Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134372e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134372e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          SBD9iAvL3gkChPvpzCOvqT5s5a5QXOaBCJ6FWKPQtQM=
Subject key identifier:   6B:04:A7:16:C6:6B:8A:1D:83:44:F1:A1:D7:20:BC:11:B0:9F:FE:92
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       706FEE066339B562BF79444EF9F06D9F6A11979B
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134372e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:16 +0000
ROA not before:           Tue 05 Mar 2024 17:51:16 +0000
ROA not after:            Tue 04 Mar 2025 17:56:16 +0000
asID:                     28024
IP address blocks:        200.85.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6f:ee:06:63:39:b5:62:bf:79:44:4e:f9:f0:6d:9f:6a:11:97:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:16 2024 GMT
            Not After : Mar  4 17:56:16 2025 GMT
        Subject: CN=6B04A716C66B8A1D8344F1A1D720BC11B09FFE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:cc:7f:63:d7:69:5e:8e:3e:46:db:0c:88:
                    91:32:e7:54:bb:d2:c8:c8:62:25:5a:6d:97:af:95:
                    49:39:f9:49:0e:cd:e2:5e:3d:46:c0:22:b7:a6:ac:
                    40:4e:96:20:6c:5f:7e:6f:2c:95:1c:94:6d:50:99:
                    e2:33:21:82:c6:76:70:2e:3a:7a:fe:e0:cd:1f:cf:
                    c2:75:46:ba:c4:55:a1:29:b5:b3:ec:d9:b6:cc:09:
                    b6:b0:e4:86:69:2f:00:14:77:7e:ec:d1:8a:04:42:
                    aa:6c:80:0c:84:6e:e8:c1:10:88:9a:2d:41:3c:18:
                    e8:b1:95:1f:99:23:9b:44:c7:46:9d:b0:c6:37:c6:
                    bc:cc:23:eb:3c:5a:c0:53:84:9a:be:a5:59:76:b8:
                    6b:dd:ba:1b:e2:b0:62:9b:ad:49:7b:8d:57:fa:13:
                    2f:99:0a:54:35:80:3b:f1:ff:ff:f6:5e:99:3a:14:
                    37:0b:ce:fb:69:cc:bc:7f:5d:5f:74:ea:0a:83:64:
                    bd:cc:5c:e2:cb:f9:9e:3e:b9:d4:56:6e:cf:26:f7:
                    22:47:1f:de:06:23:8f:ca:2b:e7:22:2e:75:93:26:
                    1a:30:06:51:5f:86:e8:b4:2c:c4:ff:17:d4:09:52:
                    3c:c4:48:79:c2:98:db:11:b1:37:2b:17:5f:d2:e7:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:A7:16:C6:6B:8A:1D:83:44:F1:A1:D7:20:BC:11:B0:9F:FE:92
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134372e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:ee:51:21:e3:6d:89:f5:77:43:30:a7:6e:36:2c:33:1c:
         02:d6:40:24:8a:9c:cf:f6:69:a2:fc:c4:a3:fb:ae:21:e1:08:
         d2:ce:73:3b:20:52:aa:58:ca:40:0a:a6:4a:bb:b1:af:4c:30:
         9a:80:e5:a0:07:5f:52:37:f8:8a:44:ef:e2:0d:ac:c1:51:1e:
         df:a3:45:3f:b0:d1:4b:92:82:59:4c:41:2e:02:95:17:1d:6a:
         1d:7e:d5:04:37:39:f8:af:06:b4:77:20:bc:6f:55:f6:6b:46:
         9b:e3:0d:86:bc:d3:f9:13:c3:30:05:be:8c:ed:07:ce:ab:43:
         4d:c8:71:7d:bc:1f:81:86:38:6e:62:aa:61:f5:4a:46:9a:8a:
         fa:84:ce:2d:30:8e:aa:da:0f:45:47:9d:e1:bd:c0:8e:53:f3:
         20:ac:f4:ea:02:c1:d1:6b:f3:29:6f:2c:44:16:5e:5e:f6:8b:
         67:da:25:df:78:e4:01:bf:6c:42:5e:7b:d0:ce:cc:26:d3:39:
         41:37:cd:f8:73:39:04:68:fa:61:71:e0:cd:a0:7e:98:6c:e9:
         d1:2c:7e:7f:2c:4c:86:cc:fb:86:e4:7c:7d:e6:a1:a9:f1:40:
         20:a9:a0:0a:cc:25:a5:30:14:96:e7:4d:4c:b7:55:42:10:e7:
         ab:0d:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org