Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e3132382e302f31382d3138203d3e203238303234.roa
File:                     3136312e3133382e3132382e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          /+EZ93yl7PXqhFqpSjXNvxr82rkx1y2d+k6uBNe1/0c=
Subject key identifier:   D6:C6:E7:17:5F:36:F6:22:43:13:53:20:D1:1F:B1:8B:1B:E7:23:32
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       1CA714E499AFDAA623C6D8A80073F0AB47DE5A95
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e3132382e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:00 +0000
ROA not before:           Tue 04 Feb 2025 17:58:00 +0000
ROA not after:            Tue 03 Feb 2026 18:03:00 +0000
asID:                     28024
IP address blocks:        161.138.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a7:14:e4:99:af:da:a6:23:c6:d8:a8:00:73:f0:ab:47:de:5a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:00 2025 GMT
            Not After : Feb  3 18:03:00 2026 GMT
        Subject: CN=D6C6E7175F36F62243135320D11FB18B1BE72332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:0a:f8:16:f5:5e:2b:e6:c8:6a:3d:12:d5:
                    9c:b0:7d:93:c9:a3:a4:3b:1a:54:02:88:06:db:d4:
                    2a:a2:0b:00:05:2d:91:f0:b0:30:d5:3a:e3:03:77:
                    c8:67:57:a6:94:e3:1b:81:4f:0d:34:b0:2a:9d:62:
                    2f:93:a9:84:69:41:d7:08:0d:f7:a8:56:66:f5:29:
                    cf:72:15:44:7e:3b:49:30:05:a3:8c:3c:f0:2d:ee:
                    c7:97:b2:1e:46:82:19:2b:0f:a9:36:f6:14:d6:65:
                    98:d3:78:eb:46:d8:cb:cf:93:d9:c4:45:5c:1f:ad:
                    62:b2:c8:83:fe:02:70:30:68:10:da:90:50:c7:b5:
                    70:3d:76:fe:1a:c1:0e:0b:67:c2:f0:96:25:b5:e5:
                    6b:0c:6c:39:7b:74:ca:d2:1f:bd:5c:b6:7e:0d:68:
                    2e:d0:92:f2:ac:4e:28:f9:81:e0:77:14:b9:34:30:
                    d1:ef:87:51:56:b1:56:ec:55:66:3f:74:96:cf:6b:
                    01:41:7a:aa:85:7b:e0:72:24:5d:9a:f2:0f:92:d5:
                    26:29:e1:fa:fc:bd:5e:df:85:e4:da:a3:f3:72:a6:
                    0c:c3:b8:4f:86:9c:d9:fa:71:54:9b:8e:77:ce:1f:
                    b2:5e:1c:5a:a2:9c:15:c4:fe:7b:76:5f:25:be:e7:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C6:E7:17:5F:36:F6:22:43:13:53:20:D1:1F:B1:8B:1B:E7:23:32
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e3132382e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:ea:d8:8c:bc:c7:38:39:5b:e1:ca:f4:54:a3:e3:63:77:
         7d:a3:20:1c:f2:6c:e1:16:c3:af:04:81:32:bd:73:91:ce:62:
         8b:99:e0:af:b9:8f:6a:ed:0e:15:47:f8:7e:b9:78:60:3f:45:
         7d:53:05:da:cf:87:f4:bd:0b:84:1d:fc:d7:12:50:72:09:85:
         e9:c8:95:a8:00:4f:50:07:dc:78:64:1c:51:77:d5:eb:e0:81:
         e6:1b:94:29:c5:70:82:dc:c5:2c:9c:18:53:23:2c:db:da:41:
         ec:cf:63:65:b0:96:c4:d9:0f:02:9f:46:5c:bd:72:32:f8:4b:
         1f:2c:c5:85:5a:e0:8a:43:49:3b:fa:8a:d2:03:50:01:99:3b:
         6d:cd:9f:e1:a7:25:b4:54:5a:d7:02:4f:7d:78:a0:72:55:58:
         92:1b:5b:0b:0c:2b:cc:a4:21:0d:89:c6:dd:bb:23:c4:dc:55:
         7e:a6:e3:8f:7f:24:d5:78:8d:e1:40:df:38:09:32:71:22:5e:
         c9:18:27:34:b7:f6:49:61:0b:4c:fa:71:9f:7a:db:e0:c4:63:
         8c:ac:30:bd:77:64:9f:2d:c7:5d:23:b0:30:56:26:c0:96:56:
         1c:4a:c7:42:6b:fe:6c:56:56:41:e2:bb:ea:c7:a8:70:01:a4:
         85:b7:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:38 2025 by rpki-client