Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3136312e32322e35302e302f32332d3233203d3e203237363630.roa
File:                     3136312e32322e35302e302f32332d3233203d3e203237363630.roa (raw, json)
Hash identifier:          /Ryy2SGR3lkdc8rDrdLahu2gjc639iHT50VRpZ3ec/k=
Subject key identifier:   F1:BF:14:BD:B8:70:52:99:62:AA:84:C9:1B:48:4C:A8:71:8E:C4:45
Certificate issuer:       /CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
Certificate serial:       2EF28907383F903377FA17EB0C5E8B339E9C2468
Authority key identifier: 40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3136312e32322e35302e302f32332d3233203d3e203237363630.roa
Signing time:             Tue 23 Jul 2024 15:50:01 +0000
ROA not before:           Tue 23 Jul 2024 15:45:01 +0000
ROA not after:            Tue 22 Jul 2025 15:50:01 +0000
asID:                     27660
IP address blocks:        161.22.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:89:07:38:3f:90:33:77:fa:17:eb:0c:5e:8b:33:9e:9c:24:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4052A5C92CFA7072166954B78BEBA6DBD1517D9B
        Validity
            Not Before: Jul 23 15:45:01 2024 GMT
            Not After : Jul 22 15:50:01 2025 GMT
        Subject: CN=F1BF14BDB870529962AA84C91B484CA8718EC445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:5e:30:e5:75:52:5b:d7:8a:8a:ec:5f:72:
                    06:d8:66:1b:47:1e:f0:3c:36:0b:96:83:c3:66:71:
                    b2:3c:7c:32:94:ff:b4:a8:df:8d:58:ef:16:dd:fb:
                    03:a3:9d:da:e6:fe:a6:5b:04:62:7c:a4:49:8c:55:
                    46:ed:a3:d4:f1:eb:e3:fa:f2:ce:bd:aa:c8:06:d4:
                    b2:8d:5a:fb:03:f4:53:3c:c5:53:ce:26:72:00:39:
                    cc:ec:e7:96:92:ba:67:b4:4d:47:5a:02:1d:22:11:
                    d3:be:c5:3c:ed:8c:13:ed:72:38:e6:a2:79:98:8b:
                    b9:e4:63:36:b2:54:37:02:37:43:11:c7:76:15:f9:
                    ad:8f:e6:cb:34:4e:25:dd:45:51:bc:3f:f7:15:e8:
                    8e:ab:9b:38:22:8b:cb:05:38:14:a7:d3:93:e8:bf:
                    88:28:16:f8:98:f3:aa:8d:c2:fc:19:a6:e5:c9:6b:
                    61:06:3b:8b:1b:65:f4:ce:ee:07:4d:6e:62:f4:aa:
                    66:8c:85:e6:4a:07:5a:96:e2:4e:5b:d4:66:42:bd:
                    94:76:45:e1:7c:c9:f7:31:26:af:1f:8e:22:36:b1:
                    f8:50:7f:31:8f:2f:a9:a8:96:11:ac:16:fb:f8:cd:
                    f8:11:ea:58:1a:83:3a:ca:f6:be:7b:d2:ce:d5:e6:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BF:14:BD:B8:70:52:99:62:AA:84:C9:1B:48:4C:A8:71:8E:C4:45
            X509v3 Authority Key Identifier:
                keyid:40:52:A5:C9:2C:FA:70:72:16:69:54:B7:8B:EB:A6:DB:D1:51:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4052A5C92CFA7072166954B78BEBA6DBD1517D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67251DDBF206F3078E36459E6E56B30893DF94A8FBF9C05E0F2D0E47457FCD38/0/3136312e32322e35302e302f32332d3233203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:13:a2:9c:ac:3f:a6:6f:7e:ef:eb:d5:53:9e:7d:bd:5f:
         ab:ef:52:cd:c5:01:c2:93:ec:22:ba:35:9c:a8:2d:7d:db:e3:
         7e:40:38:8b:a9:b0:1e:b3:dc:31:9e:fd:cc:54:45:e3:f0:33:
         fe:bf:03:ec:b0:57:66:0d:2e:7b:75:ce:ba:05:0a:5e:31:e4:
         a5:35:76:6a:1e:eb:90:2a:b4:9e:04:01:dd:9f:1e:e5:18:3c:
         ad:ab:ee:49:aa:23:3b:33:bf:6d:42:52:35:7d:93:42:49:a4:
         48:9b:e1:15:fc:84:b6:60:21:2b:21:a2:e6:ee:29:ae:11:a8:
         bf:2e:45:f6:41:c7:24:53:ed:ee:f2:ae:94:24:f9:42:71:5d:
         ec:64:fe:2f:95:72:5e:25:dc:7c:f7:87:c8:54:11:d8:f4:2b:
         dd:9c:ba:d5:5c:cc:4a:99:04:17:82:49:6d:0b:a3:64:71:d2:
         fd:6d:50:f1:94:c5:df:9f:04:60:34:ab:5c:6c:ca:50:3e:d7:
         b6:76:9e:ae:f2:3d:a3:a8:36:04:01:1b:05:b2:e6:39:21:d7:
         d4:f9:e4:2b:e7:b9:f4:58:b3:fe:95:04:83:81:cb:b6:e7:60:
         38:d3:a5:72:4c:69:65:a4:98:43:49:b5:42:22:c3:c7:26:4a:
         07:4d:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org