Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33382e302f32342d3234203d3e20323637373839.roa
File:                     3136312e32322e33382e302f32342d3234203d3e20323637373839.roa (raw, json)
Hash identifier:          a45dHkWRG8Kwss8FwtYAaEKEVJzTV4FulAjWpFWRT4A=
Subject key identifier:   F7:54:78:9D:7D:61:75:9A:CA:A8:A0:BF:6C:43:5F:12:A6:61:31:69
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       1D4F3A00F457C8C1D2F5CE1DC244448C3BF915E5
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33382e302f32342d3234203d3e20323637373839.roa
Signing time:             Tue 05 Mar 2024 18:20:58 +0000
ROA not before:           Tue 05 Mar 2024 18:15:58 +0000
ROA not after:            Tue 04 Mar 2025 18:20:58 +0000
asID:                     267789
IP address blocks:        161.22.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4f:3a:00:f4:57:c8:c1:d2:f5:ce:1d:c2:44:44:8c:3b:f9:15:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Mar  5 18:15:58 2024 GMT
            Not After : Mar  4 18:20:58 2025 GMT
        Subject: CN=F754789D7D61759ACAA8A0BF6C435F12A6613169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:ee:4e:24:7a:ca:0f:45:23:c7:2b:97:02:
                    99:a8:30:39:31:43:fd:b5:ca:8a:34:29:20:c1:79:
                    ec:a8:cf:d4:18:08:62:81:28:e0:94:92:58:38:1c:
                    d9:24:f5:1a:6d:80:2b:2f:08:b7:ab:98:5e:84:1e:
                    06:5c:b6:1d:f7:d0:67:03:ef:ca:38:ec:d4:1e:70:
                    69:cd:91:b8:11:54:ef:3a:9c:74:72:c3:c7:94:a9:
                    6d:4d:68:3b:9e:ab:c7:12:8d:db:8d:bd:bf:3a:37:
                    9c:e2:05:14:50:4e:61:0a:e3:a4:48:73:0d:cb:19:
                    d9:2e:54:92:31:ca:a5:c9:d2:e3:42:a6:80:b1:76:
                    3f:04:15:23:f6:4b:49:2f:cd:f4:d4:16:4c:a7:be:
                    54:6d:f5:4c:3f:28:a3:f3:7f:4f:0d:97:b3:cd:2b:
                    20:02:4c:d0:01:ee:2b:04:74:f0:ed:27:4e:2f:e9:
                    ef:a0:7b:bd:48:5d:23:a2:71:b4:fa:7a:a1:60:a7:
                    73:7b:b4:41:2a:c4:d2:a7:a8:b3:32:67:f3:42:02:
                    41:b3:f1:0d:ad:e0:b9:75:b5:ff:c2:a5:77:27:1c:
                    a1:9a:8b:51:77:87:be:82:d0:9a:45:27:7a:3d:63:
                    6e:7e:3e:59:c5:c5:5e:8f:86:db:74:ef:fe:44:62:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:78:9D:7D:61:75:9A:CA:A8:A0:BF:6C:43:5F:12:A6:61:31:69
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33382e302f32342d3234203d3e20323637373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:d1:ff:06:29:26:aa:97:1d:2a:77:05:05:53:d8:75:b8:
         57:f5:73:16:fb:9d:b6:d6:b7:18:82:ee:09:1c:4c:d8:d7:26:
         de:ee:16:ef:4b:d5:5c:fa:7f:49:31:a7:71:cb:ea:b4:20:a0:
         91:64:b0:02:b2:ca:68:6b:5f:7b:24:aa:91:58:17:3f:b4:d2:
         e5:75:f7:51:0d:91:08:60:d1:57:2d:0c:b0:3a:5c:66:f5:55:
         0f:ad:39:11:77:bd:cf:8e:c6:03:13:65:e9:69:46:1e:b2:df:
         31:03:d0:22:59:bd:85:ae:2c:93:29:f9:a5:f3:ac:ca:f2:1d:
         25:ff:82:2c:4b:fa:75:51:6d:24:d2:82:c7:5d:2e:7f:62:4c:
         ee:bf:c3:88:9c:31:a2:4f:a5:ec:8c:f1:b5:3e:b7:03:75:07:
         fd:c8:ab:f0:67:26:c6:71:cf:da:62:67:c7:7f:c3:fd:c5:f0:
         1b:83:77:5b:84:c1:db:bb:db:6f:9e:82:c5:ce:11:3f:ee:01:
         21:f0:d4:08:2f:b3:16:4b:71:b3:df:9b:0f:7b:73:fd:19:3f:
         2f:6f:58:2b:2e:8d:90:79:e8:16:5a:de:43:b2:ec:29:43:c4:
         96:af:1d:fe:64:b3:df:98:2d:5a:40:6e:65:63:f1:5f:fa:24:
         1b:a1:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org