Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3136302e302f31392d3139203d3e203238303234.roa
File:                     3136312e32322e3136302e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          SUfDmW4hKSED89mZSkYrhS6z9NBu1qVVtlsDMlyLWQE=
Subject key identifier:   97:BD:8B:61:8C:C8:48:26:64:A1:A1:06:F0:E9:5E:DD:29:32:13:48
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       32A93810D43C089F98B16D6F5A52C81688ACF417
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3136302e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:09 +0000
ROA not before:           Tue 04 Feb 2025 17:58:09 +0000
ROA not after:            Tue 03 Feb 2026 18:03:09 +0000
asID:                     28024
IP address blocks:        161.22.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a9:38:10:d4:3c:08:9f:98:b1:6d:6f:5a:52:c8:16:88:ac:f4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:09 2025 GMT
            Not After : Feb  3 18:03:09 2026 GMT
        Subject: CN=97BD8B618CC8482664A1A106F0E95EDD29321348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:c9:7b:5b:3b:a4:d4:6a:25:36:0c:ea:94:
                    14:c0:61:b8:2c:d8:6a:a7:eb:b6:c9:2e:88:e2:d8:
                    d6:47:5e:ee:70:f6:1c:f9:39:c1:c0:13:55:6b:a7:
                    61:30:72:f4:88:88:e6:75:f1:21:0d:97:f6:9c:bd:
                    2a:d2:fc:c9:4f:67:56:6e:cd:3a:05:d6:69:1b:d6:
                    7d:d9:6f:04:57:ff:be:b4:28:c9:ea:5e:84:60:4a:
                    7b:5c:86:62:e3:83:76:5e:d3:04:2b:64:08:2a:9d:
                    6d:03:0f:22:e5:66:9b:a7:83:1a:2e:6f:22:d8:07:
                    b4:ed:2f:6d:11:69:a3:73:4a:ec:7e:bd:79:8a:e5:
                    b5:e8:52:f1:6a:b3:83:b1:74:a2:3d:1a:ab:80:7a:
                    f3:48:fb:55:15:7a:c9:ec:67:ac:0a:30:a0:a1:9c:
                    4d:42:ee:2a:2b:a4:74:92:bc:30:50:5e:71:6c:5c:
                    91:6e:49:51:ba:e7:81:91:e2:38:0e:10:45:29:a9:
                    ba:41:65:7b:6b:3b:c3:b8:09:2e:51:f2:ef:2e:8f:
                    31:dd:43:75:e5:8c:dc:bf:d6:56:ee:3c:bd:83:18:
                    ba:98:3e:20:e3:be:6b:6c:25:90:bf:ef:ee:46:62:
                    eb:dc:a9:d6:f3:10:c1:47:53:de:01:7b:46:67:d4:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:8B:61:8C:C8:48:26:64:A1:A1:06:F0:E9:5E:DD:29:32:13:48
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3136302e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:61:3b:d8:3c:4e:9f:98:2b:36:28:7d:2e:fc:1e:60:55:
         f2:ed:98:75:c0:7e:02:3a:ea:99:21:55:f9:67:ec:53:d4:c8:
         0f:dd:f3:e1:5e:1e:0e:9e:d4:e2:2b:d9:e0:82:bf:92:cd:97:
         f7:78:0a:5a:3f:a6:c3:56:6e:2c:20:8f:1b:2c:37:f0:07:70:
         2f:a7:72:5b:50:0c:9d:36:10:e9:a2:c8:84:99:25:79:59:42:
         bb:0a:ee:e6:6f:51:73:0d:b6:6a:4a:96:42:db:53:da:0a:3f:
         d1:89:f5:eb:3c:2e:5e:73:ee:64:c5:ca:8b:b4:de:e9:05:45:
         e4:04:d1:d0:73:46:a5:05:c2:21:2e:89:72:42:40:d4:7e:dc:
         ae:76:fc:66:67:f5:6a:23:49:fa:6a:2c:c4:e7:75:eb:05:01:
         bf:dc:ab:2f:0d:04:31:ae:37:f4:b6:23:3c:ab:85:d1:da:76:
         4c:f0:bf:4d:9f:38:62:ff:b2:73:d7:b7:e8:ab:4e:0f:43:80:
         34:ad:8d:a1:57:16:ab:9a:e0:a5:88:48:7b:7b:07:0b:8e:a2:
         96:ca:db:bd:7b:68:8c:4b:e9:40:62:00:04:a5:72:38:44:15:
         ce:7b:95:94:60:a4:9a:f8:e1:41:84:a0:6a:d8:ad:c7:5d:83:
         ba:86:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:40:11 2025 by rpki-client