdkvNQstsD82TgooBZiPvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTg3ODc1Nzk1RDUwMTU1RkU3NEM0NUVFQjUxMTYwN0JE
MDU0MzU2MEJGRTkxODE0MEYyNUVFMjU0OEIzNEU1LzAvQ0VGRTM0MjEwNzY0QkNE
NDJDQjZDMEZDRDkzODI4QTAxNjYyM0VGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZFMzQyMTA3NjRCQ0Q0MkNC
NkMwRkNEOTM4MjhBMDE2NjIzRUYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U4Nzg3NTc5NUQ1MDE1NUZFNzRDNDVFRUI1MTE2MDdCRDA1NDM1NjBC
RkU5MTgxNDBGMjVFRTI1NDhCMzRFNS8wLzMyMzAzMDJlMzgzNTJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMjM2MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhV9zAN
BgkqhkiG9w0BAQsFAAOCAQEAEDBhgbS7ZQndeHvykBVWbWKA64n5pOj5QPuEvQaK
BzjUBadarrVUNQ2udPZ1WTtYMkkwDztlvgkMHRFhpixO0kR3QpVVk7HoOD17Xwom
xpccqaD0XDC+3JTzz33frrD6IVY5o8rwbdEup/uxbo6eUwADbFInPZN2IPy5SuZp
nvTRlmszoMxaT8eMb9XZQKy6tR6sad71Uw2bmL1MAtdq1ygSz7dFBuY4WjBKalKp
D4p1ULiJ3l7vxGwIphhZdYsb1Gbi/A4LyGEbxm6GvIPKIlavn9Daqfq34f6gL2KF
4LifouPnvCXIMDY9GT20BHCnOX5t9ZA956x/NB02F4H1Rg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:19:10 2025 by rpki-client