Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e36342e302f31382d3138203d3e203238303234.roa
File:                     3136312e3133382e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          lXLJUYAGbRFeVTp2TJVqM2oVc5CX5pe9rnd7x+w9zXw=
Subject key identifier:   B5:D0:7A:7A:27:51:80:39:0E:99:54:15:DD:C8:A9:D1:C0:E3:4E:E6
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       39E17982C9F0A4CA1419C2FEFC837F52691C4493
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:02:58 +0000
ROA not before:           Tue 04 Feb 2025 17:57:58 +0000
ROA not after:            Tue 03 Feb 2026 18:02:58 +0000
asID:                     28024
IP address blocks:        161.138.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e1:79:82:c9:f0:a4:ca:14:19:c2:fe:fc:83:7f:52:69:1c:44:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:57:58 2025 GMT
            Not After : Feb  3 18:02:58 2026 GMT
        Subject: CN=B5D07A7A275180390E995415DDC8A9D1C0E34EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:04:7c:f0:29:b6:84:4e:4d:93:20:1b:c4:
                    04:13:95:af:1a:94:33:e0:55:42:68:eb:81:a4:2d:
                    d1:53:8c:8f:92:37:d0:90:77:b1:84:53:19:35:53:
                    b7:0e:dc:ac:a7:93:03:73:3c:4b:1e:5c:fe:e9:d4:
                    69:c2:2e:54:32:f9:c9:cf:cf:54:26:d0:b8:2a:84:
                    4e:e6:4c:29:39:9e:80:9c:b2:2b:99:d8:d9:06:8f:
                    82:35:1b:41:c8:b0:c2:2d:a7:bc:a7:79:a6:ee:c7:
                    17:57:73:40:37:07:fb:43:9f:43:20:75:bf:4c:4e:
                    1a:89:00:91:2b:c1:89:e7:c6:c9:17:fa:9c:af:62:
                    96:83:5a:43:d4:e1:c0:a9:56:5a:2b:31:35:8e:d8:
                    04:fa:65:a3:9d:47:9a:8e:75:91:e5:57:e2:ae:23:
                    9e:e7:0f:a3:1f:a0:ff:74:8c:ea:ca:fe:c9:dc:02:
                    a2:36:49:01:0b:a2:ae:06:dd:fb:12:ed:71:1c:34:
                    e6:8b:6b:14:5c:96:53:33:4c:ce:9e:f6:7f:2a:3b:
                    d2:96:75:33:51:69:e0:a6:f7:d0:8b:5f:cc:22:9d:
                    77:88:57:a9:ad:5e:34:f3:03:5e:d7:b8:f8:e9:43:
                    ba:ad:14:fa:56:f5:e1:ca:04:70:4b:13:2f:ee:2e:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:7A:7A:27:51:80:39:0E:99:54:15:DD:C8:A9:D1:C0:E3:4E:E6
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e3133382e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.138.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:71:cf:a7:5a:80:e4:6a:74:b5:b9:13:31:9c:c0:e8:2a:
         0d:2c:77:ba:89:e5:b1:86:16:cf:40:7f:f5:ab:cb:c4:b0:58:
         15:5e:90:d6:14:6b:48:8c:c3:ef:f6:d6:bd:a1:ad:27:a4:1e:
         35:09:d5:fd:ff:36:7e:a7:25:90:93:93:92:c7:40:7b:ab:85:
         d4:39:a8:40:02:de:d6:87:e7:26:8b:be:5c:ae:11:93:2c:af:
         fa:27:e4:aa:d4:78:a7:6d:f0:8c:7c:d0:20:cb:aa:b3:4d:53:
         8c:51:07:72:6f:51:7e:83:60:86:f6:15:37:b3:e2:59:bc:12:
         cd:d8:c1:9e:2b:4e:13:9c:24:47:5c:96:55:5d:1d:48:e7:19:
         17:70:dd:bb:72:ee:01:b6:d0:f6:87:13:e2:d9:0a:e3:52:db:
         df:40:37:47:b8:6e:f7:43:b3:8b:34:ee:4b:8a:e6:d3:99:45:
         0f:d7:54:19:bd:a0:93:6d:e3:17:5a:a5:d9:d1:ce:2f:ea:ba:
         a5:d6:8a:c2:70:da:de:aa:ba:39:05:17:eb:e1:7c:98:e9:e8:
         03:62:07:7b:4d:74:2e:41:8f:3f:7a:62:bf:09:d8:bd:b5:60:
         9b:22:8a:8d:e0:8d:d3:0f:2c:64:78:b1:b0:29:5e:2d:39:a1:
         41:c9:ce:0d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOeF5gsnwpMoUGcL+/IN/UmkcRJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNTAyMDQxNzU3NThaFw0yNjAyMDMxODAyNThaMDMxMTAvBgNV
BAMTKEI1RDA3QTdBMjc1MTgwMzkwRTk5NTQxNUREQzhBOUQxQzBFMzRFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMAR88Cm2hE5NkyAbxAQTla8a
lDPgVUJo64GkLdFTjI+SN9CQd7GEUxk1U7cO3KynkwNzPEseXP7p1GnCLlQy+cnP
z1Qm0LgqhE7mTCk5noCcsiuZ2NkGj4I1G0HIsMItp7yneabuxxdXc0A3B/tDn0Mg
db9MThqJAJErwYnnxskX+pyvYpaDWkPU4cCpVlorMTWO2AT6ZaOdR5qOdZHlV+Ku
I57nD6MfoP90jOrK/sncAqI2SQELoq4G3fsS7XEcNOaLaxRcllMzTM6e9n8qO9KW
dTNRaeCm99CLX8winXeIV6mtXjTzA17XuPjpQ7qtFPpW9eHKBHBLEy/uLkaVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtdB6eidRgDkOmVQV3cip0cDjTuYwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzYzMTJlMzEzMzM4MmUzNjM0MmUz
MDJmMzEzODJkMzEzODIwM2QzZTIwMzIzODMwMzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBqGKQDAN
BgkqhkiG9w0BAQsFAAOCAQEAGvlxz6dagORqdLW5EzGcwOgqDSx3uonlsYYWz0B/
9avLxLBYFV6Q1hRrSIzD7/bWvaGtJ6QeNQnV/f82fqclkJOTksdAe6uF1DmoQALe
1ofnJou+XK4Rkyyv+ifkqtR4p23wjHzQIMuqs01TjFEHcm9RfoNghvYVN7PiWbwS
zdjBnitOE5wkR1yWVV0dSOcZF3Ddu3LuAbbQ9ocT4tkK41Lb30A3R7hu90OzizTu
S4rm05lFD9dUGb2gk23jF1ql2dHOL+q6pdaKwnDa3qq6OQUX6+F8mOnoA2IHe010
LkGPP3pivwnYvbVgmyKKjeCN0w8sZHixsCleLTmhQcnODQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:52 2025 by rpki-client