Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32312d3231203d3e203238303234.roa
File:                     3230302e38352e3134342e302f32312d3231203d3e203238303234.roa (raw, json)
Hash identifier:          1YG9GQk7Xd/cR+RHQiwosjWX6owZeAkkwsstI3MyDi4=
Subject key identifier:   15:48:06:C3:7B:B4:CF:60:9E:C1:34:D9:04:7E:4E:DE:D5:E7:CB:0E
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       053D13363B14A7B49EDB715FF2273BE33E6B6BD9
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32312d3231203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:10 +0000
ROA not before:           Tue 06 Jan 2026 18:56:10 +0000
ROA not after:            Tue 05 Jan 2027 19:01:10 +0000
asID:                     28024
IP address blocks:        200.85.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3d:13:36:3b:14:a7:b4:9e:db:71:5f:f2:27:3b:e3:3e:6b:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:10 2026 GMT
            Not After : Jan  5 19:01:10 2027 GMT
        Subject: CN=154806C37BB4CF609EC134D9047E4EDED5E7CB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:d9:f1:28:ea:cd:c5:f8:be:7e:8d:63:cf:
                    16:ba:42:66:b1:78:a7:bf:a6:c7:bc:2e:ea:74:3c:
                    f8:29:09:ea:64:fd:01:86:9b:6e:ad:06:a9:5f:8a:
                    ae:d7:cc:17:53:0d:29:07:f0:00:1f:37:0e:a3:59:
                    f4:c2:a5:5a:27:52:f0:87:fa:e2:1d:fd:e6:ea:eb:
                    35:e3:e1:25:47:38:99:1d:55:bf:81:05:d4:77:17:
                    18:97:cb:be:d4:4a:fb:76:ac:58:92:f9:dd:a1:1f:
                    1f:85:a7:70:e7:81:8f:52:75:91:81:96:c4:94:7a:
                    d3:ea:1f:83:f3:02:8e:2d:15:c5:52:20:aa:83:5a:
                    41:33:ad:19:06:3d:eb:a5:86:a1:c2:3a:93:a8:ce:
                    54:de:ce:f3:94:02:ba:de:b6:47:0c:92:41:f9:61:
                    54:0e:60:ae:aa:83:63:9d:3e:fe:9a:09:50:a9:b1:
                    19:1a:8e:aa:db:e0:2e:f5:01:15:3c:85:4d:dd:25:
                    2d:ea:4a:ce:3f:b4:6c:f3:0b:72:7c:b8:0e:f1:3a:
                    6d:fe:9b:d8:96:db:bc:5b:a1:5c:09:a9:45:08:44:
                    1a:72:35:31:57:c1:2b:ed:d5:77:ff:aa:31:2d:62:
                    66:6d:b4:53:72:84:da:42:2a:5a:25:b5:1b:63:c5:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:06:C3:7B:B4:CF:60:9E:C1:34:D9:04:7E:4E:DE:D5:E7:CB:0E
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32312d3231203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:f2:43:ef:e8:ab:31:77:f5:df:a8:21:22:75:58:b4:dd:
         d9:4f:c6:1d:0e:e2:3c:5b:49:8e:b5:15:b9:1d:50:33:be:12:
         d9:b9:5f:89:6a:9d:0f:24:0d:cb:cd:21:ee:f0:10:e5:76:80:
         56:06:02:e5:bd:8e:be:b0:13:f4:d1:26:4f:14:a4:6d:c2:ef:
         16:3b:25:33:71:02:71:af:23:df:59:ee:fd:61:a2:ca:55:e7:
         f7:0e:d7:0d:50:4e:09:86:0f:ea:c8:a6:0a:41:d2:8b:e6:b5:
         04:2b:91:94:81:14:35:2d:8e:30:22:e2:a2:69:52:96:02:eb:
         1a:cf:c5:c2:07:b6:ff:93:9e:67:be:e8:2d:5e:8f:df:e3:87:
         d0:79:51:75:c3:00:8a:55:3d:cd:8e:b6:da:5b:44:0b:4a:1e:
         15:42:03:ea:71:51:b6:d3:cc:b9:52:39:a5:77:36:9c:2d:42:
         75:21:1b:de:8a:9e:bf:33:0f:1f:b4:23:c7:7c:94:43:a7:5d:
         c2:82:a4:ae:dc:f5:18:7c:48:4a:bd:9a:e3:8d:14:22:88:40:
         55:c2:69:97:d0:de:65:70:9b:48:e7:df:49:88:ae:dd:27:d0:
         3f:a8:a8:95:2c:51:ab:ff:a9:75:0f:eb:98:ad:3f:b8:6f:be:
         8c:86:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:45 2026 by rpki-client