Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e302e302f31382d3138203d3e203238303234.roa
File:                     3136312e3133382e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          z13s2pD/HTJZA/iEZENoAjMq3rHeR5bgEjCqWoCUq0Q=
Subject key identifier:   E4:B2:92:BF:DE:AD:7E:88:F6:59:01:48:D6:DB:00:78:32:57:F7:1A
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       095A88077DA0BD273DBFC8B5275AC45AF6F7657E
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:02 +0000
ROA not before:           Tue 04 Feb 2025 17:58:02 +0000
ROA not after:            Tue 03 Feb 2026 18:03:02 +0000
asID:                     28024
IP address blocks:        161.138.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5a:88:07:7d:a0:bd:27:3d:bf:c8:b5:27:5a:c4:5a:f6:f7:65:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:02 2025 GMT
            Not After : Feb  3 18:03:02 2026 GMT
        Subject: CN=E4B292BFDEAD7E88F6590148D6DB00783257F71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:c8:4f:b1:34:b2:3a:aa:19:24:4d:e7:f7:
                    53:ac:ac:0d:49:e1:ae:29:2f:39:5b:f2:9b:3c:a9:
                    99:2c:55:4e:c1:57:f9:e1:f2:10:3e:b7:20:f1:24:
                    55:59:04:88:aa:af:2a:0c:63:1d:ef:ea:58:7e:8f:
                    30:3b:aa:1d:ac:1b:d9:38:af:98:78:e5:88:45:8f:
                    47:65:67:e2:25:20:02:40:4a:ab:bc:ef:75:37:cd:
                    9e:eb:54:50:23:ae:75:5e:9a:4d:90:51:3f:34:7b:
                    4a:70:02:94:48:17:09:c7:11:e4:27:ca:84:f5:86:
                    cb:d2:9c:80:3a:31:11:94:eb:d8:5c:64:ce:9a:e9:
                    29:c2:6e:82:bf:5a:c6:22:dd:f8:08:7e:d7:5d:58:
                    69:0d:40:e5:39:bd:86:18:5b:73:8e:22:ab:00:f4:
                    e7:44:16:5d:c2:67:ad:fd:a9:1b:9e:b8:c0:63:8d:
                    4c:19:59:83:53:67:ba:fa:36:02:d0:36:27:d7:e7:
                    52:f6:d6:bd:c1:32:63:1a:8f:be:5f:1f:95:8e:37:
                    1f:f1:2d:0b:8f:f6:37:61:92:cf:c5:6e:2f:50:fd:
                    0a:18:3f:a3:82:94:8f:2f:c1:e3:83:59:f1:cc:ba:
                    72:4d:04:84:3b:14:de:95:d2:fd:ab:89:9e:04:be:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B2:92:BF:DE:AD:7E:88:F6:59:01:48:D6:DB:00:78:32:57:F7:1A
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.138.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:df:cb:c8:7c:dc:c9:71:f9:74:01:27:ac:4d:f4:0f:5f:a4:
         58:f3:02:b2:20:3b:f1:8f:f5:2f:b3:51:aa:c7:80:e7:56:42:
         c6:ee:7d:52:6c:77:40:80:c1:32:46:00:b3:c8:4e:c4:8c:39:
         ff:5f:3a:c6:69:0a:c7:c0:de:db:c4:01:78:01:aa:1c:f5:15:
         0d:28:24:77:c1:4e:85:b3:5d:f1:76:c1:56:bc:c8:a9:2a:05:
         0a:4b:fc:a5:cc:a4:ed:bd:ee:36:ef:49:80:6c:86:f1:ef:12:
         e6:c1:62:c3:58:1c:c9:56:2d:7e:15:08:52:ab:61:e1:74:61:
         26:14:ff:21:18:a5:1d:63:e0:9f:b6:76:6f:2d:5d:01:80:3b:
         88:05:07:9d:b8:f7:a6:c6:97:7b:20:8d:c4:df:d5:ce:ee:13:
         56:53:d6:81:d3:ca:6d:46:a7:d0:ea:82:59:07:79:82:ba:3f:
         71:7e:33:09:de:94:ce:53:18:a5:e3:f4:3d:95:86:63:af:80:
         84:e2:83:3f:8a:77:d7:6f:0a:84:e0:ac:f2:aa:f4:c8:37:b0:
         aa:81:c7:cf:f0:8b:00:74:69:1b:5e:ff:02:4f:87:af:d9:ab:
         6c:6e:55:dc:d9:83:c2:3f:00:29:62:4a:17:1a:b2:b5:91:a5:
         5d:e1:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:42:13 2025 by rpki-client