Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32312d3231203d3e203238303234.roa
File:                     3230302e38352e3134342e302f32312d3231203d3e203238303234.roa (raw, json)
Hash identifier:          w5xkhZRSlVdFBwkohZPFA0IWMUVs++FZpWLwexz3vDA=
Subject key identifier:   67:26:36:10:1F:E1:75:D9:DE:79:77:72:D2:F2:8D:37:EA:B2:FF:46
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       AADA8BA5D0F0EFBC681CC6083FB28D134E21B5
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32312d3231203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     28024
IP address blocks:        200.85.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:da:8b:a5:d0:f0:ef:bc:68:1c:c6:08:3f:b2:8d:13:4e:21:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=672636101FE175D9DE797772D2F28D37EAB2FF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:8c:13:62:ff:2d:33:be:d3:a1:1a:0a:3e:
                    63:f0:1f:41:b3:62:45:31:45:d4:3f:90:b4:90:66:
                    8a:0c:77:93:3e:9a:5b:30:fd:57:e4:ba:4c:c9:dc:
                    9f:b1:6f:8c:08:28:84:b7:a9:34:88:4c:d5:ec:00:
                    9f:61:cb:40:1c:b8:c0:9c:a7:88:7d:f7:1a:b0:7b:
                    9d:a8:34:be:b8:ea:51:1e:24:39:2b:d9:18:a3:dd:
                    03:62:33:d1:ec:c2:91:7d:4e:9c:7c:e9:59:aa:dc:
                    1a:5c:25:ee:ff:30:39:7f:70:24:5b:ca:aa:48:b3:
                    e9:c2:35:61:03:0f:5c:80:46:1d:8a:65:17:6d:d6:
                    c2:4a:6c:3d:6e:c5:c4:07:1e:64:a8:b6:39:47:00:
                    fe:ac:72:19:fb:95:5b:c9:2b:03:58:bd:f2:1a:f4:
                    a6:7e:be:2e:a6:90:d8:aa:3b:84:df:b0:29:7a:40:
                    5d:c2:00:d6:b0:fa:1d:73:f9:19:d5:a4:e3:39:31:
                    37:80:f4:5a:80:65:a8:e6:87:11:8f:54:d4:d8:11:
                    61:0f:e8:5f:60:a8:bf:ff:86:e9:31:cb:ed:07:31:
                    58:4e:99:b1:06:4b:74:94:98:c8:a3:c1:6f:e6:f8:
                    f4:b0:9b:f5:43:33:fd:91:4d:b8:ca:7f:47:9c:e8:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:36:10:1F:E1:75:D9:DE:79:77:72:D2:F2:8D:37:EA:B2:FF:46
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32312d3231203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:64:60:4b:e0:78:4f:8f:1b:31:cb:65:84:e9:a1:70:d2:05:
         24:24:93:41:48:da:f8:03:ca:4f:57:95:0f:7a:c0:dc:9a:b8:
         4f:7a:8e:13:22:19:fd:72:b5:89:23:fe:5b:7f:9d:2c:1e:9f:
         f1:59:00:91:c8:06:0f:09:65:e9:ad:24:a3:67:24:2a:a8:8c:
         40:f1:f3:fc:c4:50:ec:30:d6:ff:80:2f:77:a0:05:24:11:16:
         e3:ed:3f:fe:7c:db:80:03:1c:bd:ab:87:36:9f:9e:3e:8c:85:
         9d:28:b7:28:a4:97:ea:14:f6:21:4f:08:d8:49:5b:19:9b:05:
         f6:23:56:8b:ec:93:54:ac:cd:0f:ea:50:6b:77:48:87:74:15:
         44:ed:43:44:58:13:a9:84:f3:54:1e:95:4a:d8:7b:31:05:51:
         74:71:4c:76:13:6a:df:e4:bc:89:f6:01:ca:25:02:f0:9c:18:
         a6:dc:38:85:28:b1:67:88:cc:9d:8d:23:a6:49:88:7b:c3:e0:
         a2:68:f1:94:48:e5:29:7b:0d:d5:95:d3:be:39:16:d7:2a:ee:
         88:10:d6:ba:9a:44:5d:90:4e:93:30:84:4f:92:f6:b6:1a:0e:
         16:84:ec:75:98:d3:86:a2:df:d2:6a:0d:00:49:47:11:04:37:
         cd:ca:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:18 2024 by rpki-client on console-fra.rpki-client.org