Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134342e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          D41FOnJODUSqt6E6VdqI7SO8AD57PWUu9MthfcRAYUY=
Subject key identifier:   0C:9A:3E:9B:39:74:B6:B4:34:35:C3:1E:0C:71:CE:BE:A1:E0:5F:99
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       7A34E4569FE4490953D9CF9E249A356C6C43BFE5
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:18 +0000
ROA not before:           Tue 05 Mar 2024 17:51:18 +0000
ROA not after:            Tue 04 Mar 2025 17:56:18 +0000
asID:                     28024
IP address blocks:        200.85.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:34:e4:56:9f:e4:49:09:53:d9:cf:9e:24:9a:35:6c:6c:43:bf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:18 2024 GMT
            Not After : Mar  4 17:56:18 2025 GMT
        Subject: CN=0C9A3E9B3974B6B43435C31E0C71CEBEA1E05F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:f3:b4:c2:87:de:ed:61:9c:7b:b1:aa:e1:
                    a7:67:02:ef:37:e9:55:9d:3d:90:c9:64:80:d5:dd:
                    b5:26:c5:01:24:16:0e:70:29:10:a7:04:3b:e3:9b:
                    36:54:74:eb:3d:5f:6f:87:02:3f:95:27:48:ff:db:
                    ba:40:25:d9:5f:18:f5:8d:32:e6:0d:dd:b5:cf:7a:
                    e9:09:a3:02:6d:a0:a7:5f:84:54:59:8f:9f:7a:26:
                    92:dd:dd:80:3d:0a:2f:55:09:f0:df:13:5b:7b:1b:
                    e9:96:67:df:2d:e9:f2:a5:dd:5a:e8:fe:a2:2b:21:
                    ef:56:ae:c3:de:cc:5c:4d:2d:61:82:2a:31:ec:e4:
                    e8:af:1f:82:d7:29:f9:c6:40:66:a8:0d:70:13:bc:
                    53:5e:4c:1f:37:55:c7:6e:02:3a:28:ed:2f:fa:a1:
                    ce:be:3e:f6:d1:e7:84:1d:2b:a3:d8:92:58:e9:15:
                    19:f6:ca:f9:5f:31:99:d0:ed:83:04:f2:0f:bb:16:
                    92:af:a5:c4:11:df:01:b1:1b:dd:af:35:52:20:44:
                    76:85:c4:8f:a2:e2:79:7e:14:6b:71:d4:67:7a:69:
                    0b:7a:38:e8:a8:a6:fb:76:0a:0e:b6:93:25:b4:f5:
                    16:2a:e5:f1:c4:dc:8d:ea:58:06:0d:f3:43:5a:cc:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:3E:9B:39:74:B6:B4:34:35:C3:1E:0C:71:CE:BE:A1:E0:5F:99
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134342e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:2c:54:57:ca:29:1d:19:93:5e:76:d0:a3:9d:86:73:01:
         1a:c0:51:e8:06:3c:5e:a6:a9:87:63:34:ce:43:7d:ae:90:30:
         8c:ec:78:3d:91:a5:a6:2e:c3:ea:1f:64:c9:1d:91:b2:ce:27:
         ac:da:93:43:73:70:92:0b:f9:2a:45:5f:ad:71:de:de:2f:02:
         9e:82:01:58:d2:d3:5b:24:47:a8:e0:31:88:ed:2c:a8:1a:13:
         86:a2:fb:98:bd:a3:85:96:50:50:04:8b:2b:29:a0:af:ea:2c:
         5f:c1:86:93:27:a1:db:c0:3f:c4:93:7b:da:3e:e2:34:b5:e7:
         bf:fc:8c:4c:94:dc:db:4c:56:8b:ef:b5:a2:d4:bf:06:a4:24:
         8e:1c:50:90:0b:9f:6b:12:f8:89:0f:16:d3:f7:2e:ad:37:c0:
         7d:9b:b5:b1:02:69:43:30:19:b5:dd:de:88:c9:91:ff:42:f2:
         f5:f4:d5:4e:5f:96:52:44:18:57:31:5c:57:1f:eb:49:40:11:
         da:48:f8:7f:d0:99:44:12:72:d5:ae:50:ec:47:24:4c:ad:80:
         a8:bb:27:95:c0:ba:b2:b5:74:a8:8e:fe:4a:af:b3:bb:52:d3:
         24:73:2d:69:12:9a:8d:da:b2:04:df:2c:0e:50:1d:ca:58:eb:
         61:d3:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org