Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134352e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134352e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          vMvtCKv8xq9X4mRu6J5viw0X+VFeVOioklaFAaGrRhI=
Subject key identifier:   8D:61:64:1F:55:53:65:0A:2B:5E:80:D9:15:E8:42:5E:A6:6D:47:C8
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       722540A01BD14B06B423BF54A6A35B954D371CBE
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134352e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:02:56 +0000
ROA not before:           Tue 04 Feb 2025 17:57:56 +0000
ROA not after:            Tue 03 Feb 2026 18:02:56 +0000
asID:                     28024
IP address blocks:        200.85.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:25:40:a0:1b:d1:4b:06:b4:23:bf:54:a6:a3:5b:95:4d:37:1c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:57:56 2025 GMT
            Not After : Feb  3 18:02:56 2026 GMT
        Subject: CN=8D61641F5553650A2B5E80D915E8425EA66D47C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:90:7e:47:c7:4d:3a:ff:61:ee:28:6f:e2:
                    c0:ff:de:a4:44:15:58:ac:5f:2c:f6:f9:34:53:0d:
                    fb:ab:b4:6e:94:cc:f9:ae:d5:1f:37:39:4e:47:a6:
                    4d:e0:77:60:d0:e4:21:71:3f:ee:51:72:6d:af:77:
                    70:74:51:19:f6:a9:71:c9:87:70:cc:e6:54:88:49:
                    9c:e7:78:de:65:01:59:80:1c:ed:54:17:41:92:b2:
                    a8:6d:dd:83:5d:25:bd:b8:3f:32:3d:03:a1:52:2f:
                    e4:a8:77:86:0b:a4:aa:ff:d8:eb:70:4c:58:61:27:
                    bb:4d:12:6a:3d:51:e1:e3:c3:f4:d1:a0:e9:15:81:
                    c0:f6:5f:e7:e9:17:29:06:54:be:75:16:19:39:5f:
                    26:44:7f:c2:3b:19:5a:dc:f9:9b:0d:3f:af:10:b2:
                    a0:23:64:f4:65:36:9b:f5:b7:e5:fa:f5:53:70:14:
                    9b:f3:67:9c:18:da:08:df:38:a5:5a:74:c6:84:35:
                    f7:3b:e6:60:aa:ee:58:58:b5:2d:aa:c9:cb:53:1a:
                    1c:31:17:34:3d:39:bb:6c:e2:fd:ed:8a:61:18:0d:
                    5e:58:47:f2:59:63:1b:10:95:52:f8:d7:74:b5:2a:
                    1a:fe:93:36:b6:72:80:19:3d:ca:46:b1:e6:ba:49:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:64:1F:55:53:65:0A:2B:5E:80:D9:15:E8:42:5E:A6:6D:47:C8
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134352e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:c2:c6:66:ba:28:45:66:b2:97:23:34:64:40:ce:b3:85:
         96:23:28:9a:6a:c2:8b:79:63:32:60:6c:77:19:bd:83:88:5d:
         19:a1:62:08:9e:66:41:d0:29:52:5a:b7:b3:36:67:05:68:92:
         48:5a:be:a4:ca:0f:6a:5e:cc:84:32:1d:79:8b:74:db:34:c3:
         52:ca:31:2b:66:0c:be:55:0c:b2:87:03:22:2f:d6:af:52:f3:
         71:11:15:bd:06:81:cc:f6:01:ad:aa:da:2c:c6:f0:a3:72:0e:
         1d:8c:8d:ba:5f:59:5b:bb:c7:23:d4:08:e1:fd:77:33:91:ab:
         c9:b7:05:27:66:88:46:86:2d:6d:ec:c4:70:b2:8f:99:06:40:
         10:27:19:8d:16:4f:24:78:28:48:f7:87:1c:59:61:39:b5:da:
         9f:7a:fa:60:85:cf:c1:99:da:b2:1f:b3:b2:bb:10:65:7d:e4:
         b6:b0:dd:8b:4a:c3:22:66:44:76:3c:63:a4:e7:55:5e:28:f5:
         a8:48:30:95:3f:af:1a:b0:a8:24:93:ea:bb:68:52:ef:8c:d0:
         e1:1e:a4:67:ed:55:fe:c3:19:cb:55:af:2c:9b:e0:eb:f6:b0:
         3a:bc:b1:cf:21:88:db:c7:d6:66:45:e3:20:5f:f2:32:ec:89:
         97:35:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:45:26 2025 by rpki-client