Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134382e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134382e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          rk8Cej0nA6k2aJbIiy7HwC9wLb4Pq5UbJJ5+YfBYo70=
Subject key identifier:   05:7B:F3:72:62:A8:13:EC:FD:F0:91:0A:58:9E:8B:58:58:48:71:96
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       1F8E9A523EEDBA050CE8BDB83DD00A018C7F5D5A
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134382e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:15 +0000
ROA not before:           Tue 05 Mar 2024 17:51:15 +0000
ROA not after:            Tue 04 Mar 2025 17:56:15 +0000
asID:                     28024
IP address blocks:        200.85.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8e:9a:52:3e:ed:ba:05:0c:e8:bd:b8:3d:d0:0a:01:8c:7f:5d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:15 2024 GMT
            Not After : Mar  4 17:56:15 2025 GMT
        Subject: CN=057BF37262A813ECFDF0910A589E8B5858487196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:88:cc:d4:32:c3:f2:57:ee:07:93:56:9d:
                    ce:8a:6f:08:08:6c:a5:1e:b5:3c:56:36:c1:5c:8c:
                    3f:f9:7b:91:d0:62:4f:84:aa:2e:06:64:ef:ba:ed:
                    3c:fe:16:a6:bc:fc:07:2a:25:22:61:be:6d:12:49:
                    60:29:27:bb:0b:59:be:2f:68:0d:ac:30:52:80:22:
                    b6:1c:aa:8e:2e:5f:c1:31:81:26:16:b5:17:d5:ab:
                    19:02:fb:ba:5f:f9:34:20:cc:a2:4b:25:b1:72:cb:
                    e9:0f:24:d8:23:aa:dc:c5:bc:19:d9:6a:ce:b7:17:
                    ca:ea:7a:1c:f2:1e:e5:90:28:78:49:f7:1d:74:cf:
                    3d:51:a7:d0:b9:9d:9f:4a:6e:d5:1f:25:95:54:2d:
                    91:0d:9a:00:f7:7b:78:03:d8:63:50:c6:5d:f0:c3:
                    2f:1d:29:56:a1:38:e9:ba:22:0a:6b:94:80:54:de:
                    d4:05:b5:92:ce:99:9c:91:1c:89:65:4f:0a:78:bb:
                    5b:bb:7b:80:27:4e:8e:ef:09:0e:95:cf:b2:aa:dc:
                    0c:e2:43:e1:3e:f7:3b:f9:84:b6:63:12:30:1f:db:
                    3a:3f:7c:b2:86:19:1a:8c:09:bf:77:a4:20:63:5d:
                    76:07:87:f1:3a:47:d3:2a:86:c8:56:2c:ce:2f:72:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7B:F3:72:62:A8:13:EC:FD:F0:91:0A:58:9E:8B:58:58:48:71:96
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134382e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:1f:6d:e7:f6:91:94:d1:ee:ac:63:17:1f:e8:72:2b:bd:
         a1:79:b1:d0:5f:6e:38:6b:23:b6:e0:bb:ab:54:2d:9f:85:14:
         3f:96:0e:fd:da:7e:d8:b7:ef:7e:a1:c8:8e:6f:16:5c:e0:43:
         2a:61:ff:bd:7f:0e:f9:4e:7f:ee:ce:39:5c:a3:11:3a:54:9e:
         67:ed:df:67:dd:d8:ec:48:79:34:f7:ec:27:5c:6d:9f:7e:e6:
         28:84:79:33:b0:71:49:cc:2b:02:f4:96:64:7d:ed:8e:2f:a1:
         b4:eb:cc:1e:7b:2a:09:d5:7c:83:09:d0:7a:3a:ef:4d:06:b5:
         b0:9c:4d:d7:66:31:58:81:48:32:52:a7:eb:6c:ae:41:59:79:
         aa:3d:a1:75:74:6d:0d:07:f4:c9:68:76:de:df:e8:29:fb:d6:
         14:bd:72:99:11:c8:20:e9:fb:ea:3c:cf:74:c5:30:a0:a1:a6:
         10:ea:54:73:2f:05:70:f1:ee:bf:72:93:3b:9e:e7:fb:27:4f:
         92:c7:51:7f:20:d4:bb:d6:0a:a6:fb:02:81:22:e1:dc:4c:d7:
         98:c7:0d:3e:1f:04:9c:d6:1d:fe:27:4d:2d:29:5a:4b:e4:35:
         42:c9:1f:bd:a8:ba:3b:b5:3c:9f:83:52:76:6f:31:42:47:72:
         8f:23:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org