Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31372d3137203d3e203238303234.roa
File:                     3136312e32322e3132382e302f31372d3137203d3e203238303234.roa (raw, json)
Hash identifier:          3sbnTBgFnGU7OqYYtNmL9r0auEpRgcxmrfaHboCLC10=
Subject key identifier:   69:34:D7:51:74:4F:E5:BC:DF:43:6B:3E:6E:DE:B3:B6:5E:87:03:6B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       1E226C69AD4D9FB8DF1B7134BA3A6FE9C9BA8552
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31372d3137203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:04 +0000
ROA not before:           Tue 04 Feb 2025 17:58:04 +0000
ROA not after:            Tue 03 Feb 2026 18:03:04 +0000
asID:                     28024
IP address blocks:        161.22.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:22:6c:69:ad:4d:9f:b8:df:1b:71:34:ba:3a:6f:e9:c9:ba:85:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:04 2025 GMT
            Not After : Feb  3 18:03:04 2026 GMT
        Subject: CN=6934D751744FE5BCDF436B3E6EDEB3B65E87036B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:f4:16:34:7b:62:25:b9:ba:0a:b6:3a:74:
                    7b:64:77:48:05:e9:14:f4:87:6d:50:03:62:8a:30:
                    20:02:2a:bb:26:a3:85:9d:8c:b6:3a:d5:f8:e9:aa:
                    42:77:5a:f6:c4:10:ab:72:97:cd:e3:99:71:d6:ea:
                    40:4c:92:e1:08:90:d9:1a:ed:3f:33:56:3f:a7:ac:
                    87:fd:e6:6c:46:d2:f1:da:c8:e6:31:d2:63:b3:1b:
                    55:eb:57:4a:99:0e:3a:e7:45:16:f7:6e:ef:01:d6:
                    8f:50:62:d1:b2:a1:de:59:2d:a8:1f:ac:24:0b:61:
                    5c:c7:39:3f:f1:e4:90:fc:1f:13:92:72:93:be:9b:
                    fa:a8:3d:1e:5c:aa:ff:d9:74:03:84:d7:73:ce:90:
                    cd:07:b7:32:5e:d4:35:e3:cd:14:75:8b:b4:48:d2:
                    30:e5:c5:7e:39:92:40:5e:bb:89:2d:fa:7f:aa:fd:
                    60:a0:4d:3e:58:13:0a:b9:bb:62:fd:75:bc:ef:d6:
                    c8:59:d1:84:3f:2c:ab:77:12:4e:dc:a8:3f:05:ab:
                    3f:e2:10:62:79:ab:6d:93:c4:a2:5a:a6:f7:19:53:
                    39:68:58:b0:15:f1:ef:c7:64:af:ed:a3:c9:86:24:
                    6d:86:ec:eb:47:de:03:81:ea:3f:e2:34:dc:ca:c0:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:34:D7:51:74:4F:E5:BC:DF:43:6B:3E:6E:DE:B3:B6:5E:87:03:6B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31372d3137203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:04:f6:b4:7b:20:cd:dd:57:b8:d6:80:35:d0:39:28:ec:
         e3:8b:b8:b2:df:01:3a:cc:c2:41:ce:e9:83:c8:50:de:2c:15:
         df:64:3a:02:be:d3:b8:e3:c3:73:61:5e:42:a3:b8:a1:98:7a:
         fa:4a:82:c2:94:a4:ac:4d:b2:7f:69:92:96:97:e5:46:05:6e:
         9e:e6:1b:d2:58:b4:e6:2e:ec:54:7b:ce:18:2a:22:b6:3f:e1:
         40:d4:47:2b:3d:b3:68:f2:83:f0:07:db:ef:e9:18:66:5d:e5:
         bb:c6:cb:c9:68:90:3d:4f:4e:82:c7:0d:d7:3a:0c:d6:9d:67:
         8c:e0:88:fd:da:ca:3e:4e:7a:9f:ac:a7:03:ce:9d:9f:d5:a8:
         2b:32:23:4e:0c:02:63:61:ca:a6:0e:bc:d9:58:ef:77:76:d1:
         e3:29:be:32:fa:f0:7b:be:d2:85:b8:26:67:7b:a1:9d:fa:24:
         fd:a1:55:8c:be:e5:b6:07:20:72:65:88:c3:86:fe:f2:80:fc:
         23:b1:08:ef:81:2b:6d:73:55:6e:89:d8:53:20:7d:01:c6:d8:
         7e:b8:39:70:53:1c:4e:7c:c7:05:27:ff:32:03:99:0c:97:d3:
         35:ea:15:e8:5c:52:6c:03:bf:89:2b:3e:c3:6b:8e:96:73:5c:
         65:5e:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:19 2025 by rpki-client