Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3135302e302f32342d3234203d3e203238303234.roa
File:                     3230302e38352e3135302e302f32342d3234203d3e203238303234.roa (raw, json)
Hash identifier:          9n0vJOkRUA5anJTEDm78kozJZygBZNnk0JsGcJ31nMI=
Subject key identifier:   EE:C7:4D:87:E9:66:04:E5:FC:50:E6:C5:52:D5:A1:EA:91:BE:14:2D
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       2363FF8257BB4BAF1C0CAE4FC7417F49B3852755
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3135302e302f32342d3234203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     28024
IP address blocks:        200.85.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:63:ff:82:57:bb:4b:af:1c:0c:ae:4f:c7:41:7f:49:b3:85:27:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=EEC74D87E96604E5FC50E6C552D5A1EA91BE142D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:bf:89:81:58:74:6c:95:2a:c6:3a:3e:f4:
                    44:54:83:b7:51:aa:a0:28:31:58:cc:d8:50:cc:d8:
                    5f:22:64:dd:6c:ea:a2:bf:61:34:13:7a:aa:78:86:
                    e3:4b:87:06:b5:8e:72:5b:99:29:be:88:d5:3d:ae:
                    e7:23:0c:0b:72:a0:81:30:f0:82:d7:95:50:39:43:
                    0a:03:fc:d7:a1:a8:01:e1:9c:94:7e:94:ee:a3:31:
                    50:41:b3:84:1b:ca:42:d5:78:63:33:08:37:02:19:
                    dc:bc:03:d3:4b:c6:b1:ea:88:06:71:9c:33:de:9d:
                    f4:4c:f7:02:81:a7:6d:fb:8e:ad:e8:21:91:6c:92:
                    bc:8c:d0:a6:57:57:f7:e8:90:5d:a6:a7:73:84:6b:
                    b6:60:7b:ba:eb:58:0e:ff:5d:e5:1a:3c:f4:fd:f9:
                    74:67:51:87:06:01:18:c8:9b:0d:53:de:15:a2:7b:
                    be:89:5f:c8:a4:b0:45:ef:91:86:56:ff:28:60:e5:
                    e5:c0:e7:61:71:d4:e3:16:0f:82:5a:3a:ef:23:7f:
                    38:48:e0:b6:e9:f6:a3:f1:6c:99:87:dc:63:6f:c5:
                    bc:5b:a3:8f:87:0d:9d:6a:99:d8:c9:f5:8b:98:81:
                    57:93:91:25:cb:79:11:05:ff:49:a5:c0:ed:77:5b:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:4D:87:E9:66:04:E5:FC:50:E6:C5:52:D5:A1:EA:91:BE:14:2D
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3230302e38352e3135302e302f32342d3234203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:cc:68:7e:22:c6:de:6f:54:25:47:43:72:97:a9:ae:ed:
         c3:15:f5:56:47:7f:c7:c0:dd:06:41:2b:b9:e3:59:a5:fe:a8:
         ea:0f:ce:d1:26:a4:d7:70:64:0b:5d:17:75:11:e7:57:b8:cd:
         4f:31:70:1b:2a:5c:bc:00:f5:59:bf:75:00:23:d4:6e:ed:11:
         41:44:d9:85:29:75:3a:d0:76:b4:1a:58:19:4d:5d:df:ad:2f:
         b5:7a:4e:12:dd:27:ba:1d:26:2b:4f:3d:69:a8:a2:c8:1f:64:
         dd:db:9f:55:83:c2:86:9b:7a:49:98:c3:a1:5b:f2:18:6f:fa:
         e2:31:27:71:e6:67:56:fa:69:82:f5:0f:5b:4f:2f:53:af:a8:
         c4:72:cc:9a:9e:62:ee:f7:a6:73:64:22:99:e6:b2:f5:b4:be:
         0d:c5:bf:41:e2:8c:06:d3:6a:8d:01:29:9f:9c:e1:0a:1f:ae:
         6f:bb:a0:84:ef:8c:14:86:42:42:45:2e:f9:b4:0a:eb:31:22:
         46:e5:e9:95:43:08:3b:8b:a0:65:73:91:f6:c4:b0:13:df:c8:
         53:1e:42:ed:1f:97:ef:9e:ac:d2:69:27:7a:b7:14:f5:71:04:
         37:ef:8a:25:1a:9c:e2:60:25:b2:93:1a:6b:0d:f6:1a:76:e5:
         86:55:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org