Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/3136302e32302e38302e302f32322d3234203d3e20323635373230.roa
File:                     3136302e32302e38302e302f32322d3234203d3e20323635373230.roa (raw, json)
Hash identifier:          DLQQlYh0UGvlfOmQrrca5/QptqR1KTM1IRfrQc8nkc8=
Subject key identifier:   C1:CA:83:BA:2F:08:0A:50:47:55:14:16:D8:D4:70:8A:9C:46:6F:F7
Certificate issuer:       /CN=9070FF06BDE4B545864C04320928D147E137E683
Certificate serial:       0FFA27F9B8B611C726548F7DB8681500D36AE472
Authority key identifier: 90:70:FF:06:BD:E4:B5:45:86:4C:04:32:09:28:D1:47:E1:37:E6:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9070FF06BDE4B545864C04320928D147E137E683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/3136302e32302e38302e302f32322d3234203d3e20323635373230.roa
Signing time:             Tue 05 Mar 2024 18:17:42 +0000
ROA not before:           Tue 05 Mar 2024 18:12:42 +0000
ROA not after:            Tue 04 Mar 2025 18:17:42 +0000
asID:                     265720
IP address blocks:        160.20.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/9070FF06BDE4B545864C04320928D147E137E683.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/9070FF06BDE4B545864C04320928D147E137E683.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9070FF06BDE4B545864C04320928D147E137E683.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 07:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fa:27:f9:b8:b6:11:c7:26:54:8f:7d:b8:68:15:00:d3:6a:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9070FF06BDE4B545864C04320928D147E137E683
        Validity
            Not Before: Mar  5 18:12:42 2024 GMT
            Not After : Mar  4 18:17:42 2025 GMT
        Subject: CN=C1CA83BA2F080A5047551416D8D4708A9C466FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:f0:e5:f3:cc:30:2f:8a:d8:ad:01:5f:67:
                    0f:1e:31:b8:58:9e:71:7f:37:e6:d7:cb:65:f3:80:
                    ec:3b:03:08:06:4e:47:41:db:aa:d9:99:45:13:6b:
                    74:06:cc:21:ad:31:b3:44:0d:75:fa:6f:a5:ec:9c:
                    f4:a4:4d:71:3f:66:56:3e:54:78:cb:8c:82:69:8c:
                    00:c3:dc:66:b6:9e:4c:b1:db:a8:48:ec:62:ce:52:
                    58:b4:c5:f7:14:72:6c:9c:f8:92:62:fe:a1:22:da:
                    ba:f1:78:5b:31:d7:57:48:e4:e1:b8:aa:ae:4d:c3:
                    2e:6f:41:4c:97:c1:30:2c:20:51:a4:af:30:ba:6e:
                    02:8f:7c:23:54:3e:67:34:6f:41:5a:db:34:a5:d4:
                    61:2d:5c:18:f4:eb:ed:6e:de:21:0b:37:d4:da:dd:
                    03:4f:a9:97:85:1a:3b:61:bd:92:1b:b3:8e:0d:2f:
                    12:dc:4e:f8:fc:64:52:5b:a2:1c:22:97:49:a2:ec:
                    6f:40:72:fd:57:92:de:97:0a:19:be:5c:43:52:51:
                    32:e3:e0:57:bd:97:b1:16:c9:5f:25:0b:9b:e8:f3:
                    60:cd:9c:be:7e:b9:2e:a4:b4:54:c2:2d:66:99:98:
                    5e:9d:bd:4a:40:54:55:08:59:eb:4b:82:01:88:0e:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CA:83:BA:2F:08:0A:50:47:55:14:16:D8:D4:70:8A:9C:46:6F:F7
            X509v3 Authority Key Identifier:
                keyid:90:70:FF:06:BD:E4:B5:45:86:4C:04:32:09:28:D1:47:E1:37:E6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/9070FF06BDE4B545864C04320928D147E137E683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9070FF06BDE4B545864C04320928D147E137E683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/3136302e32302e38302e302f32322d3234203d3e20323635373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:61:ed:1f:91:03:98:72:1e:d8:cd:5e:a5:89:f0:80:80:
         84:89:ce:f7:2c:41:15:63:c5:bd:26:35:a4:a1:c0:ac:f8:be:
         cc:43:6d:46:a7:cf:72:36:f9:64:7b:c9:61:62:bb:05:e0:aa:
         6d:58:8d:17:f2:47:64:76:99:bc:d5:6e:d0:fc:64:71:bf:22:
         27:8b:da:f0:54:de:88:df:b0:8e:51:2d:69:25:ac:0b:6e:ca:
         0a:4a:57:56:65:73:bc:ab:fb:41:56:f6:34:dd:72:94:58:ac:
         71:05:33:97:eb:63:34:26:3a:73:e2:84:25:f0:b9:89:7f:9a:
         06:94:95:b9:63:5d:18:05:b3:25:81:a9:0b:05:7b:18:1e:8d:
         e5:01:dd:c7:c1:d4:57:31:8b:a1:63:2e:6d:17:e8:d5:fc:a3:
         c8:25:cc:6d:27:ab:cd:23:29:36:df:02:0d:b9:76:1c:8c:89:
         57:d6:53:b3:76:db:e7:87:c6:98:13:c1:42:01:1b:b7:9d:07:
         e3:17:f0:24:8c:89:b7:ed:93:4f:3c:50:ed:69:c7:8d:72:73:
         a9:2c:b5:53:50:3b:2a:d2:10:1d:7f:7b:d9:b8:ed:4f:68:54:
         e5:0f:d0:c8:9d:b7:2c:0c:29:ff:db:fc:bb:78:c4:b8:c6:40:
         c1:e3:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:54:36 2024 by rpki-client on console-ams.rpki-client.org