Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3136342e302f32342d3234203d3e203134373935.roa
File:                     3136312e3133312e3136342e302f32342d3234203d3e203134373935.roa (raw, json)
Hash identifier:          dSqaANHwO8GX6MtGKsLrbK1cqp5g9GlfoQnHPTarpYs=
Subject key identifier:   B4:8E:28:F7:B2:73:95:EF:E4:F1:9F:8B:57:31:5D:88:38:FE:CF:DC
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       5706B7D7386E54EFDEC7912A786ADB5D981DCAA5
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3136342e302f32342d3234203d3e203134373935.roa
Signing time:             Tue 04 Feb 2025 20:03:07 +0000
ROA not before:           Tue 04 Feb 2025 19:58:07 +0000
ROA not after:            Tue 03 Feb 2026 20:03:07 +0000
asID:                     14795
IP address blocks:        161.131.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:b7:d7:38:6e:54:ef:de:c7:91:2a:78:6a:db:5d:98:1d:ca:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: Feb  4 19:58:07 2025 GMT
            Not After : Feb  3 20:03:07 2026 GMT
        Subject: CN=B48E28F7B27395EFE4F19F8B57315D8838FECFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:b2:df:ff:65:5d:c2:1c:de:98:c2:c2:7a:
                    e1:91:9f:19:bb:83:df:ae:5f:35:05:0a:95:1c:78:
                    01:32:a4:bf:5c:c8:a9:6a:b5:71:e9:f5:17:56:18:
                    d2:3e:b9:66:c8:4b:bc:bf:41:f7:86:21:81:84:a7:
                    b2:6d:23:c7:d2:8a:d3:10:d3:5e:b4:50:3f:3f:41:
                    fb:2b:4d:17:41:0b:50:98:fa:ae:31:ea:03:34:1e:
                    9a:6b:7d:72:22:5c:d8:8a:64:11:1f:13:f4:d0:54:
                    a2:a3:46:6a:78:8c:cf:a5:3f:25:2c:41:86:9d:a8:
                    25:73:a5:c2:59:1a:95:d3:76:09:48:c1:27:51:1f:
                    2c:c3:15:4b:0a:92:21:82:e8:73:bb:f2:48:b8:99:
                    35:65:b1:e9:24:a8:3f:e3:5b:20:02:3b:f2:3d:27:
                    0b:c2:9f:e5:60:55:7a:6c:8b:df:46:6d:e9:e1:21:
                    6f:9c:7c:6c:4c:28:af:5c:da:c9:9f:e4:b2:16:94:
                    61:28:10:17:a5:27:ae:76:1f:61:f0:62:f9:14:00:
                    ef:2b:8b:3f:b1:1b:7c:04:38:50:8a:7b:6c:d4:45:
                    16:8a:ee:6b:1e:a7:c8:ed:76:df:fb:e5:b9:f4:c1:
                    b7:e9:78:4d:01:46:81:11:e6:d2:f5:21:51:a4:f0:
                    cc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8E:28:F7:B2:73:95:EF:E4:F1:9F:8B:57:31:5D:88:38:FE:CF:DC
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3136342e302f32342d3234203d3e203134373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:4b:8b:f3:f7:9c:31:52:31:83:3e:b4:a1:22:4f:65:1a:
         e9:ee:c2:31:72:6a:96:18:1c:43:85:cd:a2:d4:72:42:49:2c:
