Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136362e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3136362e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          aA1fB62+ySNcAulOO7F9JIfpw1VPTHPQamjHjQvSIco=
Subject key identifier:   B2:21:B0:D0:17:35:EC:47:58:14:26:C0:43:67:9F:76:75:CC:CE:70
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       709AC6C44EC29131EE92C8AD430DEFBBC71CF43F
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136362e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:56 +0000
ROA not before:           Tue 05 Mar 2024 17:42:56 +0000
ROA not after:            Tue 04 Mar 2025 17:47:56 +0000
asID:                     262237
IP address blocks:        161.0.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:c6:c4:4e:c2:91:31:ee:92:c8:ad:43:0d:ef:bb:c7:1c:f4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:56 2024 GMT
            Not After : Mar  4 17:47:56 2025 GMT
        Subject: CN=B221B0D01735EC47581426C043679F7675CCCE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:b8:1c:ac:e8:d5:45:be:ab:16:20:07:85:
                    51:00:82:d2:51:e2:25:cb:20:d1:04:30:66:b1:14:
                    c3:ae:1a:33:be:fb:4f:87:d5:c1:66:d8:2e:64:5d:
                    5a:3b:c8:88:7a:6d:d8:33:ca:7a:e6:4d:b6:b6:67:
                    73:ab:bd:25:ed:3e:f4:d9:49:31:47:95:01:9c:a9:
                    a8:8f:a2:6a:e5:2f:d0:d8:1d:f1:86:e6:00:a3:9e:
                    29:ee:a6:39:51:63:b5:3d:36:ef:73:5b:62:29:2e:
                    e3:21:67:31:86:db:fa:02:7d:b2:de:42:34:dd:00:
                    50:7a:b6:da:c7:ef:e6:c1:05:97:83:2a:26:1c:b3:
                    27:05:50:64:e5:43:74:64:5a:f8:06:a7:b3:db:d8:
                    a3:70:3a:13:d5:6d:74:e7:00:2b:95:50:b5:ee:7e:
                    93:91:69:6c:5f:9a:29:d7:86:35:1e:c2:02:fd:48:
                    1a:fe:26:73:54:43:12:25:91:86:6f:76:2d:0c:82:
                    4b:ed:86:11:9d:33:ac:90:7a:c5:fd:72:5d:4c:4a:
                    0a:eb:08:d9:83:7b:56:7c:86:d3:d9:42:fe:3b:49:
                    79:d1:c3:86:9b:b1:4a:e3:b5:b3:06:bb:d0:71:7b:
                    5c:5b:0f:39:1e:5f:21:9c:19:2d:e8:59:52:9a:55:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:21:B0:D0:17:35:EC:47:58:14:26:C0:43:67:9F:76:75:CC:CE:70
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136362e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:5d:4a:29:07:59:ea:fd:8e:f6:f7:c0:20:e8:e8:06:9f:
         ba:06:ca:c5:04:14:e1:a4:bf:00:85:cd:44:2f:47:ed:8e:98:
         7f:a5:1d:a4:9c:5f:54:0e:d2:86:d4:12:a9:0a:d9:ce:b9:72:
         5b:7c:17:9b:ee:e2:98:ea:19:13:04:bc:34:4f:9e:f3:99:8f:
         ac:94:de:b5:b8:3f:85:e3:b3:d1:26:df:1b:75:41:57:cb:24:
         e3:c8:bc:3a:0f:63:ec:a8:a5:db:ec:25:25:7f:7b:d3:9b:65:
         18:b7:a3:2f:b3:1d:9f:88:5b:62:40:80:23:4f:35:8b:d5:b5:
         2a:73:bd:7d:90:61:62:30:23:e5:75:c9:fc:4a:67:cd:25:81:
         aa:9f:d3:ba:3a:97:78:b4:f0:c5:10:8c:99:c2:4c:74:b0:f9:
         c7:b9:c9:b9:3f:70:a1:0e:d2:7e:0c:12:d1:05:c2:8d:08:0a:
         be:fe:0e:21:c8:c8:19:e6:1a:b9:f5:2e:89:4d:96:ca:f2:01:
         3d:f4:ea:3b:14:51:5d:05:e9:c8:5b:26:7d:a8:27:ea:ce:ee:
         c5:9e:eb:17:80:07:ab:26:95:07:3e:fc:9b:cc:34:fc:d6:38:
         3d:ee:30:22:c5:8a:ef:ca:4c:6c:84:7c:da:af:46:e2:76:4b:
         eb:2b:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org