Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e203130363937.roa
File:                     3136302e3233382e3230342e302f32322d3234203d3e203130363937.roa (raw, json)
Hash identifier:          rumT6S0mzXhdVCTHOrDPnb3AZS5Cpl4qPk6IJ94/K+Q=
Subject key identifier:   5D:B3:87:9F:76:E5:29:61:27:02:63:7D:E8:FD:68:10:C5:3F:9A:A9
Certificate issuer:       /CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
Certificate serial:       34F742B2F5795EC1E88B8F483304D92ECDE41501
Authority key identifier: 66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e203130363937.roa
Signing time:             Tue 05 Mar 2024 18:08:37 +0000
ROA not before:           Tue 05 Mar 2024 18:03:37 +0000
ROA not after:            Tue 04 Mar 2025 18:08:37 +0000
asID:                     10697
IP address blocks:        160.238.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:42:b2:f5:79:5e:c1:e8:8b:8f:48:33:04:d9:2e:cd:e4:15:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
        Validity
            Not Before: Mar  5 18:03:37 2024 GMT
            Not After : Mar  4 18:08:37 2025 GMT
        Subject: CN=5DB3879F76E529612702637DE8FD6810C53F9AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:91:76:f4:9e:f3:24:30:69:6d:3e:4b:00:a6:
                    54:02:6b:8b:b1:01:d3:71:74:ac:d6:34:80:c8:56:
                    e1:9a:ea:56:b7:10:98:46:c8:46:86:bc:54:18:a2:
                    40:15:93:97:66:63:96:5b:0d:4b:9d:b7:00:2e:c3:
                    9c:a9:2c:3e:75:54:10:c6:53:88:cf:f0:05:93:5f:
                    6b:a0:db:e2:8a:6f:47:c0:ca:ac:99:22:3f:33:c8:
                    d3:95:5e:57:8a:ff:9a:16:26:bd:fd:2c:f1:ae:3e:
                    ab:dd:69:e4:62:96:24:32:0a:02:2f:06:0a:12:58:
                    8c:96:8a:04:72:aa:74:33:6a:8c:b4:a4:25:ee:55:
                    91:2f:49:39:7a:59:4a:50:2c:d5:e3:ef:db:85:dc:
                    1a:43:66:66:53:41:bf:4a:dc:a3:c8:bb:a1:dd:20:
                    4d:42:8e:55:3a:8b:75:6d:3b:3c:e3:9e:40:45:24:
                    77:5c:41:7d:32:fa:33:72:c7:98:3e:4d:93:76:16:
                    3d:28:ea:82:91:06:5f:6b:da:78:b4:de:f8:f5:c5:
                    b3:e7:67:14:5b:3a:41:59:49:46:73:76:cf:b2:38:
                    05:c1:0b:95:b8:cc:18:2f:65:bf:ab:e5:58:08:ed:
                    28:bd:1b:9d:3e:8b:4f:16:ce:1e:b0:0c:a0:ec:44:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B3:87:9F:76:E5:29:61:27:02:63:7D:E8:FD:68:10:C5:3F:9A:A9
            X509v3 Authority Key Identifier:
                keyid:66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:45:cf:53:eb:ce:13:47:19:ab:97:b8:bf:7b:19:f8:10:e9:
         03:a0:94:ba:84:32:7a:c6:e8:84:9e:ea:c3:f7:d1:b2:fa:59:
         01:5d:24:28:9a:62:f7:25:e5:2b:74:64:fe:ee:9d:45:6f:6f:
         1a:4a:6e:b6:0c:d7:9a:a2:a7:4f:a0:dc:d1:68:9e:2b:fd:6c:
         d2:df:29:8f:cb:8b:39:2d:a5:0a:2a:db:1c:2e:3f:01:d3:27:
         f2:9f:c2:fe:d8:af:56:40:b5:7e:7c:8a:00:1e:42:0e:d2:31:
         68:9e:98:5a:a8:ce:6b:65:bf:22:df:74:e1:c7:58:bb:6c:91:
         81:56:87:e4:cc:4d:b3:85:b8:f8:de:c3:b0:5e:40:9b:37:b0:
         d7:34:eb:b9:f2:b5:b3:bc:21:0d:1e:af:eb:b0:cd:d9:eb:9c:
         d0:07:69:62:32:b1:ec:fe:3c:12:d2:29:74:75:30:3d:a1:a4:
         3d:dd:6e:67:86:87:85:7e:69:07:d4:28:f3:6e:f7:09:72:f0:
         ec:19:45:23:dd:4d:e7:9e:3e:d1:ae:d9:e4:3f:a5:56:97:54:
         64:57:cb:20:f3:b0:d0:b8:83:11:3b:18:02:67:25:71:b9:df:
         cc:d0:03:78:cc:9c:98:62:83:8f:94:46:51:d7:b1:e8:97:99:
         c1:1f:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:57:31 2024 by rpki-client on console-ams.rpki-client.org