Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e3139322e302f31382d3138203d3e203238303234.roa
File:                     3136312e35362e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          YCBqN2Y3+AVdjK9pGQxqS4Vj3wiw97R6Ct8sERl5k9c=
Subject key identifier:   D9:39:BA:AB:BE:38:DD:CC:D0:87:2F:83:EB:4D:8F:4B:54:0A:19:8F
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       1670DD5B06A6482F8A78B09EC94513A76C0BEB37
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     28024
IP address blocks:        161.56.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:70:dd:5b:06:a6:48:2f:8a:78:b0:9e:c9:45:13:a7:6c:0b:eb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=D939BAABBE38DDCCD0872F83EB4D8F4B540A198F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:8f:ea:d9:c3:48:01:9d:8b:76:33:60:42:
                    15:68:dd:6b:ba:19:7a:fc:07:17:e8:07:a3:16:7f:
                    33:95:e1:a6:e4:24:f9:1c:53:ba:2b:e7:3b:6e:73:
                    c3:86:14:4a:57:32:c5:5b:4d:66:f2:c0:2b:d6:eb:
                    e9:36:23:fa:30:10:24:20:ba:39:68:cc:6f:2a:fb:
                    f1:28:9c:f8:b1:3a:53:6c:fe:e8:5b:0f:68:b8:f5:
                    9d:7d:f5:60:ea:e1:5c:34:c3:d3:18:7c:42:68:67:
                    04:41:09:22:2d:59:1a:21:1a:bd:32:9e:f6:62:de:
                    98:9d:c6:0b:f9:26:03:8f:74:e0:4d:f5:4f:3a:65:
                    fa:ad:80:5c:32:e6:ff:03:a6:3c:b7:58:30:36:94:
                    bf:b0:08:13:4f:c8:25:f4:7d:f7:e5:5e:d8:05:56:
                    71:a7:35:d1:bd:f3:06:7b:91:fa:5f:92:7b:ab:f4:
                    2c:06:85:8b:5d:e7:1f:0d:a4:40:c5:0b:fb:b5:79:
                    86:97:54:10:64:e0:9c:49:25:15:be:32:65:26:e9:
                    ee:42:2d:e2:f9:51:49:8f:9a:b7:9c:68:3b:9e:fc:
                    6b:87:4b:50:eb:c5:9e:d5:b2:3d:50:1d:e8:17:dd:
                    d4:e3:40:8d:9b:87:60:00:e6:08:d2:53:97:77:7a:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:BA:AB:BE:38:DD:CC:D0:87:2F:83:EB:4D:8F:4B:54:0A:19:8F
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.56.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:32:b5:7c:d0:42:9c:9b:1f:59:a7:b0:60:4d:13:cc:14:f7:
         21:eb:ce:91:a5:e9:a7:be:46:26:9d:82:2f:eb:c9:58:c3:93:
         a7:76:0f:57:fd:e4:ea:63:0d:d9:07:c7:5b:37:e9:7a:0f:02:
         1e:59:4a:81:fe:5d:6d:8e:b5:b9:1b:50:d6:6f:31:75:a8:5d:
         2e:67:fc:eb:b9:dc:95:08:a9:b1:91:f5:23:c7:dd:1c:af:dd:
         27:87:b5:33:f9:be:a4:1a:be:c3:5f:f6:c6:ed:ac:0a:16:6b:
         69:5b:13:c0:82:03:5e:81:66:01:77:a1:0b:95:de:8f:da:c8:
         a5:14:92:98:03:ca:b0:c9:bf:bd:98:84:c9:40:10:66:22:af:
         9c:e4:7d:d8:63:be:95:69:5b:06:eb:1a:eb:ea:ff:d8:b4:4d:
         eb:ba:5a:ce:2c:5e:00:14:8e:5c:92:ab:cb:cb:38:b7:fc:b4:
         04:fc:e7:77:81:a5:c5:7f:1e:52:fc:aa:3a:07:9b:b7:fb:a9:
         62:11:5b:17:14:d8:aa:0b:fc:4e:e1:bb:7b:79:f3:6a:71:61:
         97:32:e1:39:90:66:44:71:d6:30:19:a9:d0:de:e6:58:a8:85:
         88:e4:e9:d4:f7:89:6a:c1:84:bb:32:ea:8e:17:f3:77:c7:8a:
         8a:7d:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org