Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134352e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134352e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          opNjkuhTlUjp4r180u7T6KcQz4NtrK4QUXMTdLeLYcA=
Subject key identifier:   A3:7C:6F:51:4A:DB:74:0F:18:6C:36:01:38:5F:C4:DE:E0:AC:3A:13
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       27AF8A9EA8A0F794B3764BF4DF7F571AC8CD89AD
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134352e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:07 +0000
ROA not before:           Tue 06 Jan 2026 18:56:07 +0000
ROA not after:            Tue 05 Jan 2027 19:01:07 +0000
asID:                     28024
IP address blocks:        200.85.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:af:8a:9e:a8:a0:f7:94:b3:76:4b:f4:df:7f:57:1a:c8:cd:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:07 2026 GMT
            Not After : Jan  5 19:01:07 2027 GMT
        Subject: CN=A37C6F514ADB740F186C3601385FC4DEE0AC3A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:9c:ad:d1:0d:16:71:fe:9a:37:ca:87:45:
                    24:0e:ae:91:b5:da:4d:1f:a3:7a:b0:81:49:d7:4b:
                    82:e1:78:e5:f2:dd:b0:bd:43:25:a2:4d:c4:96:35:
                    4f:f0:32:4b:87:20:d2:1f:d3:97:28:eb:dd:33:ae:
                    cc:a5:cf:3f:e9:f1:bf:85:38:10:ea:13:47:8c:24:
                    7f:33:24:29:da:29:05:2b:72:78:a1:b8:d8:ae:44:
                    3b:7e:5c:f5:f7:ff:ad:36:3f:87:1a:ac:c2:d6:9e:
                    73:1c:57:08:07:e5:9c:05:54:40:39:c3:b9:91:c7:
                    89:f6:2a:53:71:21:0a:8a:f8:cd:fc:65:21:a7:26:
                    03:c3:e6:df:10:3d:2f:cf:3b:e3:80:3c:ee:16:c7:
                    d6:6f:db:2c:3e:e0:f9:37:8d:10:63:71:1b:d7:43:
                    df:06:72:cb:4c:33:73:21:21:05:f6:32:ac:b1:ee:
                    07:4d:30:0b:a7:60:b1:71:a6:e0:03:a8:9b:5e:4d:
                    8f:7a:d4:99:a8:0c:bc:23:95:f3:0f:e3:f2:1b:83:
                    97:f7:ee:25:e8:ea:57:07:92:45:d0:ed:b2:78:de:
                    9c:c5:59:3b:3d:e5:86:6f:96:22:e5:90:90:33:3d:
                    b6:c2:eb:06:dd:2d:0e:db:73:2a:87:90:92:f9:34:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:6F:51:4A:DB:74:0F:18:6C:36:01:38:5F:C4:DE:E0:AC:3A:13
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134352e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:b2:a3:54:94:3a:43:f7:4f:d4:1c:a0:31:9a:7a:af:38:
         a9:32:d2:eb:a1:4a:07:0f:af:a9:17:8a:81:8f:f2:c0:36:1f:
         93:c2:d7:11:a5:96:31:63:35:67:6e:d4:52:58:dc:1d:0a:65:
         e5:72:52:2e:1d:ff:be:21:bb:d4:f4:64:42:dd:85:df:3d:46:
         be:8f:0b:48:33:02:25:c8:a8:21:b0:4c:26:79:7d:1e:30:01:
         cd:c6:f9:7b:2e:1b:5d:d4:56:65:29:db:9f:d0:32:9d:48:d4:
         68:03:8a:a1:5d:9c:c4:31:05:c1:53:0e:3d:5a:2a:2b:25:9b:
         f1:dd:45:6d:e3:21:2b:41:1b:c5:81:2f:87:c7:25:46:d9:12:
         77:de:d8:6b:2b:1a:85:5c:22:7a:ba:36:45:25:6f:09:63:48:
         ac:c5:8b:eb:3e:20:22:1b:55:97:11:46:a6:20:c3:c9:70:93:
         45:04:11:b7:03:7d:dc:49:7f:f6:25:d0:56:83:92:22:71:55:
         ce:bc:85:75:df:9d:78:2d:bc:b6:c2:03:5e:76:d3:b6:a1:17:
         2c:8f:8e:71:ac:0d:33:c6:af:8d:6b:93:6b:07:aa:72:e7:55:
         d0:b2:43:a0:35:cd:e0:5d:37:1b:50:b0:cb:66:15:1f:ec:ae:
         cd:da:1e:06
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ6+Knqig95Szdkv0339XGsjNia0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNjAxMDYxODU2MDdaFw0yNzAxMDUxOTAxMDdaMDMxMTAvBgNV
BAMTKEEzN0M2RjUxNEFEQjc0MEYxODZDMzYwMTM4NUZDNERFRTBBQzNBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7Jyt0Q0Wcf6aN8qHRSQOrpG1
2k0fo3qwgUnXS4LheOXy3bC9QyWiTcSWNU/wMkuHINIf05co690zrsylzz/p8b+F
OBDqE0eMJH8zJCnaKQUrcnihuNiuRDt+XPX3/602P4carMLWnnMcVwgH5ZwFVEA5
w7mRx4n2KlNxIQqK+M38ZSGnJgPD5t8QPS/PO+OAPO4Wx9Zv2yw+4Pk3jRBjcRvX
Q98GcstMM3MhIQX2Mqyx7gdNMAunYLFxpuADqJteTY961JmoDLwjlfMP4/Ibg5f3
7iXo6lcHkkXQ7bJ43pzFWTs95YZvliLlkJAzPbbC6wbdLQ7bcyqHkJL5NCnLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUo3xvUUrbdA8YbDYBOF/E3uCsOhMwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMyMzAzMDJlMzgzNTJlMzEzNDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhVkTAN
BgkqhkiG9w0BAQsFAAOCAQEAHoKyo1SUOkP3T9QcoDGaeq84qTLS66FKBw+vqReK
gY/ywDYfk8LXEaWWMWM1Z27UUljcHQpl5XJSLh3/viG71PRkQt2F3z1Gvo8LSDMC
JcioIbBMJnl9HjABzcb5ey4bXdRWZSnbn9AynUjUaAOKoV2cxDEFwVMOPVoqKyWb
8d1FbeMhK0EbxYEvh8clRtkSd97YaysahVwiero2RSVvCWNIrMWL6z4gIhtVlxFG
piDDyXCTRQQRtwN93El/9iXQVoOSInFVzryFdd+deC28tsIDXnbTtqEXLI+OcawN
M8avjWuTaweqcudV0LJDoDXN4F03G1Cwy2YVH+yuzdoeBg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:36 2026 by rpki-client