Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3136312e302e38302e302f32302d3230203d3e203237373435.roa
File:                     3136312e302e38302e302f32302d3230203d3e203237373435.roa (raw, json)
Hash identifier:          IM66u9RaScr/by0vYJ6mqrhpFoO47/Isp6oYbW4ujnU=
Subject key identifier:   CA:AC:03:04:2E:71:E0:C7:4C:0D:B9:83:22:CA:FA:FD:C2:25:77:3F
Certificate issuer:       /CN=15DB6B388486161B93957759E07BEB14CE6D932F
Certificate serial:       7A289739E74EE4F6B2548A2BF9CAA12B59C248B4
Authority key identifier: 15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3136312e302e38302e302f32302d3230203d3e203237373435.roa
Signing time:             Tue 04 Feb 2025 18:32:49 +0000
ROA not before:           Tue 04 Feb 2025 18:27:49 +0000
ROA not after:            Tue 03 Feb 2026 18:32:49 +0000
asID:                     27745
IP address blocks:        161.0.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:28:97:39:e7:4e:e4:f6:b2:54:8a:2b:f9:ca:a1:2b:59:c2:48:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DB6B388486161B93957759E07BEB14CE6D932F
        Validity
            Not Before: Feb  4 18:27:49 2025 GMT
            Not After : Feb  3 18:32:49 2026 GMT
        Subject: CN=CAAC03042E71E0C74C0DB98322CAFAFDC225773F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ed:9c:2a:aa:53:a3:22:40:b1:b0:dc:e4:2c:
                    b3:bb:91:ca:79:38:59:a4:2a:e0:c6:c1:2c:a2:50:
                    7c:01:5f:ec:7c:85:9b:20:91:68:16:93:c2:4f:22:
                    13:89:f3:50:e6:50:26:ba:72:3a:c7:9f:67:4c:46:
                    c5:44:81:db:0a:60:7d:b3:fa:6f:9e:33:5e:4a:4d:
                    09:28:34:79:d3:7a:e1:34:4e:f5:02:22:63:15:57:
                    f3:ac:47:3e:32:c9:34:a0:5b:dd:c3:89:2c:93:86:
                    f2:f7:e1:0a:cb:8f:4b:62:a1:4f:89:32:6e:10:a9:
                    13:5a:b0:c9:a1:83:5c:a3:99:47:2b:88:65:f0:4e:
                    64:fd:1f:3e:d0:2f:0c:f7:9b:80:2b:14:9a:4a:5d:
                    2d:c6:28:10:8e:37:95:0a:cb:36:c1:2a:cf:cd:d7:
                    8c:e7:eb:14:0b:ed:3d:56:46:86:ba:6b:e4:d0:7e:
                    72:1e:62:18:d3:b0:b8:21:1f:ba:68:59:59:82:ac:
                    2d:72:c9:72:3c:81:3f:a7:ba:4c:f0:a9:f7:c6:d1:
                    ae:b7:c1:f6:86:f6:8a:3a:49:48:87:39:c9:80:d3:
                    95:6f:f4:d3:39:a4:0e:95:e6:84:4e:03:e9:42:b8:
                    c2:ea:0c:cc:ff:32:2e:9f:0c:0c:67:e8:7a:96:82:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:03:04:2E:71:E0:C7:4C:0D:B9:83:22:CA:FA:FD:C2:25:77:3F
            X509v3 Authority Key Identifier:
                keyid:15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3136312e302e38302e302f32302d3230203d3e203237373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:53:ed:51:ff:16:fe:f7:60:13:7a:46:ac:fe:a6:c5:b1:
         37:bf:1c:81:80:15:79:4c:8e:1e:23:23:53:9a:9e:b3:e4:d6:
         f2:22:1a:79:70:18:c6:34:15:c8:2a:44:be:9d:de:55:93:8b:
         0d:f8:3e:04:c0:22:39:cc:bb:1f:a0:40:92:30:b3:95:4b:5e:
         14:71:06:12:21:21:7f:48:81:75:ab:09:88:d3:dc:51:68:1c:
         62:dd:3b:17:20:e2:e9:ab:15:0c:e9:26:13:6c:08:e3:e5:df:
         1b:c4:5c:da:ed:17:bc:be:b9:8a:99:36:8a:57:d3:b1:74:58:
         b7:26:a0:57:bc:2c:16:13:3e:c6:1e:dc:85:65:4c:f8:ce:c6:
         20:59:72:8a:02:63:b4:80:15:db:82:c1:44:c1:a4:ae:62:e5:
         b8:68:2b:ea:5a:66:c9:0e:bc:97:9e:42:d6:b5:30:c1:2a:a9:
         53:a9:ef:1c:89:a8:54:52:e6:02:df:36:66:53:12:a4:34:e1:
         af:92:5e:0b:f0:fd:22:e4:c9:f5:f9:03:f4:7d:3e:88:11:0a:
         c5:6b:97:9e:01:7e:e9:1c:8c:95:fa:c5:be:70:9d:fa:b0:cd:
         8f:9c:e9:df:5f:de:be:f5:48:c7:65:b7:76:ff:65:6f:f5:11:
         56:91:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:03 2025 by rpki-client