         e7:d4:df:4d:a2:6f:d6:c8:b7:63:9d:d2:a1:b6:b7:f4:10:98:
         64:7a:79:76:30:1f:1d:84:a4:15:c0:c4:a4:20:95:51:a0:af:
         52:df:69:e7:8e:36:da:fe:2a:00:47:f2:7c:b4:f5:9d:e3:76:
         26:56:b8:9f:df:fe:22:ab:3e:72:4a:76:af:5c:c4:46:37:96:
         db:1f:83:8c:44:fa:1c:9b:38:c5:fa:fa:52:3e:96:05:18:2e:
         42:63:9a:33:d9:28:b9:5e:6a:ae:c4:de:1b:81:c0:8e:d3:48:
         ae:24:45:2b:26:56:d0:d8:e1:15:87:bf:5f:19:4e:c5:ae:ee:
         30:59:aa:e7:c5:f6:f0:5c:08:9b:67:35:f6:f7:bb:87:bb:8e:
         ad:e8:a2:60:e4:f0:95:2c:60:63:9d:42:57:d6:47:e3:92:c0:
         e2:1f:8c:53:91:7e:b7:94:e7:32:55:34:c3:18:98:63:2a:d3:
         23:cb:c5:04:bb:9d:25:76:5b:5e:07:72:31:cf:ae:b0:c5:51:
         a5:89:79:bf:84:8c:d1:05:a8:02:85:e2:6f:17:e9:a7:3f:12:
         e1:b8:b9:66
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVwa31zhuVO/ex5EqeGrbXZgdyqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3RUNGODNEMUFENzJBRERCRTc0ODEzQ0YzNDBGMUU1
QkRBMDIzOTAeFw0yNTAyMDQxOTU4MDdaFw0yNjAyMDMyMDAzMDdaMDMxMTAvBgNV
BAMTKEI0OEUyOEY3QjI3Mzk1RUZFNEYxOUY4QjU3MzE1RDg4MzhGRUNGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoo7Lf/2VdwhzemMLCeuGRnxm7
g9+uXzUFCpUceAEypL9cyKlqtXHp9RdWGNI+uWbIS7y/QfeGIYGEp7JtI8fSitMQ
0160UD8/QfsrTRdBC1CY+q4x6gM0HpprfXIiXNiKZBEfE/TQVKKjRmp4jM+lPyUs
QYadqCVzpcJZGpXTdglIwSdRHyzDFUsKkiGC6HO78ki4mTVlsekkqD/jWyACO/I9
JwvCn+VgVXpsi99GbenhIW+cfGxMKK9c2smf5LIWlGEoEBelJ652H2HwYvkUAO8r
iz+xG3wEOFCKe2zURRaK7msep8jtdt/75bn0wbfpeE0BRoER5tL1IVGk8MwBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtI4o97Jzle/k8Z+LVzFdiDj+z9wwHwYDVR0j
BBgwFoAU+X7Pg9Gtcq3b50gTzzQPHlvaAjkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzQ0QkNGRTA0OEUwRkFFMjBGQUJEQTc0NzYxNzBCMUVE
MUY4NkYwRDZENTk4NUFBOTNFMTFDOUNBODY4QjE5LzAvRjk3RUNGODNEMUFENzJB
RERCRTc0ODEzQ0YzNDBGMUU1QkRBMDIzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTdFQ0Y4M0QxQUQ3MkFEREJF
NzQ4MTNDRjM0MEYxRTVCREEwMjM5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjc0NEJDRkUwNDhFMEZBRTIwRkFCREE3NDc2MTcwQjFFRDFGODZGMEQ2
RDU5ODVBQTkzRTExQzlDQTg2OEIxOS8wLzMxMzYzMTJlMzEzMzMxMmUzMTM2MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYOk
MA0GCSqGSIb3DQEBCwUAA4IBAQA+ZUuL8/ecMVIxgz60oSJPZRrp7sIxcmqWGBxD
hc2i1HJCSSzn1N9Nom/WyLdjndKhtrf0EJhkenl2MB8dhKQVwMSkIJVRoK9S32nn
jjba/ioAR/J8tPWd43YmVrif3/4iqz5ySnavXMRGN5bbH4OMRPocmzjF+vpSPpYF
GC5CY5oz2Si5XmquxN4bgcCO00iuJEUrJlbQ2OEVh79fGU7Fru4wWarnxfbwXAib
ZzX297uHu46t6KJg5PCVLGBjnUJX1kfjksDiH4xTkX63lOcyVTTDGJhjKtMjy8UE
u50ldlteB3Ixz66wxVGliXm/hIzRBagCheJvF+mnPxLhuLlm
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:36:13 2025 by rpki-client