Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134392e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134392e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          QXmtJCLeMhRH01o0uAYIaiyOn0mZLJ3qxHBlteNQWbs=
Subject key identifier:   1A:7B:6B:0B:AF:1D:6F:52:B6:98:02:E1:BF:56:7C:B5:AA:C3:F0:F8
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       34F7474BDBFC73235237D7CF7867AD86D620163E
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134392e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:12 +0000
ROA not before:           Tue 05 Mar 2024 17:51:12 +0000
ROA not after:            Tue 04 Mar 2025 17:56:12 +0000
asID:                     28024
IP address blocks:        200.85.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:47:4b:db:fc:73:23:52:37:d7:cf:78:67:ad:86:d6:20:16:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:12 2024 GMT
            Not After : Mar  4 17:56:12 2025 GMT
        Subject: CN=1A7B6B0BAF1D6F52B69802E1BF567CB5AAC3F0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:0e:93:51:f0:f5:8f:4a:f4:0e:ff:ec:e1:
                    f6:23:dd:fd:e3:7e:f3:ca:cb:45:f8:9d:de:9c:52:
                    37:80:43:d3:da:1f:8c:f7:5e:8e:1c:80:af:c2:f7:
                    97:1e:52:87:99:eb:ee:fb:03:46:61:21:d5:66:27:
                    b2:2a:f1:07:ab:d6:a3:c5:bf:fc:f5:f0:ed:a4:4b:
                    6e:a7:a4:71:78:8f:28:a9:8f:97:fe:23:4c:7b:65:
                    06:23:c9:ee:12:f7:f1:fd:40:9e:24:9f:76:95:08:
                    58:92:37:4d:0e:93:9e:3c:3d:43:bf:a6:2f:e7:1d:
                    1a:f0:09:fe:aa:50:c2:d8:91:62:01:09:0d:e4:50:
                    5c:60:a5:ca:fe:1f:e3:04:d5:99:b8:59:5b:ef:b8:
                    e8:fd:86:2c:a1:a2:c1:bd:e6:5e:d2:c5:e1:1c:10:
                    1c:7f:06:45:e0:39:72:59:cb:d7:4e:12:d9:49:2f:
                    6a:ba:79:3a:c0:0b:4c:96:2e:c8:60:a3:51:7b:61:
                    14:ef:f2:6b:aa:ca:fc:3f:5a:99:76:07:46:2c:26:
                    f7:65:13:ff:2e:40:6e:85:1a:da:bb:04:df:3a:ed:
                    aa:2b:47:03:6d:3d:1e:94:44:63:10:d5:98:bb:8b:
                    67:c4:e6:75:e4:e6:76:75:b1:43:ca:30:ad:a4:e1:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7B:6B:0B:AF:1D:6F:52:B6:98:02:E1:BF:56:7C:B5:AA:C3:F0:F8
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134392e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:9e:29:7f:fa:7d:19:3f:fb:e5:0d:29:e4:20:4d:b7:96:
         71:0c:04:f1:e4:31:2f:d3:76:52:d4:c7:82:54:0c:fb:c9:48:
         ee:51:73:02:0a:c6:4e:43:6e:26:1c:7a:23:5a:bb:fe:67:25:
         a9:04:49:c5:52:2c:ba:a5:78:3e:e2:03:19:e0:07:d7:e6:b2:
         86:9d:8c:f4:c1:50:35:8a:8d:b8:84:35:68:ce:06:e5:d8:c1:
         e5:99:17:dc:3a:7a:2b:f9:fa:1a:e0:be:31:26:4f:88:f2:3f:
         4d:13:73:41:74:94:bd:fe:21:a3:70:26:b0:55:1e:f9:3d:af:
         c3:75:f1:f5:76:86:1d:d3:73:8a:34:45:27:6f:72:50:25:4d:
         78:23:13:ce:13:4b:c1:be:99:5a:db:f9:a7:f9:b4:c8:1a:2d:
         f5:88:f8:c3:0b:e1:db:3d:d2:ea:3a:a7:fd:c0:a9:c7:97:b2:
         37:02:f9:36:c7:82:a0:cf:aa:3e:6d:36:7a:cc:8f:99:a9:3f:
         82:6b:d1:5f:ca:94:43:0a:db:4e:2d:55:c9:7c:44:d9:a6:18:
         d6:d6:9d:4d:0e:95:65:77:65:5a:f8:c6:c2:44:ce:ce:e2:5f:
         ca:a8:60:63:6e:a8:8e:ef:d7:37:cb:7e:67:a7:5e:3d:f5:8b:
         0c:69:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org