Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3232342e302f31392d3139203d3e203238303234.roa
File:                     3136312e32322e3232342e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          ihIC30Uwp033P/K96RHkYkta6TM0TOUJ+erRpjNhEbA=
Subject key identifier:   F9:2F:E8:2B:C0:51:43:EA:D9:2F:E3:30:28:52:11:F0:62:4D:AB:36
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       103FAAFEB5DBD06F6D48846D2A673F28BA4E8A3A
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3232342e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:05 +0000
ROA not before:           Tue 04 Feb 2025 17:58:05 +0000
ROA not after:            Tue 03 Feb 2026 18:03:05 +0000
asID:                     28024
IP address blocks:        161.22.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3f:aa:fe:b5:db:d0:6f:6d:48:84:6d:2a:67:3f:28:ba:4e:8a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:05 2025 GMT
            Not After : Feb  3 18:03:05 2026 GMT
        Subject: CN=F92FE82BC05143EAD92FE330285211F0624DAB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:33:eb:34:48:0c:12:a3:8a:b9:98:22:fd:
                    fd:5e:18:e7:b9:0b:84:da:15:36:18:c0:e8:66:21:
                    4f:5c:ba:8b:87:75:80:00:a9:d5:44:92:0a:64:20:
                    86:f6:b5:c0:2f:df:c5:92:f3:a5:f1:22:80:68:34:
                    ef:53:3f:bd:4b:ba:5b:1c:88:68:c4:d2:94:b9:f7:
                    14:5c:fc:06:08:77:12:05:f7:54:97:8b:73:93:cc:
                    5c:84:1c:f6:4b:4d:25:63:da:f9:cb:5e:d6:f1:6a:
                    c9:af:09:f8:12:d6:39:04:8d:51:0c:95:4e:37:0f:
                    aa:e7:f9:bc:78:1b:a0:94:cd:ac:7a:ae:44:32:a8:
                    db:92:5d:22:90:c3:29:ad:74:f5:92:2a:d5:bb:0b:
                    8c:cf:5b:ce:8f:87:d1:dd:01:95:2a:8d:51:6f:8a:
                    79:cf:21:8f:c6:79:e2:10:ce:ab:66:ad:5a:19:c5:
                    d3:0d:2d:d6:26:81:42:0b:29:00:b4:fe:b7:a4:bf:
                    41:71:af:ae:a2:67:aa:bf:7d:3b:47:4c:fe:e3:88:
                    d7:0d:18:ae:95:57:b6:5b:d5:67:7f:28:00:4d:58:
                    bd:14:e2:03:03:95:0e:c0:49:c6:4a:0c:58:91:0e:
                    83:87:8b:73:ac:2e:68:55:34:a7:76:8d:28:da:8f:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:E8:2B:C0:51:43:EA:D9:2F:E3:30:28:52:11:F0:62:4D:AB:36
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3232342e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:c8:da:14:d2:44:fb:bf:b0:94:c7:23:2d:f9:1b:ec:b8:
         65:6d:db:01:dc:b8:dd:45:dc:45:c7:38:6b:77:82:69:15:bc:
         4f:6f:a7:8b:c8:7d:f7:64:3b:84:05:0f:60:13:43:d7:93:a8:
         80:98:63:87:62:b5:2a:74:d0:24:2c:94:e9:c2:01:29:e3:13:
         b7:b0:99:36:e7:83:68:54:e3:85:9e:7e:ed:eb:d9:00:a2:7a:
         a1:26:3c:af:43:69:57:16:4c:e8:90:71:15:b7:df:11:1a:85:
         40:54:9a:23:c7:6d:80:3b:0b:fe:ed:67:30:70:05:91:5f:b6:
         97:f5:68:26:f6:1b:05:8a:5f:89:c0:b8:9a:2e:85:90:52:09:
         3e:46:bf:9c:eb:90:d0:c6:cc:35:d0:7f:07:1c:a7:9d:2e:5f:
         01:ee:f3:d7:b2:a0:1d:09:0b:b1:0d:1b:43:fc:21:07:a0:ee:
         97:6f:cf:11:b4:01:63:60:b7:c7:47:e0:65:28:75:2f:b3:42:
         14:0d:f0:75:0c:76:4f:99:d3:2f:2d:fe:e4:82:07:ea:8d:e0:
         04:c1:d1:4f:6f:84:b7:81:dc:4b:3f:fa:ae:20:85:c3:38:8f:
         2b:37:24:e8:11:7a:f6:e6:f0:eb:86:ce:20:9e:21:08:a8:12:
         89:be:43:ee
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUED+q/rXb0G9tSIRtKmc/KLpOijowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNTAyMDQxNzU4MDVaFw0yNjAyMDMxODAzMDVaMDMxMTAvBgNV
BAMTKEY5MkZFODJCQzA1MTQzRUFEOTJGRTMzMDI4NTIxMUYwNjI0REFCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZzPrNEgMEqOKuZgi/f1eGOe5
C4TaFTYYwOhmIU9cuouHdYAAqdVEkgpkIIb2tcAv38WS86XxIoBoNO9TP71Lulsc
iGjE0pS59xRc/AYIdxIF91SXi3OTzFyEHPZLTSVj2vnLXtbxasmvCfgS1jkEjVEM
lU43D6rn+bx4G6CUzax6rkQyqNuSXSKQwymtdPWSKtW7C4zPW86Ph9HdAZUqjVFv
innPIY/GeeIQzqtmrVoZxdMNLdYmgUILKQC0/rekv0Fxr66iZ6q/fTtHTP7jiNcN
GK6VV7Zb1Wd/KABNWL0U4gMDlQ7AScZKDFiRDoOHi3OsLmhVNKd2jSjaj/IjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+S/oK8BRQ+rZL+MwKFIR8GJNqzYwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzYzMTJlMzIzMjJlMzIzMjM0MmUz
MDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzODMwMzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBaEW4DAN
BgkqhkiG9w0BAQsFAAOCAQEAShrI2hTSRPu/sJTHIy35G+y4ZW3bAdy43UXcRcc4
a3eCaRW8T2+ni8h992Q7hAUPYBND15OogJhjh2K1KnTQJCyU6cIBKeMTt7CZNueD
aFTjhZ5+7evZAKJ6oSY8r0NpVxZM6JBxFbffERqFQFSaI8dtgDsL/u1nMHAFkV+2
l/VoJvYbBYpficC4mi6FkFIJPka/nOuQ0MbMNdB/BxynnS5fAe7z17KgHQkLsQ0b
Q/whB6Dul2/PEbQBY2C3x0fgZSh1L7NCFA3wdQx2T5nTLy3+5IIH6o3gBMHRT2+E
t4HcSz/6riCFwziPKzck6BF69ubw64bOIJ4hCKgSib5D7g==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:42:11 2025 by rpki-client