Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa
File:                     3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          BBixWYu39spVMIVXoCmFgZYSovIYC6JJ/uZNwVhXm+o=
Subject key identifier:   B5:78:4B:1F:0B:17:E8:E1:33:AE:F8:40:2A:49:9F:B0:8E:76:99:62
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       382F29666E43486D60E99D88478457A020D69661
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 06 Mar 2024 06:55:00 +0000
ROA not before:           Wed 06 Mar 2024 06:50:00 +0000
ROA not after:            Wed 05 Mar 2025 06:55:00 +0000
asID:                     265524
IP address blocks:        160.20.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:29:66:6e:43:48:6d:60:e9:9d:88:47:84:57:a0:20:d6:96:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar  6 06:50:00 2024 GMT
            Not After : Mar  5 06:55:00 2025 GMT
        Subject: CN=B5784B1F0B17E8E133AEF8402A499FB08E769962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:ab:ae:2a:b0:ed:bc:59:cf:e3:31:68:2f:
                    21:61:fa:eb:e5:50:97:07:ec:8c:50:92:f0:c7:6c:
                    b1:32:6c:41:4d:5e:23:b5:88:84:9d:a2:85:68:07:
                    27:95:fd:ef:ea:62:6b:5d:0a:d8:d5:7a:8e:85:6e:
                    b8:57:bb:e2:ef:ff:a2:41:31:0e:1a:c9:a0:61:e9:
                    c9:71:ef:67:2a:e6:4d:03:1e:3f:61:94:de:1f:17:
                    e9:b1:9c:f5:64:53:34:e7:f9:bf:cd:c0:73:19:46:
                    fe:82:98:a7:2d:e2:7d:9d:bc:cc:39:f8:fb:5f:ed:
                    49:62:08:13:01:3b:58:c5:28:ca:94:1d:5a:91:e3:
                    7e:8c:99:e6:69:b3:20:43:27:e7:31:e3:12:af:e9:
                    ab:ac:7d:52:c4:f1:ee:31:6a:65:43:49:4b:ec:d8:
                    e2:fd:a0:a7:75:10:c7:a8:db:ec:59:01:10:b6:8e:
                    28:7a:29:6c:a5:4e:d6:4c:e8:ad:e8:22:f1:11:14:
                    c9:5a:66:97:f7:f2:b9:a0:f3:cb:0c:f9:b2:b8:52:
                    76:9b:f4:2d:fb:1e:aa:f6:40:bf:4e:ed:14:a1:13:
                    81:5e:57:7b:b7:d3:39:f1:3d:f8:1c:72:8b:f0:5c:
                    79:46:87:50:04:df:85:5b:49:de:b5:54:8c:c0:9b:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:4B:1F:0B:17:E8:E1:33:AE:F8:40:2A:49:9F:B0:8E:76:99:62
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3136302e32302e3137322e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:19:a1:80:c7:03:cb:47:9a:ec:c9:10:70:fe:51:9b:ea:
         d4:b1:4c:0e:76:41:cc:29:67:e0:c9:a3:82:a4:65:c4:00:5d:
         69:8c:cd:99:2e:52:68:d3:90:dd:e2:50:7a:d1:72:05:6c:12:
         de:b4:b3:ba:78:b8:75:3a:e2:2c:03:13:bb:51:51:76:49:69:
         1f:66:05:b9:16:2b:5a:53:82:29:3f:7b:2a:ee:4d:78:df:62:
         c1:90:89:bd:39:91:2b:d4:7a:c8:53:6a:e2:11:42:2f:de:8b:
         0b:4e:4f:bd:a6:46:18:f7:9d:00:cc:f8:3c:e4:c0:6d:fd:cf:
         ed:90:d8:6c:01:c4:eb:b7:b4:8f:43:36:0c:35:eb:eb:1d:d2:
         89:cb:20:4f:f9:d2:b9:53:5e:57:13:59:5e:93:4a:4a:95:b5:
         7d:bb:86:b6:0b:a2:cf:e4:50:51:c9:d4:62:aa:ad:bc:38:80:
         4d:2f:38:cc:d9:48:fa:2e:aa:e8:25:e7:04:7b:f0:c2:43:81:
         e8:e7:ef:c8:ec:7b:26:b4:7e:c0:c9:c7:87:d2:c1:65:35:a5:
         ea:91:d2:3c:33:11:da:3d:21:67:75:2d:6b:5d:8e:bf:7c:0b:
         fc:61:d8:eb:bc:24:bd:ac:bc:f2:13:93:e7:af:41:74:84:85:
         9c:28:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:29 2024 by rpki-client on console-fra.rpki-client.org