Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3136302e302f31392d3139203d3e203238303234.roa
File:                     3136312e32322e3136302e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          WQwHBQNSfHmMaAcALkxQ49b42sU/vmB9NhR9mCiUx6I=
Subject key identifier:   C6:E2:23:54:F6:A2:7E:4E:11:78:F6:CA:3E:7A:05:FB:B1:17:1E:BF
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       23694A0677399EAC11861572BF77488B517EC775
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3136302e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     28024
IP address blocks:        161.22.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:69:4a:06:77:39:9e:ac:11:86:15:72:bf:77:48:8b:51:7e:c7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=C6E22354F6A27E4E1178F6CA3E7A05FBB1171EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:be:b3:2e:d0:95:b6:4f:eb:13:78:a3:c5:
                    f2:56:e1:20:00:94:d1:9a:2d:02:23:c5:68:e2:8b:
                    98:06:92:9b:bd:73:d7:59:3c:ef:24:b5:30:f0:23:
                    67:22:b3:94:35:09:ab:83:09:c4:39:d2:fb:fa:f6:
                    41:ee:22:53:64:86:9e:83:21:c3:28:82:fb:6d:c6:
                    8c:12:06:61:ac:5f:91:7b:76:78:3d:c7:23:d9:ae:
                    00:00:9a:79:40:64:7a:8f:06:cc:0e:a0:42:b8:71:
                    64:50:f8:8f:85:99:15:17:fc:3f:cb:54:e7:48:2f:
                    2f:5a:c9:88:d6:f1:d2:89:16:a7:62:d3:f4:00:ab:
                    22:83:fa:2e:89:65:f5:da:90:02:0a:96:c0:49:80:
                    22:38:e9:ef:4f:1e:e4:bd:cb:b3:0b:4a:27:71:88:
                    c2:79:ef:e4:b7:bd:4a:ee:76:5d:e1:cf:e8:cb:8d:
                    b7:e0:28:49:51:c7:dc:d1:3e:c8:08:7f:46:4d:cc:
                    4b:74:77:e9:d1:fd:e1:81:58:2f:3a:6e:65:6f:c2:
                    5e:70:73:ee:92:f3:6f:61:9f:bc:6f:90:e8:bd:9e:
                    2e:dd:a0:5b:ba:d1:fa:ce:8f:e6:e6:6c:26:91:5a:
                    26:e2:f3:06:6c:b7:ce:83:48:f9:a8:19:e3:f5:8c:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E2:23:54:F6:A2:7E:4E:11:78:F6:CA:3E:7A:05:FB:B1:17:1E:BF
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3136302e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:60:44:28:49:c5:89:5e:e9:d6:5e:19:48:49:19:eb:9c:f1:
         0a:0e:93:b6:ae:75:27:d6:dc:55:db:fc:d6:fd:0e:7d:f4:04:
         ab:28:0d:58:1e:d5:dd:b4:f4:27:30:fe:f2:cd:2b:68:52:29:
         6b:93:b6:11:f2:c0:15:db:83:e9:1d:d3:df:c0:81:5a:43:4c:
         46:8d:b4:9c:05:52:a4:1c:ba:9a:54:fe:e5:80:49:1e:1c:95:
         28:54:e6:3e:06:0f:8c:01:b6:7e:a9:cd:ef:17:42:50:ac:2e:
         f3:05:3d:a2:c8:57:d6:eb:50:f4:ee:f2:85:88:cc:1b:23:fe:
         da:40:58:ec:5b:d8:c6:26:ff:6a:53:0e:05:93:93:f1:a3:74:
         ec:ea:8f:69:40:9b:a6:80:df:70:31:8b:30:fa:e0:4c:a5:e7:
         41:c7:ec:4d:ff:bf:c8:bd:98:12:c0:f4:f1:cc:43:9d:a2:4b:
         be:d6:20:ef:29:25:e5:fa:c0:78:44:ff:15:79:c5:94:e3:07:
         84:10:5f:b1:93:e7:59:89:9d:d4:9a:18:4e:83:88:7d:90:04:
         dc:ea:cd:2a:a0:fa:e5:06:67:b0:c0:19:db:fa:c9:72:05:ad:
         42:bf:9e:f6:a3:d4:e8:6a:ff:6e:6b:13:f6:e4:ad:12:70:fa:
         f9:7d:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org