Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa
File:                     3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa (raw, json)
Hash identifier:          ZpJYdw8TuJ7uNyDNguceJxpXYUj0bYph7Ip3pmA8aGk=
Subject key identifier:   C7:6A:EF:B0:96:58:58:E2:5A:48:68:FE:F7:B0:78:A8:EF:20:71:8C
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       42CB36C8A0952E72FAFB7D1AFE5EB4F6F719CCC4
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:58:51 +0000
ROA not before:           Tue 05 Mar 2024 17:53:51 +0000
ROA not after:            Tue 04 Mar 2025 17:58:51 +0000
asID:                     52423
IP address blocks:        143.202.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:36:c8:a0:95:2e:72:fa:fb:7d:1a:fe:5e:b4:f6:f7:19:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  5 17:53:51 2024 GMT
            Not After : Mar  4 17:58:51 2025 GMT
        Subject: CN=C76AEFB0965858E25A4868FEF7B078A8EF20718C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:0f:d6:8b:35:5d:99:58:ff:15:f7:d2:50:
                    70:da:6f:0c:c2:de:0d:f3:40:3a:75:53:aa:c6:2c:
                    9e:c8:76:48:22:9c:f9:af:e6:c3:5c:0f:be:c5:ab:
                    29:11:96:dd:50:8c:87:e3:d8:a5:12:b4:ae:1a:03:
                    9b:3c:89:45:42:04:cb:da:6b:83:45:0b:3d:46:f9:
                    f1:09:bd:bd:ed:32:05:20:39:2a:9c:d6:ab:38:f5:
                    3f:bc:19:0c:29:87:e9:dc:0c:ea:ba:f3:da:83:a2:
                    15:59:4b:01:02:91:d5:d0:6c:9e:7c:6d:7f:9c:d6:
                    ca:23:53:b2:47:dd:ec:4b:2b:15:a7:b0:c1:0e:c5:
                    6d:1a:30:4d:ca:64:91:23:34:d1:a2:96:6e:6c:27:
                    66:9d:a3:fb:85:81:a4:be:34:2c:30:6d:5b:2a:ec:
                    7d:e1:b2:54:30:4c:5f:15:b8:58:0d:d2:d5:67:e7:
                    4d:0a:98:0e:f9:8b:4b:30:e8:0d:48:3a:3c:6a:28:
                    9f:50:9f:f2:4b:73:3f:04:f2:f8:0b:bb:19:c3:22:
                    94:a5:e9:2f:0a:ac:ff:e7:32:b4:c7:c1:ec:db:a6:
                    46:9f:cb:51:fa:04:12:16:fa:64:14:a0:24:a3:fc:
                    d0:d0:85:ff:c3:52:3c:39:8f:28:b5:9f:e8:a8:e8:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:EF:B0:96:58:58:E2:5A:48:68:FE:F7:B0:78:A8:EF:20:71:8C
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:c0:a2:23:85:49:1d:5c:2d:36:e6:ba:1e:41:36:6e:d7:
         f3:ae:04:c4:40:48:2e:66:35:43:f6:87:a3:31:5f:59:51:fe:
         82:4a:61:ab:7f:65:9d:43:de:03:dc:ce:02:10:f3:1e:86:85:
         bf:2a:ac:dc:ae:8d:07:3c:74:e0:7a:8f:73:d7:53:29:86:79:
         07:13:50:15:79:19:9b:9a:00:ff:64:7e:57:36:8a:77:7d:89:
         4c:99:45:b9:a1:1c:79:15:44:c1:ee:d0:0b:fd:45:c2:38:3a:
         25:d9:bd:f5:f8:0c:72:f2:fd:32:53:02:84:82:b7:46:5a:b6:
         e9:9d:c7:9d:ee:b7:7e:c6:34:c3:58:df:67:6b:fa:83:fe:97:
         a0:6a:a3:c3:ee:3b:7c:df:56:07:50:7e:e0:d9:5e:14:2a:a6:
         d6:a8:1c:cf:fa:2f:ca:2b:4f:8d:0a:93:7b:0b:e7:87:33:16:
         b0:38:b9:7f:d7:6e:6d:df:8a:43:56:b1:8c:d2:4d:19:e7:70:
         08:c9:ad:fa:9b:e4:4b:97:1d:31:f1:ef:d5:e5:83:cd:f6:a0:
         e9:0c:ae:3d:51:6e:b0:bf:14:7c:f9:e5:83:b6:9a:96:bf:3b:
         f6:dc:d9:6f:ba:91:95:79:bd:62:f7:eb:c2:95:67:29:3f:7d:
         e6:a8:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org