Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e302e302f31382d3138203d3e203238303234.roa
File:                     3136312e3133382e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          Rj6B4hjyx83p6DrOR7lcwK3Ka2MT98MJU/CX0twxoHo=
Subject key identifier:   E2:94:79:6A:9C:A7:8A:70:EC:2F:C2:60:11:D5:A7:9A:92:B0:28:F0
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       5177D42B6C9B05ADC2040E101D2376B89A554B5E
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:17 +0000
ROA not before:           Tue 05 Mar 2024 17:51:17 +0000
ROA not after:            Tue 04 Mar 2025 17:56:17 +0000
asID:                     28024
IP address blocks:        161.138.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:77:d4:2b:6c:9b:05:ad:c2:04:0e:10:1d:23:76:b8:9a:55:4b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:17 2024 GMT
            Not After : Mar  4 17:56:17 2025 GMT
        Subject: CN=E294796A9CA78A70EC2FC26011D5A79A92B028F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:3a:5c:b8:39:6f:16:42:ab:74:99:f1:1a:
                    75:82:9a:ce:5f:a1:02:c0:db:94:97:fb:2c:0b:3a:
                    52:ab:42:64:87:f7:c3:a5:98:ca:1b:cb:c1:bc:f0:
                    9b:1e:e8:f5:21:9a:bb:f4:d0:af:0b:d0:80:a4:89:
                    96:22:c9:11:61:fc:8b:32:c7:87:0d:e5:e8:c6:42:
                    88:ad:c1:73:de:98:7f:bf:1d:0e:39:b5:ff:29:af:
                    57:bc:ea:8a:b2:a3:77:ff:77:5d:25:bf:40:0f:c5:
                    88:b1:aa:74:bc:dc:9d:79:ab:f7:66:47:89:73:75:
                    c6:99:e9:06:35:f5:02:36:d0:27:a4:1c:4e:d0:13:
                    3e:97:18:62:aa:ad:ab:3e:18:0e:22:ad:3e:81:b2:
                    ac:ad:8c:0b:a2:49:db:e5:6a:0a:0d:3c:f4:ba:b5:
                    dd:40:c7:38:12:0d:e8:3f:69:a4:c2:96:ce:02:9d:
                    3d:ee:c6:a4:14:66:59:3c:d7:03:09:9a:27:2d:79:
                    7b:ff:45:4d:75:e6:06:a0:46:4e:04:37:3c:b3:f1:
                    08:e8:1b:2c:7f:5e:b0:9a:11:23:74:18:59:c1:10:
                    59:c8:2e:7e:2e:80:7b:74:70:da:4b:bc:ab:3c:71:
                    9b:dc:e3:94:81:8a:6c:b8:c0:d4:3a:a0:cc:1f:16:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:79:6A:9C:A7:8A:70:EC:2F:C2:60:11:D5:A7:9A:92:B0:28:F0
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.138.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:36:65:7b:6d:4b:ad:bd:ec:ee:2a:ee:55:bf:88:43:b4:
         ab:74:fe:66:5c:73:f9:b1:d5:9d:0c:20:55:8d:51:e4:ec:fd:
         fd:3c:fd:af:22:89:5b:14:2e:d5:a1:9b:18:d8:00:c3:34:8b:
         cb:70:12:2f:71:03:ab:41:e8:cb:e1:ca:65:91:df:e6:3f:a7:
         12:d7:f9:a0:4d:3b:92:b8:ee:9d:5c:2b:1b:e2:ed:34:1d:79:
         3e:43:08:3d:e9:11:7b:cf:27:91:ec:64:80:fd:63:62:c4:75:
         be:11:80:2b:7b:c5:6e:db:22:bc:65:e4:76:78:ed:30:14:38:
         6f:b6:f4:e0:93:93:ad:ec:a6:81:25:77:34:f1:ab:a9:98:13:
         3d:30:e6:62:59:6c:02:3e:1e:b3:1f:01:84:ed:d6:49:fd:31:
         47:2a:bc:0c:73:ff:4c:dd:fb:49:e7:eb:7b:73:b5:ff:71:60:
         1a:73:c5:ed:ae:7a:0d:61:c4:90:63:b5:d8:92:26:50:69:0c:
         aa:86:77:5c:ea:e3:0b:68:45:52:ec:13:f5:3f:19:b1:f4:57:
         fe:5c:e3:9e:77:5f:86:88:9e:93:88:c6:ff:74:dd:a6:04:ad:
         97:77:89:6e:43:bd:79:8e:e8:85:2f:c9:9c:88:6c:07:86:95:
         20:50:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org