Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33372e302f32342d3234203d3e20323732383039.roa
File:                     3136312e32322e33372e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier:          cnKAgqHAYcKfIOBTZo8LTFo1rzo3C5o6M1rNTEXjie8=
Subject key identifier:   B5:4A:75:D3:11:1E:25:8C:C3:14:EF:AF:0D:F1:11:ED:89:8E:1F:F6
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       5DA2EFD37FF1C7261B7858914B5D5A9356ECD414
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33372e302f32342d3234203d3e20323732383039.roa
Signing time:             Thu 16 May 2024 15:00:00 +0000
ROA not before:           Thu 16 May 2024 14:55:00 +0000
ROA not after:            Thu 15 May 2025 15:00:00 +0000
asID:                     272809
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a2:ef:d3:7f:f1:c7:26:1b:78:58:91:4b:5d:5a:93:56:ec:d4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: May 16 14:55:00 2024 GMT
            Not After : May 15 15:00:00 2025 GMT
        Subject: CN=B54A75D3111E258CC314EFAF0DF111ED898E1FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:87:e2:bb:90:1d:53:87:b6:d0:e3:72:1e:72:
                    0b:97:3e:0b:2e:35:85:05:a9:bd:fe:c7:da:97:ce:
                    20:e2:fa:13:4c:8a:75:00:69:3a:94:57:59:e8:3d:
                    59:01:81:4e:ee:96:d4:3a:e3:86:3b:7d:9f:38:94:
                    70:c1:e9:d2:a7:ec:16:9c:df:8f:9f:97:55:36:a7:
                    19:98:47:a1:01:63:4d:02:18:8c:80:d3:6f:03:e3:
                    d2:86:4b:8e:96:47:01:39:77:2b:74:43:13:db:ba:
                    7d:19:9d:7f:51:03:5a:d1:7f:6c:56:4d:e1:74:d2:
                    13:be:83:d0:31:0b:99:3a:99:a1:9f:ee:1e:e8:d7:
                    5b:0c:79:c8:de:67:1f:67:e1:08:11:f5:d1:98:43:
                    af:60:e1:cf:3c:49:db:93:af:00:b2:8e:e3:2f:8a:
                    95:99:c6:3b:1a:9b:b4:76:03:c5:86:15:75:97:c9:
                    ce:70:9a:98:1e:58:1f:fe:69:06:79:85:d5:b3:75:
                    ba:c9:31:ba:91:80:44:06:58:60:5a:35:fe:91:c6:
                    88:80:e9:0f:81:12:8a:82:da:e1:61:68:be:cd:d7:
                    c2:34:61:b1:7f:d0:0b:a9:43:57:2c:5a:c8:21:2e:
                    9a:d4:b1:6d:c1:d8:7e:84:b4:88:32:7b:f6:f9:a8:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:75:D3:11:1E:25:8C:C3:14:EF:AF:0D:F1:11:ED:89:8E:1F:F6
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33372e302f32342d3234203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:67:c7:ef:4b:f9:98:3f:e7:0d:72:ce:72:d3:1e:41:80:
         8c:0e:60:ab:bc:71:bb:d4:a9:ec:f3:2b:18:d0:71:f6:21:85:
         51:14:b9:8b:6d:da:94:54:41:e6:c1:53:d7:6b:23:e9:c4:e2:
         88:4f:b0:a2:3b:dc:7b:65:ba:d6:41:f4:dd:70:f5:fc:e1:22:
         1f:85:e5:69:e9:db:a7:ef:3b:ff:01:4a:ce:46:7b:83:5b:da:
         4a:79:a8:de:f3:fe:39:48:96:99:a9:27:77:f3:73:0f:42:ee:
         14:fd:09:6e:d2:24:75:8e:cd:08:7c:6c:2d:31:03:b5:ca:3a:
         bd:85:36:bf:86:15:ed:c4:0d:e1:8a:ca:ad:11:9e:e9:45:4d:
         ff:26:9d:26:ed:5a:4c:e0:e9:51:e2:b8:53:aa:2b:4e:89:8b:
         1c:9e:46:db:23:57:5b:db:c6:3a:0c:6b:f8:5c:b8:1c:4d:d9:
         d7:3c:d9:fe:d8:a6:ef:d1:87:3d:ae:50:b9:f8:f5:8d:09:af:
         10:75:00:db:be:fb:10:a0:13:f1:1b:30:fe:f6:e3:c2:b2:7e:
         be:3a:ef:3f:ca:1e:c6:62:28:e8:1c:2d:9c:8b:05:84:e9:c6:
         e8:78:f6:45:58:cb:25:0d:a7:2d:90:d5:aa:38:62:5c:98:35:
         6b:01:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:42:14 2024 by rpki-client on console-ams.rpki-client.org