Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3136312e302e3131322e302f32312d3234203d3e20323633323232.roa
File:                     3136312e302e3131322e302f32312d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          ukf/aPk2kdH53lBCRIxImF5VSMfMa/ckJBf/JKtRAOY=
Subject key identifier:   C0:59:E7:8D:76:03:97:82:06:75:4C:6B:F8:CD:A5:D6:59:65:D4:F8
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       1AB9ADCDE1C1CF2B4A9202AA2E9970941E400042
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3136312e302e3131322e302f32312d3234203d3e20323633323232.roa
Signing time:             Tue 05 Mar 2024 18:18:19 +0000
ROA not before:           Tue 05 Mar 2024 18:13:19 +0000
ROA not after:            Tue 04 Mar 2025 18:18:19 +0000
asID:                     263222
IP address blocks:        161.0.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b9:ad:cd:e1:c1:cf:2b:4a:92:02:aa:2e:99:70:94:1e:40:00:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Mar  5 18:13:19 2024 GMT
            Not After : Mar  4 18:18:19 2025 GMT
        Subject: CN=C059E78D7603978206754C6BF8CDA5D65965D4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3d:38:73:fa:9f:ef:76:19:9d:c7:49:48:b2:
                    a5:c8:f7:bf:90:a0:ba:81:0a:cc:65:e8:48:71:4b:
                    57:83:26:d4:ef:32:bb:1e:31:28:9e:6d:3a:da:f1:
                    d3:eb:8d:79:50:ef:eb:b1:3e:8f:f8:e2:69:0c:60:
                    3a:cb:fe:f4:d6:45:5a:38:94:61:81:a1:22:94:96:
                    bb:87:e8:6b:1b:e8:6d:76:2d:60:ae:fc:d1:6f:13:
                    ae:51:24:97:85:be:d9:ca:7b:12:66:71:16:a6:22:
                    c3:7d:db:43:ae:67:56:a5:70:73:46:68:42:03:92:
                    08:2e:c3:94:b3:87:f6:1f:70:28:f6:ee:fb:d7:2f:
                    f2:57:01:87:1a:84:84:4f:3f:7a:20:7c:71:7d:f6:
                    eb:65:32:70:a3:76:b2:ae:f7:e2:56:55:86:ed:9a:
                    a0:60:6e:5a:b0:4a:c6:18:4e:ce:c4:cb:17:c1:fe:
                    c6:54:80:60:2b:12:47:12:e1:f5:96:28:93:94:c4:
                    cc:e4:23:cc:c2:15:43:11:a9:e4:bb:5f:a9:6c:b8:
                    38:c6:cd:eb:3c:ff:af:9a:17:b7:54:55:93:44:d6:
                    28:3d:9f:64:23:bb:a5:40:1e:23:a7:3f:f6:e9:b1:
                    e0:08:6c:1a:65:b3:e1:f1:82:92:3a:ad:9d:db:ca:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:E7:8D:76:03:97:82:06:75:4C:6B:F8:CD:A5:D6:59:65:D4:F8
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3136312e302e3131322e302f32312d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:d8:93:96:21:c7:05:4b:aa:eb:d5:fb:87:bb:e5:28:03:
         1d:98:77:ee:16:73:8a:25:5f:f8:55:47:e4:e7:2e:77:71:b9:
         bf:e2:97:3c:ec:d3:41:bb:5f:85:fb:a6:1c:a7:33:fb:5d:10:
         2d:80:27:d2:5b:17:3d:1f:b9:be:ca:ba:d8:94:54:02:f3:e0:
         f5:34:69:ee:21:6b:b4:6b:fe:81:a6:00:cf:72:26:b4:a5:68:
         29:9b:42:7e:40:c9:b2:4c:42:bd:3f:a0:48:5d:37:74:ee:cf:
         1a:91:26:ed:b1:98:80:0c:5d:e5:10:4d:14:49:7a:2f:4a:52:
         ab:68:ae:80:49:c6:df:30:c9:34:06:be:01:5e:48:49:b3:27:
         56:96:48:99:7f:c3:84:88:99:c5:43:55:dd:09:67:d2:28:43:
         eb:9b:57:83:2a:bd:96:97:43:ff:45:a0:26:2e:82:60:45:7c:
         97:a7:68:2e:a2:6b:d4:33:9e:91:e5:84:3b:eb:d9:49:2a:88:
         ab:32:6a:6e:db:ae:e6:74:f8:7f:aa:36:ac:7e:75:82:0b:a4:
         79:df:da:d8:b4:c8:80:e1:07:8c:c6:b2:e3:b6:a6:00:8d:e3:
         f9:10:4d:59:aa:75:39:d0:a1:e4:21:66:95:70:5f:59:2f:63:
         46:38:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org