Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa
File:                     3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          vUrJZVzeCoBuhjobXN/gIjYeGrZmIEauhWv25OWigZo=
Subject key identifier:   68:1B:C0:E9:D1:F3:16:B3:A4:12:C9:12:55:B7:E3:7E:CF:A4:25:B8
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       1F45D5853BDE0AFD31DCFEF71461EB7DDA0CFD22
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa
Signing time:             Tue 04 Feb 2025 20:03:09 +0000
ROA not before:           Tue 04 Feb 2025 19:58:09 +0000
ROA not after:            Tue 03 Feb 2026 20:03:09 +0000
asID:                     8075
IP address blocks:        161.131.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:45:d5:85:3b:de:0a:fd:31:dc:fe:f7:14:61:eb:7d:da:0c:fd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: Feb  4 19:58:09 2025 GMT
            Not After : Feb  3 20:03:09 2026 GMT
        Subject: CN=681BC0E9D1F316B3A412C91255B7E37ECFA425B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:cf:3b:61:a5:99:7d:04:1d:82:83:9f:41:
                    8f:e3:d4:5c:89:d0:c6:d9:7b:31:b2:79:8f:f4:f3:
                    f2:a4:73:4d:7e:22:90:3f:86:4f:2c:62:1f:6d:ed:
                    a4:bb:06:e2:85:aa:bc:ef:bd:26:ae:c5:a8:c7:43:
                    37:cd:5d:8d:70:60:62:69:46:a3:8d:ab:ed:c6:46:
                    cf:cf:95:33:fc:e4:e8:48:69:29:2f:90:45:ac:7d:
                    e4:90:e4:33:75:89:5e:4f:ea:1f:e1:6a:07:93:5b:
                    7c:af:8d:b2:f0:cd:39:6c:a7:c5:38:dd:09:35:f5:
                    95:e9:d8:a5:32:8d:f3:3f:b5:0e:af:ab:e1:c5:53:
                    89:38:a0:c2:34:1b:39:c2:71:88:25:55:52:e4:9f:
                    54:e0:5a:47:93:18:24:c8:61:2f:fc:33:84:6b:eb:
                    13:d5:d7:97:41:13:8c:9f:2c:a8:97:42:f5:46:f7:
                    00:a4:35:b2:a2:ea:50:d7:f7:db:26:56:8b:d2:31:
                    9f:63:f7:4d:3e:71:39:24:cc:2f:8e:a5:57:e5:de:
                    9b:bb:52:21:72:6d:71:71:4b:a7:3a:08:56:bf:f2:
                    41:77:cd:e5:4d:9e:f2:c9:ab:fa:64:a7:23:fb:c3:
                    1f:ef:7f:d6:c2:9d:4d:6c:f8:9c:ab:d2:2a:ee:7f:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1B:C0:E9:D1:F3:16:B3:A4:12:C9:12:55:B7:E3:7E:CF:A4:25:B8
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:db:22:9d:ec:41:40:0d:18:94:4a:c9:03:23:80:9e:02:52:
         c1:4b:84:c6:49:dc:0e:b5:dc:23:43:e4:67:69:18:43:f0:64:
         12:51:00:42:13:64:5d:7f:f3:79:35:18:77:a2:86:1a:49:62:
         94:4d:df:8b:ce:80:37:65:cd:51:d3:c3:77:cb:e2:e0:1d:c1:
         fe:4a:25:24:89:0c:6f:83:3b:d1:32:c1:0c:b3:f9:d7:3e:7a:
         52:c6:04:a1:c4:7c:d0:e4:9e:a2:59:b9:3d:17:6e:9e:4b:55:
         75:f4:eb:22:a2:2b:83:dd:ff:d3:c1:94:a3:74:1f:20:d8:85:
         43:39:06:cd:70:63:c5:46:6f:02:ec:3b:65:a7:13:a4:69:4d:
         2c:77:d6:5a:29:3e:59:0f:68:95:36:a6:9a:c7:1f:c9:2c:75:
         ca:88:8c:72:e9:85:56:02:b9:42:5d:0c:8b:a2:45:e7:9e:f2:
         29:7e:f0:90:06:ae:24:2f:8d:dd:69:6a:63:d5:e5:9d:56:4c:
         ab:e4:ce:d2:35:53:2d:b3:e2:24:bc:c6:a5:4e:fe:e8:ff:fd:
         b9:0a:4f:b3:fd:73:66:fb:a1:99:e2:bf:74:38:5b:6e:1e:02:
         39:32:94:a8:33:bd:a1:23:16:51:53:fc:e0:73:5c:c1:e3:51:
         6f:eb:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:58:06 2025 by rpki-client