Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa
File:                     3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa (raw, json)
Hash identifier:          VA9P+mk6GgI1hYoJkYmVpCtxtw2bbcCc83k8ZyNl8+k=
Subject key identifier:   56:17:51:64:7C:B3:3E:5A:9E:FF:A9:60:4B:44:3E:89:39:80:C3:5B
Certificate issuer:       /CN=24CF67069E9BB589E3A34EDAE398737367CE3473
Certificate serial:       726A415D1D3863817E9151D73ADB60BFDB358AFE
Authority key identifier: 24:CF:67:06:9E:9B:B5:89:E3:A3:4E:DA:E3:98:73:73:67:CE:34:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa
Signing time:             Tue 05 Mar 2024 17:48:37 +0000
ROA not before:           Tue 05 Mar 2024 17:43:37 +0000
ROA not after:            Tue 04 Mar 2025 17:48:37 +0000
asID:                     267685
IP address blocks:        160.20.225.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6a:41:5d:1d:38:63:81:7e:91:51:d7:3a:db:60:bf:db:35:8a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CF67069E9BB589E3A34EDAE398737367CE3473
        Validity
            Not Before: Mar  5 17:43:37 2024 GMT
            Not After : Mar  4 17:48:37 2025 GMT
        Subject: CN=561751647CB33E5A9EFFA9604B443E893980C35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:e2:51:4e:06:74:52:af:81:2c:b4:9a:c0:
                    e3:67:da:9e:15:b1:15:02:92:f1:6f:ef:59:d3:7a:
                    48:5c:b4:fa:2c:7f:2b:a4:5b:57:7e:57:c8:b8:ab:
                    92:a3:60:38:a4:63:14:39:a1:67:08:b5:42:f4:47:
                    45:3b:37:64:03:30:b2:d9:80:74:db:55:35:c3:31:
                    02:52:a5:75:56:31:c7:65:3e:e5:8f:3f:9b:cd:6f:
                    9c:40:88:85:f6:af:df:6d:4e:51:d9:a3:c3:b4:7b:
                    f6:28:e3:1f:6d:68:b9:fe:24:e9:44:c1:52:7c:58:
                    4f:52:6f:87:d9:6a:5c:0a:2b:76:19:5c:3a:8e:3e:
                    a2:d4:11:09:34:b4:29:39:bc:6f:4f:3a:5c:13:ad:
                    92:11:f1:ea:6e:06:c2:ac:17:ca:29:d9:73:bf:f4:
                    34:11:83:28:2d:52:85:28:d1:cb:5b:50:70:82:2f:
                    64:f6:9b:a8:33:e0:ad:c1:3f:84:c8:cf:9b:95:99:
                    67:f1:71:e0:3d:f6:09:b3:a3:1f:0e:77:4c:45:d0:
                    ea:94:80:8b:76:cc:52:36:9e:d7:47:1f:5e:03:49:
                    b3:b4:fc:79:f7:fa:7d:b0:a9:cc:7b:e4:e9:4e:87:
                    11:a6:80:f2:03:4b:c9:f5:24:c0:03:33:f1:f6:44:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:17:51:64:7C:B3:3E:5A:9E:FF:A9:60:4B:44:3E:89:39:80:C3:5B
            X509v3 Authority Key Identifier:
                keyid:24:CF:67:06:9E:9B:B5:89:E3:A3:4E:DA:E3:98:73:73:67:CE:34:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/3136302e32302e3232352e302f32342d3236203d3e20323637363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:08:42:8b:04:58:97:8e:7e:6d:d0:1e:5d:97:d1:54:ce:
         28:96:3b:30:bb:ff:ca:bc:b8:7f:c8:22:94:9a:0e:73:ce:17:
         98:8f:2f:b1:b9:fe:7e:40:92:ff:38:41:f4:33:2a:c3:8f:7f:
         a4:e0:d9:51:9d:ec:de:05:2b:9b:f6:b1:84:7a:74:d7:12:04:
         1b:27:e4:70:e5:dd:d3:21:92:af:53:f8:de:3f:49:4c:ad:93:
         4b:ea:55:55:91:7f:13:e2:ae:7a:57:55:b9:9f:65:83:32:c3:
         61:c4:94:39:2c:7b:c2:be:14:cc:12:f3:9c:a9:17:94:18:e2:
         88:e6:d9:66:5d:51:f4:cd:12:72:aa:55:99:59:de:c8:4a:08:
         0e:af:cf:8e:03:9b:55:c6:28:f5:a9:8b:95:47:af:28:35:09:
         88:00:01:7e:d5:79:22:02:a2:07:f5:54:b1:34:8b:88:7f:c9:
         ef:51:b7:b6:cb:2f:12:c7:d4:37:4b:3f:06:c3:c3:5a:7d:81:
         04:6d:22:d1:f3:5d:52:f5:6a:73:6a:76:1d:f8:72:74:67:2d:
         95:e1:42:22:e5:35:4a:13:4d:6a:22:8b:62:b9:3e:12:bd:1e:
         7f:90:ed:af:e4:d9:e8:aa:17:09:72:ff:41:3f:f6:af:0b:45:
         25:18:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:45:27 2024 by rpki-client on console-ams.rpki-client.org