Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136322e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3136322e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          TWesBk16Fzpnh1PUOB6FmBWMuZeWC70ZcvlxzOG+J0M=
Subject key identifier:   BF:63:CA:98:23:13:09:05:2A:87:67:C7:44:7A:1F:EF:EE:6F:E4:0E
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       0F3FE6555A1A313D91C107EACD1C2CF575FC1472
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136322e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:47 +0000
ROA not before:           Tue 04 Feb 2025 18:05:47 +0000
ROA not after:            Tue 03 Feb 2026 18:10:47 +0000
asID:                     262237
IP address blocks:        161.0.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3f:e6:55:5a:1a:31:3d:91:c1:07:ea:cd:1c:2c:f5:75:fc:14:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:47 2025 GMT
            Not After : Feb  3 18:10:47 2026 GMT
        Subject: CN=BF63CA98231309052A8767C7447A1FEFEE6FE40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:92:6f:63:ca:1b:9e:0a:4e:75:4e:5c:a8:
                    7b:12:21:2f:b6:ff:7d:0b:3c:42:c7:77:56:81:6e:
                    a9:7a:cc:07:97:cd:79:1e:a1:88:0f:90:46:cf:7c:
                    20:d0:42:40:ba:7d:8b:aa:4a:e5:b8:e8:7f:a3:99:
                    fc:ee:62:c3:64:f5:10:48:56:ec:90:f0:44:35:b7:
                    c6:cf:d0:1e:e9:ea:40:42:71:a5:cf:9c:b2:bd:d1:
                    6a:37:b2:43:e5:6a:65:a0:b2:4d:25:4f:a2:18:59:
                    99:e1:71:a2:84:d0:0f:e1:95:b6:24:df:3b:63:6d:
                    52:bc:ce:1f:da:e4:8c:c0:49:44:b2:09:13:f0:ed:
                    f2:40:60:b9:fb:ce:8a:03:ac:b7:dd:7b:d5:05:ea:
                    59:a2:f6:41:da:a0:49:c9:d7:82:e1:df:ff:e7:b2:
                    76:bd:3c:c7:64:3d:a1:61:86:e2:85:c5:56:01:77:
                    3a:46:2a:c0:eb:a8:6d:8a:24:bd:3a:f1:53:d5:3f:
                    ce:54:73:38:a1:21:7d:5d:63:bb:20:e0:fb:4d:66:
                    51:18:45:95:12:66:fa:e1:38:48:36:25:e3:80:9b:
                    c5:94:9b:41:ce:c4:44:f8:79:5b:d6:2e:e3:ac:32:
                    cb:e0:9f:57:71:2c:88:71:f1:79:6a:c8:75:2e:5b:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:CA:98:23:13:09:05:2A:87:67:C7:44:7A:1F:EF:EE:6F:E4:0E
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136322e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:89:76:27:45:fd:a8:e1:be:55:af:d5:12:3e:f3:1d:94:ff:
         36:14:62:c1:28:df:74:f5:d5:24:ed:42:65:2f:78:a2:46:b4:
         39:e1:dd:48:f3:11:a5:0b:1b:9b:75:f6:61:77:79:86:20:bc:
         5a:e4:cd:c0:8b:3c:22:13:5b:52:a3:98:ed:d5:f6:29:9d:0d:
         11:74:72:bc:6a:47:3f:77:13:c5:0f:60:07:d3:21:d5:42:49:
         03:0a:11:3d:0e:c8:e0:c9:4e:58:90:8d:41:6c:72:b9:6e:67:
         86:3a:37:fc:d8:f2:93:39:e4:a9:cd:b0:7e:af:17:f6:93:3c:
         1c:c7:e4:7b:8c:05:2f:98:c2:24:18:ef:2b:cd:e9:04:fb:c6:
         86:04:6d:62:97:9c:f5:6a:c7:a8:f7:cc:93:db:3d:98:d0:c7:
         bf:6a:7b:23:0c:0b:be:dd:54:92:71:f7:3a:eb:98:51:ae:e5:
         d3:b1:d8:be:98:ac:39:6a:35:61:27:c9:64:cf:02:22:56:96:
         c5:c9:53:58:53:57:45:06:a1:2e:81:3a:45:ca:91:6c:4c:79:
         ee:72:20:f1:13:13:b1:87:b7:b6:5c:19:17:80:83:76:ef:2e:
         c4:57:7d:c0:73:e8:60:96:68:1e:70:b5:ef:be:2b:db:f7:fa:
         13:a3:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:28:10 2025 by rpki-client