Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3233382e302f32342d3234203d3e203132363834.roa
File:                     3230302e38352e3233382e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          kuJxfdW7M1Wme53/GbXTvfRFu54qFKGYqfPsJE06PD8=
Subject key identifier:   D2:FD:7C:E0:65:21:96:AA:01:FB:A9:45:79:1F:56:73:02:B6:EC:A3
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       07CD53AA64AA6A3F30475EB44CC8FF768E003704
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3233382e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:00:22 +0000
ROA not before:           Tue 04 Feb 2025 17:55:22 +0000
ROA not after:            Tue 03 Feb 2026 18:00:22 +0000
asID:                     12684
IP address blocks:        200.85.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cd:53:aa:64:aa:6a:3f:30:47:5e:b4:4c:c8:ff:76:8e:00:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Feb  4 17:55:22 2025 GMT
            Not After : Feb  3 18:00:22 2026 GMT
        Subject: CN=D2FD7CE0652196AA01FBA945791F567302B6ECA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:4b:98:38:b6:72:95:2b:aa:72:32:b9:b0:
                    d2:96:b4:59:b4:71:d3:25:0b:c1:23:2f:fa:5b:bd:
                    17:6f:9b:25:f2:d3:ef:45:15:e0:33:59:73:d6:ff:
                    00:8b:c9:c4:71:a0:ce:b7:fd:20:9c:89:e8:8f:48:
                    46:c0:44:fb:46:bd:91:64:3b:80:af:ac:6b:2f:fc:
                    71:bf:4d:10:93:f3:1a:cc:bd:ce:6d:d7:a4:58:46:
                    2f:67:85:e8:ca:49:07:87:0d:59:ef:cc:25:15:ab:
                    54:be:7d:3d:46:26:e7:a9:98:e3:4e:a2:af:d8:c2:
                    76:ab:07:ad:4f:f4:25:89:93:7f:bf:24:f8:70:a0:
                    05:1c:74:da:f8:d9:d3:d9:a2:4e:a4:e8:a5:22:49:
                    51:1d:b0:46:b3:21:c6:bf:83:ba:65:22:4a:65:c7:
                    0d:90:fc:cd:6c:f1:d1:ff:35:92:c5:8f:70:9e:16:
                    64:d9:9d:73:2e:2f:a4:9d:39:0e:39:37:d5:31:3e:
                    2a:fa:2c:7a:06:39:58:d3:56:ac:16:8f:90:1a:b8:
                    f0:43:43:ab:9c:80:db:10:71:7f:23:a6:5b:38:46:
                    05:db:a3:40:b9:e2:73:fd:3c:12:fb:97:21:c4:d4:
                    72:b1:eb:81:bb:cc:25:97:d4:03:42:98:f7:a5:72:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FD:7C:E0:65:21:96:AA:01:FB:A9:45:79:1F:56:73:02:B6:EC:A3
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3233382e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:48:ff:3d:ab:f0:c1:ed:5b:6f:dc:af:73:60:53:8e:e3:e6:
         6e:d5:a4:71:f2:29:fd:b8:ce:8a:55:1d:72:ef:59:b3:ae:1a:
         a4:c8:36:1b:a6:51:f8:29:5c:24:3a:4f:bd:91:30:e7:78:24:
         69:9a:39:49:fb:7d:a8:07:85:97:a2:20:23:16:13:a1:15:7f:
         36:c3:1a:6f:f2:08:da:d0:db:6a:d9:95:31:16:fe:21:a8:b4:
         27:d1:1b:73:0d:15:b6:01:72:74:cb:d8:77:d2:83:64:a7:45:
         3a:9a:7f:b4:93:10:d6:ee:a3:ee:5a:94:a4:5e:82:56:e8:9c:
         ac:c0:b6:68:e0:bd:62:8f:39:84:6c:c8:be:2e:e2:10:2b:5b:
         1a:b0:c4:62:3b:b3:2c:f6:b8:35:87:14:38:43:2b:89:f3:0c:
         c4:51:29:74:58:0d:9e:47:3b:46:0d:90:e1:44:84:8e:fa:1f:
         60:3d:76:f9:34:67:ed:54:09:59:87:03:63:df:1b:6a:76:7c:
         49:f3:7a:23:f2:52:88:f3:b0:b1:d0:23:40:d2:16:0a:0d:73:
         8a:3a:3c:9b:00:d1:ca:18:82:61:f1:af:6f:e8:6d:37:4d:a6:
         e0:68:f4:cb:9c:f5:e9:11:70:28:e5:f3:75:13:b0:e9:8e:94:
         f4:f0:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:02 2025 by rpki-client on console.sobornost.net