Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136312e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3136312e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          0CH/yOa0SkBXcnZNj8MgMFHus6RKJ+uRhfYN4OYPBxw=
Subject key identifier:   95:FD:4F:EA:DB:89:7D:04:16:60:31:43:AF:F7:F2:FC:2E:09:16:1E
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       4B94ABB069A05EB339FA7151F429FEEAEC039D1E
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136312e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:48 +0000
ROA not before:           Tue 04 Feb 2025 18:05:48 +0000
ROA not after:            Tue 03 Feb 2026 18:10:48 +0000
asID:                     262237
IP address blocks:        161.0.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:94:ab:b0:69:a0:5e:b3:39:fa:71:51:f4:29:fe:ea:ec:03:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:48 2025 GMT
            Not After : Feb  3 18:10:48 2026 GMT
        Subject: CN=95FD4FEADB897D0416603143AFF7F2FC2E09161E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:16:a2:52:d7:41:be:ad:81:02:ba:63:65:
                    70:b5:dd:96:a9:f7:f8:84:0e:59:7a:99:f5:66:80:
                    7b:07:5e:6c:6b:77:b0:44:10:1d:84:fa:89:16:cc:
                    6f:a3:79:35:44:6d:ff:fc:0b:62:19:81:2b:75:50:
                    37:bf:e2:03:07:97:e1:b8:35:33:d0:c0:ed:df:26:
                    dd:39:0c:9b:48:b5:14:6e:3b:bb:59:47:d6:93:b7:
                    ee:73:06:84:a8:04:72:ef:8b:57:ce:39:12:4a:20:
                    74:70:ca:f8:e5:f2:0e:20:30:e1:21:b0:40:2d:1e:
                    01:55:7b:a9:dd:73:35:00:03:81:2b:85:a8:9a:df:
                    dc:00:3d:6a:35:d8:03:d2:65:6a:6b:31:f5:e4:7b:
                    70:04:ab:d1:27:01:68:93:b6:54:5f:99:4f:9d:f7:
                    24:66:71:1d:17:43:c6:54:76:31:bb:f8:94:83:20:
                    f2:d4:ce:7d:b1:2e:79:3a:14:44:3d:78:15:16:ae:
                    36:34:f6:fe:59:9f:c8:4f:5d:a1:e1:bf:aa:8d:5d:
                    6a:7a:cc:df:e5:d5:da:f7:93:3c:cd:c7:9c:d9:7f:
                    3e:91:f3:3d:3f:27:3a:27:50:ee:42:e7:5e:25:a7:
                    f7:1f:13:8e:75:48:f9:6b:ca:ca:25:39:64:af:90:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FD:4F:EA:DB:89:7D:04:16:60:31:43:AF:F7:F2:FC:2E:09:16:1E
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136312e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:51:90:37:56:11:ac:72:85:47:c1:4d:76:7f:f9:41:10:
         3c:b6:14:46:5a:26:04:68:4a:61:65:31:4e:6e:04:d2:c8:2b:
         6a:74:42:fc:6a:4d:d6:33:7d:55:ff:54:10:fc:09:af:6e:ed:
         dc:d8:9b:74:91:e8:58:f3:88:2e:92:f9:02:8e:99:f9:31:a8:
         40:79:31:97:50:c7:ef:65:f1:02:b8:bb:7e:44:68:ba:0c:1c:
         40:2b:1d:cf:91:57:d0:21:28:27:8e:9e:f8:ce:3c:7b:e0:9b:
         75:c5:49:39:0c:d8:0d:e1:78:0c:b5:11:c2:63:83:17:b0:18:
         36:de:3d:fc:08:d5:1d:bd:04:be:35:7a:5b:5e:81:ac:8f:ca:
         65:f1:62:50:23:bb:1b:0e:e4:07:d0:77:a8:7f:5d:41:6f:b5:
         ef:17:2c:26:b1:2a:03:d1:1c:55:0c:6c:d2:2d:1a:7c:b0:81:
         90:85:ad:84:34:d3:d0:eb:27:84:16:17:5a:9f:71:21:29:f0:
         9f:44:46:6a:1f:06:5f:3b:b7:52:e9:88:45:98:a3:46:af:62:
         4f:a5:9e:a5:07:ae:88:11:40:05:72:45:11:aa:ba:31:f9:ef:
         19:3a:7d:71:24:b1:36:f4:5c:dc:69:d8:26:2a:d1:8f:c8:2b:
         03:76:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:57 2025 by rpki-client