Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33342e302f32342d3234203d3e20323732383039.roa
File:                     3136312e32322e33342e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier:          x/uUT7R3VNy7ed46fqhSFCjFpS6pyHIBzzIeHrkqD44=
Subject key identifier:   69:AF:44:8E:BE:DC:A5:A3:25:35:35:14:FA:40:36:5B:E8:B2:1E:FF
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       292FE2304111D239C5A31DE49F7FF1FF5C41C9FF
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33342e302f32342d3234203d3e20323732383039.roa
Signing time:             Tue 04 Feb 2025 18:42:42 +0000
ROA not before:           Tue 04 Feb 2025 18:37:42 +0000
ROA not after:            Tue 03 Feb 2026 18:42:42 +0000
asID:                     272809
IP address blocks:        161.22.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:e2:30:41:11:d2:39:c5:a3:1d:e4:9f:7f:f1:ff:5c:41:c9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Feb  4 18:37:42 2025 GMT
            Not After : Feb  3 18:42:42 2026 GMT
        Subject: CN=69AF448EBEDCA5A325353514FA40365BE8B21EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:6d:73:52:bf:66:9e:b0:58:71:a9:dd:0a:
                    6b:b8:7b:fb:6f:42:28:21:06:bc:4f:64:9e:1e:c2:
                    2a:1e:b1:a2:49:4f:23:e3:8c:1c:d6:aa:74:5b:65:
                    a0:f1:81:bb:7a:ae:94:5e:98:53:b6:2f:bb:d1:ed:
                    88:0c:b1:37:4b:d0:69:82:2a:3a:f1:7f:26:3d:d0:
                    b0:a5:a7:65:0b:6d:57:c5:fc:0f:8f:f2:71:8e:f5:
                    fc:ea:84:2f:4d:05:61:8a:38:15:cd:11:7c:da:b8:
                    3f:1f:84:fe:4f:e1:6e:00:91:f8:11:23:50:af:9d:
                    43:c8:7f:53:54:8d:72:3d:6e:ca:b9:92:f8:1d:b0:
                    62:4d:35:a6:38:ea:06:30:49:44:56:0a:b5:21:a8:
                    b2:7f:29:df:07:c3:c7:b6:52:f0:5e:8f:7a:22:10:
                    e9:63:c9:26:f8:63:c4:a8:ae:a6:cc:54:2a:a7:5a:
                    06:2b:0b:98:59:9d:66:1a:5f:04:41:a0:d0:91:40:
                    01:19:d7:91:a2:0c:0e:8d:b7:d6:5f:b6:79:82:7d:
                    c5:bf:d6:25:ae:c8:10:51:5c:29:60:45:94:06:1f:
                    39:c7:36:b2:79:1b:ad:4c:23:d5:e0:9f:fb:13:f8:
                    d5:39:d8:4d:fa:e0:88:da:c0:91:36:a8:81:dc:88:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:44:8E:BE:DC:A5:A3:25:35:35:14:FA:40:36:5B:E8:B2:1E:FF
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33342e302f32342d3234203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:3c:68:eb:16:15:b7:1e:9e:df:6f:d4:e1:0f:d6:d2:d1:
         5b:fb:9a:3a:22:a2:37:00:9e:ab:3a:8e:70:23:7e:9f:64:f2:
         d7:11:67:99:56:bd:41:95:ab:56:76:75:fd:64:aa:b3:c0:9c:
         6a:e9:36:f2:42:ed:f3:86:7c:9d:e1:cb:c8:65:ce:9c:9c:84:
         46:f4:6b:0f:b1:cd:cf:a7:08:92:81:35:35:e0:4f:59:64:0c:
         b1:2b:9f:e7:03:cf:56:2f:55:1b:64:5b:db:98:1a:19:e7:ea:
         aa:91:eb:20:b8:79:fe:02:28:fb:50:86:d0:62:5e:59:ea:18:
         61:02:23:ea:98:7c:a5:77:56:00:d5:1c:e7:1d:50:3d:fd:a3:
         19:64:50:ff:90:f1:83:50:6b:e9:55:2d:b7:2c:8a:41:55:13:
         6c:f5:be:41:66:6b:f1:9f:f5:69:d2:13:e6:42:e5:22:58:62:
         76:ff:18:2d:71:68:5e:d8:b3:d8:e1:3a:20:cc:cb:1b:99:be:
         24:57:7a:07:a1:2b:de:e5:f6:87:1e:41:46:74:40:57:79:eb:
         79:67:b0:c8:e0:d3:78:0e:d7:71:9a:a0:41:11:14:20:44:77:
         72:6c:03:a9:84:83:41:47:1a:bb:4c:91:aa:d6:35:e3:cc:dd:
         ad:da:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:40 2025 by rpki-client