Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e302e302f31362d3136203d3e203238303234.roa
File:                     3136312e35362e302e302f31362d3136203d3e203238303234.roa (raw, json)
Hash identifier:          P/Tt0V7Vwwlkpw57ZXDdZ/ZhOq4u0B1HSsnY6t7eebo=
Subject key identifier:   C9:DF:A9:22:90:A6:C3:6A:C8:8E:5D:E2:48:DF:CB:82:D1:71:27:E5
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       0DA58ACBEDEB43F104A1414B4A3CFA02DD52FF35
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e302e302f31362d3136203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:09 +0000
ROA not before:           Tue 05 Mar 2024 17:51:09 +0000
ROA not after:            Tue 04 Mar 2025 17:56:09 +0000
asID:                     28024
IP address blocks:        161.56.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:8a:cb:ed:eb:43:f1:04:a1:41:4b:4a:3c:fa:02:dd:52:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:09 2024 GMT
            Not After : Mar  4 17:56:09 2025 GMT
        Subject: CN=C9DFA92290A6C36AC88E5DE248DFCB82D17127E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:3f:ba:53:c9:62:f0:f3:1d:35:3e:71:9b:
                    24:58:60:48:b1:82:85:da:90:82:55:83:0b:84:8f:
                    a4:d1:38:df:bf:de:39:a1:42:52:5a:56:93:f5:82:
                    68:03:61:f0:de:68:75:8e:41:af:c4:a8:fb:3e:03:
                    b0:b2:dc:31:a3:ef:97:68:db:4f:09:24:c9:4f:96:
                    de:66:66:18:9f:d0:6b:34:f6:90:e5:91:36:fc:5f:
                    35:9e:a9:53:87:4c:f0:f5:01:1c:14:2b:db:dd:9f:
                    f3:bb:b5:33:0f:9c:b8:5a:d9:da:6f:21:aa:fb:58:
                    f6:a8:f7:e0:f1:e3:7d:79:df:6a:59:14:ee:9a:23:
                    b6:59:bc:a7:a9:d0:16:fb:61:5f:65:cf:28:da:b7:
                    9a:21:8d:aa:91:88:92:c8:62:71:b7:64:d1:94:24:
                    d0:46:55:46:91:a1:b0:78:4e:95:c6:34:d3:24:f1:
                    bf:1e:22:f7:2d:d0:ef:52:96:0f:d1:4f:66:3b:c6:
                    1b:80:ac:40:4b:ae:db:87:14:b9:63:99:ad:6c:3c:
                    b1:e3:b4:e7:30:c8:1d:c9:5a:93:09:37:f4:7c:2e:
                    65:f2:14:a8:55:2d:ed:32:78:a1:9f:a2:99:f4:0c:
                    fb:89:57:c1:a0:32:de:04:57:1f:8f:9f:8f:90:82:
                    d1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DF:A9:22:90:A6:C3:6A:C8:8E:5D:E2:48:DF:CB:82:D1:71:27:E5
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e302e302f31362d3136203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:2b:71:22:cd:36:c5:91:06:c4:78:23:ee:b4:d0:2a:ac:e9:
         5e:29:fd:84:9a:e2:18:f5:2a:22:18:9e:01:01:2b:bb:54:6d:
         81:82:d9:07:e4:aa:08:d3:11:f9:9f:53:48:d6:f0:2a:30:42:
         d0:ab:fc:3c:9a:45:2d:0c:ba:8e:28:3c:99:0a:b6:4f:8d:69:
         39:14:b0:d8:2a:2e:8d:f8:e9:6a:2f:31:c8:09:79:a3:ef:f3:
         04:8c:a9:77:7c:20:4b:53:f1:64:7c:b8:5d:a4:ca:7e:1b:55:
         10:38:72:18:7e:b7:dd:bd:3d:f3:2d:a5:47:5e:84:9e:10:43:
         90:61:b7:6f:1f:e0:fe:a0:be:08:30:6a:b4:62:f4:71:ca:cf:
         c2:9f:0c:08:92:e6:5f:96:e1:b4:2d:09:75:a0:80:ab:38:58:
         a3:4c:d7:98:a8:f7:c2:1a:6e:c5:f9:58:f6:d8:09:d6:af:07:
         18:30:14:33:d7:cd:d2:f8:05:65:1c:b3:09:4b:94:4b:85:61:
         c7:27:c5:db:ff:52:d7:67:a4:21:4d:9a:52:67:64:6d:4d:cb:
         91:62:0d:52:55:a2:82:f6:4f:49:c0:1d:53:f7:35:e2:fe:7e:
         0d:30:f7:0a:5e:d3:e6:14:5b:95:33:86:c3:63:72:e8:39:58:
         14:bc:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org