Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134342e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          jo+b4jW50iyVuY//lAVdApg2CuhfQzzXtBcQxLMw56o=
Subject key identifier:   10:30:82:7E:CF:B3:23:9C:C2:64:0E:BC:EC:1A:F3:3E:06:BD:8D:86
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       03ACCE9F146C63B6F0C895B8DB0477B8BD444FB8
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:05 +0000
ROA not before:           Tue 06 Jan 2026 18:56:05 +0000
ROA not after:            Tue 05 Jan 2027 19:01:05 +0000
asID:                     28024
IP address blocks:        200.85.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:ce:9f:14:6c:63:b6:f0:c8:95:b8:db:04:77:b8:bd:44:4f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:05 2026 GMT
            Not After : Jan  5 19:01:05 2027 GMT
        Subject: CN=1030827ECFB3239CC2640EBCEC1AF33E06BD8D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:5b:af:9c:16:99:51:31:a0:45:38:65:70:
                    23:43:66:be:f0:84:21:1c:b0:bb:99:95:c7:96:b2:
                    83:9a:9d:48:80:1f:c4:6f:a7:24:04:a6:46:a0:f1:
                    51:51:de:4e:a6:26:8b:a2:0c:47:fa:1b:7c:f2:81:
                    39:6d:73:3d:9e:f7:59:fd:d7:1c:07:41:4a:d9:b0:
                    5e:db:3a:4b:37:d1:a6:05:03:16:53:0b:48:d5:59:
                    ad:2e:cf:05:b4:0c:88:15:80:f2:52:ec:0a:e8:73:
                    39:e0:c7:e3:09:53:3f:6b:fd:f4:93:e8:ad:d6:d0:
                    62:05:62:f8:74:45:54:86:af:08:80:8e:2c:87:79:
                    e8:be:1f:a6:ab:ba:88:ee:67:ed:cd:b3:f4:84:d3:
                    fa:fc:97:2a:b8:3a:c1:32:f2:a5:0a:0e:a0:9f:42:
                    2f:1d:b0:14:93:f5:54:18:5c:ce:c0:85:a8:95:27:
                    7b:98:23:18:8c:9f:0c:b9:ca:62:d0:69:53:e8:94:
                    3d:b1:9d:5c:a4:43:c5:9b:b5:70:a5:83:46:08:74:
                    71:fd:14:a0:2f:3d:e5:6e:e9:cd:a1:e2:ec:da:ff:
                    f8:e0:f9:ac:d7:58:3e:62:a4:68:7b:cd:63:34:26:
                    cd:4a:56:16:74:52:1c:8f:05:16:87:40:14:c4:a1:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:82:7E:CF:B3:23:9C:C2:64:0E:BC:EC:1A:F3:3E:06:BD:8D:86
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:0c:a8:dd:76:e6:45:f3:6a:07:d2:ed:7b:c5:bf:5e:64:
         12:ba:b8:dc:cc:db:98:78:82:32:36:fe:66:3c:fb:2b:95:f4:
         e2:f4:c3:18:ca:2d:a5:c8:e8:eb:c5:93:72:11:89:da:01:a1:
         06:9b:05:23:93:7f:2d:fa:a6:2c:82:c3:84:b1:9c:ad:37:d6:
         7a:a6:99:a8:4e:ab:56:fe:c2:c4:2d:1d:62:71:5f:4f:92:47:
         e7:b2:45:16:d8:4b:bd:62:41:bd:59:d7:c2:8b:75:b7:9e:90:
         44:30:ed:52:b6:5a:92:fd:4d:cd:de:9c:e3:96:ae:d9:bb:31:
         95:67:6c:51:20:9d:89:34:de:85:de:4b:a2:77:e2:d8:1c:ac:
         9a:1c:cc:1b:d6:21:8d:d8:95:cc:70:7e:6e:75:c6:5a:2a:02:
         38:e2:8f:35:09:f9:21:72:4f:9e:1a:5e:7b:16:24:6e:99:80:
         55:48:16:ef:8a:86:78:f0:64:3c:e9:34:3a:ff:58:34:f9:cf:
         6c:a6:62:2d:9f:9c:96:27:4e:77:77:f2:40:90:e5:85:09:f4:
         0e:49:70:f4:43:97:3a:c2:ea:24:2f:8f:ef:df:db:12:6e:f1:
         fa:99:a3:1c:10:a5:bf:98:5f:c9:cf:f1:49:54:b1:02:e2:0b:
         ef:91:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:33 2026 by rpki-client