Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137312e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3137312e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          FgAB50X8XkUxN2c8gvWy5FrXjzQIa0mhSBTdQfCPXpQ=
Subject key identifier:   73:13:15:ED:9A:B2:62:06:6C:7F:AC:4D:8C:46:CA:C8:4E:04:78:58
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       0BC85E2E787E5465BCC2F2ED72BFD1E5199F2D2C
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137312e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:49 +0000
ROA not before:           Tue 04 Feb 2025 18:05:49 +0000
ROA not after:            Tue 03 Feb 2026 18:10:49 +0000
asID:                     262237
IP address blocks:        161.0.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c8:5e:2e:78:7e:54:65:bc:c2:f2:ed:72:bf:d1:e5:19:9f:2d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:49 2025 GMT
            Not After : Feb  3 18:10:49 2026 GMT
        Subject: CN=731315ED9AB262066C7FAC4D8C46CAC84E047858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:4f:52:ac:bc:e1:b6:a2:48:16:95:dd:5f:
                    c3:26:36:23:8d:c3:12:aa:a7:13:88:ea:7c:a1:aa:
                    7d:ac:5e:28:56:31:82:f8:23:16:e7:b3:a0:12:e7:
                    e3:7f:11:b3:c4:c3:2d:0a:62:6e:d3:5a:a4:e6:a1:
                    55:f9:70:bc:35:76:d8:44:ce:d3:41:80:00:f6:d6:
                    32:b9:57:bb:0b:9f:1c:72:11:18:a0:4f:a9:04:06:
                    6d:56:80:df:2e:c4:2d:d4:04:44:82:5a:f5:d0:d9:
                    ce:ee:6e:0d:e8:14:eb:38:2e:e7:8e:80:95:d8:46:
                    5b:22:ef:81:e1:3b:78:bf:67:e2:6c:df:5b:2c:b6:
                    5f:d1:6e:bb:07:9d:95:3e:98:80:dd:a6:9c:f2:7a:
                    66:d9:fb:68:0b:c4:96:e3:46:6b:65:33:e1:2f:5a:
                    33:52:7f:f4:da:7a:2a:b6:04:b9:f5:0b:16:94:a5:
                    44:9a:44:01:67:6c:90:72:91:48:f9:1f:64:01:dc:
                    73:a8:45:a5:76:65:10:1a:9a:26:42:0e:1c:0d:3a:
                    16:19:2f:cb:08:1c:b4:19:5d:f3:99:50:06:25:17:
                    71:1a:c3:24:ee:74:83:78:19:86:32:3a:88:0a:ca:
                    14:40:d4:d2:37:98:5a:1e:c7:d7:61:2d:9a:70:e1:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:13:15:ED:9A:B2:62:06:6C:7F:AC:4D:8C:46:CA:C8:4E:04:78:58
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137312e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:31:80:a0:5e:1f:d9:88:5b:a3:4e:20:88:71:a5:18:64:
         ac:0d:76:52:bc:b4:5a:c0:2a:00:74:84:06:b8:df:c9:2b:da:
         4c:a3:32:38:0b:4b:3a:53:eb:4e:c7:6f:2d:f8:55:f2:b4:81:
         4c:a4:fe:02:0d:ac:e7:67:b5:5a:76:24:6e:15:20:eb:18:db:
         b2:b9:01:3b:1c:70:91:d7:af:32:45:95:a2:78:d4:f3:f5:4d:
         ff:3b:bc:73:cd:1a:89:29:fc:74:17:26:6a:67:2e:79:7d:f2:
         6b:5e:69:01:6e:d9:e7:94:6d:53:32:13:d1:a0:57:8a:d1:f3:
         d3:75:0b:57:8e:d0:4e:0b:61:af:d7:f9:47:77:74:1f:1d:a6:
         14:62:c8:8b:94:63:1e:8a:4f:e7:8b:27:89:d4:3f:f0:ef:a9:
         81:8f:93:0d:aa:17:68:a6:0f:45:cd:d1:7d:d2:f4:6c:d2:7e:
         01:67:31:d4:46:9d:7e:04:ac:6d:48:da:03:cb:11:b8:ae:fd:
         36:a1:b4:c3:7f:b1:81:3c:9f:e3:97:df:3e:50:b1:c8:b6:4c:
         0f:34:6e:72:62:0a:9d:7e:93:73:00:5f:88:fb:12:3d:3d:65:
         ce:04:65:02:5c:a3:33:52:c9:03:6d:d3:cd:e0:8a:d3:29:3f:
         69:1d:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:27:52 2025 by rpki-client