Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134392e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3134392e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          QqIiYKTu8rJpLdKE4PT/DHQTN3mupzuEhbtbOgGu8ho=
Subject key identifier:   26:EE:10:81:51:39:79:0B:2D:08:1E:6A:01:FD:22:70:F0:62:66:0B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       18D8C6C564F000A0B15538B7AA1D40E4AC750DB7
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134392e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:02:59 +0000
ROA not before:           Tue 04 Feb 2025 17:57:59 +0000
ROA not after:            Tue 03 Feb 2026 18:02:59 +0000
asID:                     28024
IP address blocks:        200.85.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:c6:c5:64:f0:00:a0:b1:55:38:b7:aa:1d:40:e4:ac:75:0d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:57:59 2025 GMT
            Not After : Feb  3 18:02:59 2026 GMT
        Subject: CN=26EE10815139790B2D081E6A01FD2270F062660B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:c5:34:74:22:47:8d:81:d7:50:8c:5c:f2:
                    43:ce:f2:e0:37:12:a5:4d:69:8f:47:c6:e2:ad:80:
                    4a:83:22:cc:6d:3a:4f:70:42:ed:2a:87:aa:c5:b0:
                    90:7f:d7:6f:e5:16:d2:e5:40:b3:68:48:8d:42:03:
                    ab:45:bd:3c:e3:1d:06:2b:1d:09:23:b6:32:80:12:
                    cf:40:74:2c:1a:d9:c1:23:6e:5e:d2:f7:b1:74:40:
                    04:a5:a6:49:a3:49:e8:4b:a0:8a:1c:e9:82:10:bd:
                    bf:36:6a:60:ed:f2:70:45:78:71:59:58:f8:6c:89:
                    40:da:c8:0f:91:c8:c2:71:cf:53:de:6a:30:43:d8:
                    ed:c6:05:e4:35:c6:ca:a4:4f:a6:0d:db:5a:e6:16:
                    8f:02:19:74:fd:8b:49:b2:9a:7d:71:af:71:18:bc:
                    c6:ed:db:00:da:be:1e:80:ec:ad:1e:92:cd:58:04:
                    cc:b0:eb:54:9e:34:6a:5e:8d:46:ac:4f:84:98:05:
                    84:68:4f:9f:0a:ee:27:20:86:41:5b:1f:79:bb:b6:
                    84:4f:2a:da:90:af:3a:60:0d:bf:91:94:3c:22:b1:
                    79:2d:b4:4c:84:c3:0e:eb:61:00:8c:54:11:ca:98:
                    8e:1b:1c:15:75:1a:3c:72:31:f3:b9:7a:af:71:2c:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:10:81:51:39:79:0B:2D:08:1E:6A:01:FD:22:70:F0:62:66:0B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3134392e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:45:cb:26:4f:20:ec:7a:be:0b:7b:5e:08:e9:47:35:54:
         45:88:2c:92:c8:4d:f6:c8:e3:b7:3f:59:59:e2:5b:8b:9b:d4:
         fe:eb:16:52:42:f3:b3:67:f8:e1:22:38:a0:b7:ba:79:2c:e7:
         cb:bb:60:55:ef:ca:2a:d5:8e:95:26:d2:9f:e0:5d:a5:3f:93:
         f8:ff:36:89:89:f8:77:9b:66:3e:25:da:a9:72:81:4f:d5:5c:
         95:c4:b6:ff:88:5d:a4:61:af:fc:17:c0:41:44:e6:8e:94:1e:
         32:2b:6d:d5:dd:0f:4f:78:87:70:8a:8a:9c:1f:85:30:ad:39:
         65:bf:a9:51:5b:55:7c:59:fe:7b:51:03:12:70:de:e7:1f:66:
         83:6c:67:f3:eb:03:30:0b:62:43:b0:87:16:29:83:a5:79:29:
         ff:ec:45:18:6d:7e:80:d2:6e:20:32:ee:34:08:91:86:2a:bf:
         56:a8:f9:1a:3b:5b:44:ba:d2:56:41:d8:58:d8:d9:08:6c:d2:
         27:90:fc:fd:22:c3:2e:5d:f9:73:ab:7c:fa:67:c1:22:9f:c8:
         d2:de:c7:56:9e:5f:e8:6c:7f:3d:34:4c:40:71:82:dd:da:b6:
         7d:cd:48:e1:3a:2d:fd:74:78:84:d9:39:ef:24:d8:bc:01:0c:
         5a:08:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:45:26 2025 by rpki-client