Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31392d3139203d3e203238303234.roa
File:                     3136312e32322e3132382e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          rLnrJHd2vnkr14xqGE8SA1SXJCOqPgjmZQYb+31JBNs=
Subject key identifier:   DA:26:20:4C:F5:A1:FB:73:86:AC:54:B0:71:55:D9:AB:E4:EB:B3:B3
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       0D29D84488F903615D2665F845B3DCA11A633039
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:05 +0000
ROA not before:           Tue 04 Feb 2025 17:58:05 +0000
ROA not after:            Tue 03 Feb 2026 18:03:05 +0000
asID:                     28024
IP address blocks:        161.22.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:29:d8:44:88:f9:03:61:5d:26:65:f8:45:b3:dc:a1:1a:63:30:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:05 2025 GMT
            Not After : Feb  3 18:03:05 2026 GMT
        Subject: CN=DA26204CF5A1FB7386AC54B07155D9ABE4EBB3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:42:76:9c:a2:ce:95:2c:23:1a:be:d8:49:
                    33:8e:ad:79:68:80:80:3e:8e:ae:f0:e0:1d:85:72:
                    a5:75:53:6c:22:56:9b:5b:9b:e7:6f:d0:2a:ab:36:
                    4c:d5:86:5e:ca:5e:69:19:a5:38:fe:9d:c1:27:f9:
                    07:07:aa:77:cd:d2:30:a8:12:8b:25:57:01:ea:f3:
                    e4:63:49:af:1c:e3:69:13:8f:97:5b:c3:a4:01:ac:
                    d2:7b:1b:e7:bb:10:43:84:99:b8:42:ce:b6:ad:8b:
                    ef:ac:a9:01:35:fa:28:df:57:52:04:bd:1b:1f:a4:
                    b0:ba:3b:ab:50:54:bf:c0:e3:6b:3d:0d:86:4f:88:
                    c6:04:d6:4e:72:a6:47:a4:db:c7:53:6e:78:70:c4:
                    da:79:4b:22:be:79:30:99:af:ee:f0:78:97:b2:11:
                    42:1e:1a:ca:44:51:8e:cb:86:d5:17:ea:f0:b9:5c:
                    b8:73:bc:65:42:c3:f0:91:23:90:30:d1:45:7d:20:
                    6d:c2:94:b3:6a:a6:11:c9:42:20:ee:bb:ac:7e:a7:
                    dc:a1:fc:cb:ff:be:e2:67:c4:25:d7:b9:9c:de:3a:
                    2f:f4:9f:48:a9:e9:dd:21:37:b4:fa:a7:33:e1:36:
                    df:65:52:fe:e0:ef:eb:84:ea:57:2f:4e:7a:3d:b9:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:26:20:4C:F5:A1:FB:73:86:AC:54:B0:71:55:D9:AB:E4:EB:B3:B3
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:ff:79:96:c2:ab:b8:b8:8d:ad:6c:d0:32:d1:7e:58:27:
         f3:f7:f5:df:1d:cb:ec:b4:0d:93:46:c2:21:02:c8:d0:70:70:
         19:67:64:ca:2f:5c:d7:4a:01:76:cc:09:33:54:83:9e:9c:33:
         05:87:29:f9:fa:78:05:eb:c9:47:9c:3f:08:9c:ba:9f:b7:4b:
         66:b7:0c:57:35:98:e4:d4:80:c2:5c:e8:f9:33:ba:2a:e6:e2:
         5f:e2:b1:40:20:85:21:70:9d:7d:97:f7:a5:5c:f3:cc:74:41:
         c1:10:24:9a:b8:69:08:e1:c6:ff:bd:d3:89:9b:f3:a7:87:95:
         94:b3:37:6a:a0:85:fa:f4:40:1c:fc:94:c0:96:ac:12:96:28:
         6a:8b:e5:47:6b:09:4a:b4:35:d5:84:ea:0a:05:a4:9a:58:ad:
         34:9a:bb:1d:67:02:e3:b3:fb:17:6b:fb:7c:95:50:30:fd:a4:
         96:76:57:45:38:04:88:b7:ab:b2:e0:db:0d:2e:35:78:77:38:
         b5:92:dd:e4:a2:f8:bf:02:a4:a8:bf:93:37:96:e1:12:ab:bc:
         eb:23:64:4e:35:57:bf:6e:a6:2e:63:a2:83:6f:d8:94:bd:92:
         58:4a:ec:d1:ad:6c:37:9d:d0:9d:c0:9e:32:77:ff:f7:55:bc:
         90:24:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:44 2025 by rpki-client