Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134382e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134382e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          UucVBswkfjYQOibUMivs6d19OUP3gyuDp2CGlkNNXsQ=
Subject key identifier:   22:4F:88:3A:03:01:CE:14:6D:8F:92:E4:08:27:38:77:8F:9C:5F:DD
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       03A1A4E634298E7BBF2E40C063B3FCD2A3372B2D
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134382e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:07 +0000
ROA not before:           Tue 06 Jan 2026 18:56:07 +0000
ROA not after:            Tue 05 Jan 2027 19:01:07 +0000
asID:                     28024
IP address blocks:        200.85.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:a4:e6:34:29:8e:7b:bf:2e:40:c0:63:b3:fc:d2:a3:37:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:07 2026 GMT
            Not After : Jan  5 19:01:07 2027 GMT
        Subject: CN=224F883A0301CE146D8F92E4082738778F9C5FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:b2:a8:b2:05:eb:ba:f9:0c:6c:e1:da:78:
                    f4:4e:ed:08:7d:cd:92:a8:4a:25:9c:37:fa:1f:a2:
                    55:03:f3:8d:97:4e:12:51:08:f1:60:17:95:70:ff:
                    f3:12:9c:ed:14:db:1c:4a:da:03:0f:a2:72:99:b6:
                    c3:29:d8:fc:2c:63:c9:2e:6a:21:f7:cd:5b:6e:de:
                    00:8d:ba:de:26:e9:da:c7:4a:3c:3d:87:19:c3:4a:
                    a4:6b:fc:7c:01:56:45:61:e3:07:df:77:2a:1e:fa:
                    39:44:ec:cd:eb:a3:83:2f:23:e0:53:93:2c:d2:bd:
                    c2:09:45:27:b0:c5:07:5e:bb:7c:23:08:cd:08:80:
                    9c:de:f7:b4:49:52:75:8c:35:a8:f2:5b:94:90:55:
                    7d:82:96:54:91:87:c5:d3:67:c8:45:09:ca:ee:bb:
                    9a:df:70:68:e5:a3:13:2e:6b:c1:e8:1f:30:1f:92:
                    7a:53:a3:54:a2:6f:9a:38:10:72:26:7c:2f:69:d9:
                    f1:3a:2d:28:3b:e3:39:a9:d8:fe:01:ef:83:6a:77:
                    e9:05:59:20:af:b0:01:8c:9b:3e:ad:cc:6a:7c:30:
                    5f:c0:61:5c:3e:6b:9e:30:00:af:61:de:d9:ff:c8:
                    b1:66:7c:c7:eb:81:a2:4d:3c:34:01:2d:14:a9:07:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:88:3A:03:01:CE:14:6D:8F:92:E4:08:27:38:77:8F:9C:5F:DD
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134382e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:73:73:43:61:8e:89:4f:61:ea:11:9a:91:7d:58:9e:cf:b7:
         47:64:21:e9:0e:31:86:0f:d5:5a:19:bc:35:37:43:31:32:55:
         87:ae:f0:8f:af:fc:aa:c2:65:f0:46:b0:8c:04:22:86:be:e0:
         3c:2d:92:c4:bb:09:6f:06:50:a9:27:13:e4:70:9e:b9:28:d0:
         ad:5e:ad:80:95:95:79:13:ae:6a:0b:7b:fc:98:63:74:a7:2e:
         a6:65:4e:34:24:26:99:63:cb:e3:71:7e:48:b8:3f:47:8a:39:
         59:02:62:cd:21:79:e5:34:cd:66:59:8d:46:65:46:38:c9:30:
         ba:64:24:cd:44:3c:3f:fa:90:5e:8f:42:f9:34:77:37:ff:a4:
         bb:65:62:3c:21:65:3c:db:2b:ee:8c:77:4c:33:dd:5f:31:ab:
         46:8e:43:dd:32:a2:12:88:d0:7e:2d:9c:42:c9:7e:eb:68:af:
         bf:47:c5:3a:bf:55:d6:83:fd:00:35:8c:81:5d:40:68:ed:ea:
         34:14:26:e8:a4:0b:15:1a:22:9c:10:98:84:98:b1:eb:0e:84:
         23:58:a3:7c:c1:40:57:e0:22:0d:f4:53:7d:a7:28:57:a2:41:
         58:0b:a6:40:54:ce:cd:8a:fb:a5:1e:56:ae:73:7b:96:8f:76:
         83:40:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:23 2026 by rpki-client