Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137322e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3137322e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          bYFzIHX/T++Qd4iA1z0hy5N88zEryyg2xEEnxW6AZbQ=
Subject key identifier:   B1:97:A9:61:B3:E6:3A:3F:99:FE:A8:30:EF:AB:60:C4:1C:5F:47:7C
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       2E45908FEB6CFD18C3FABE24DA5D0BE801527121
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137322e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:47 +0000
ROA not before:           Tue 05 Mar 2024 17:42:47 +0000
ROA not after:            Tue 04 Mar 2025 17:47:47 +0000
asID:                     262237
IP address blocks:        161.0.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:45:90:8f:eb:6c:fd:18:c3:fa:be:24:da:5d:0b:e8:01:52:71:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:47 2024 GMT
            Not After : Mar  4 17:47:47 2025 GMT
        Subject: CN=B197A961B3E63A3F99FEA830EFAB60C41C5F477C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:02:ca:69:46:20:6a:f4:12:81:84:33:ba:
                    e3:1c:8d:ee:95:ee:de:87:9e:ce:c2:07:3b:b9:c6:
                    a7:57:0d:1b:30:db:6c:0d:2a:5f:fd:df:ed:e4:a1:
                    74:3c:7e:4d:32:3b:4f:2b:3a:fa:bb:85:1c:7a:c6:
                    07:7e:95:b5:1f:59:29:49:49:23:e7:3e:74:79:1e:
                    ea:9e:80:9b:69:b6:cf:10:7b:bf:c1:5f:02:db:27:
                    a4:0e:78:2a:45:90:a6:56:0d:19:d0:d6:05:9a:a4:
                    d0:a3:6f:fc:3d:f2:5c:6f:cf:b9:5e:73:8a:82:5d:
                    11:9a:15:02:bf:42:15:04:d2:fd:0e:8d:36:af:25:
                    af:36:9e:d8:d7:eb:56:d7:bd:cf:47:ed:63:14:a2:
                    dd:4c:61:66:09:ad:b1:72:6c:43:2c:95:1a:fe:8a:
                    b2:c0:83:7e:2e:c0:1a:2e:41:a2:ba:84:ef:bb:67:
                    55:68:f8:26:bb:d6:79:cc:f6:e7:6f:70:c8:53:a0:
                    9a:41:76:1d:0e:bf:5a:d6:b8:9e:33:f8:8c:fc:1e:
                    6d:74:27:45:86:59:42:6c:84:57:99:e4:8a:f2:cc:
                    d0:d7:71:a6:cb:22:26:18:79:ef:ad:da:c3:9a:ba:
                    03:5b:a4:d6:fa:ed:00:08:fd:5a:e6:18:c1:83:cc:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:97:A9:61:B3:E6:3A:3F:99:FE:A8:30:EF:AB:60:C4:1C:5F:47:7C
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137322e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:6a:a1:65:5b:55:b8:a5:14:c7:1c:ee:fd:c1:91:89:08:
         d9:b5:ea:11:19:2b:02:39:7d:bf:d5:8a:99:19:db:04:37:57:
         8d:22:5d:ef:09:0b:61:32:b3:85:5c:75:78:ba:96:56:ff:c3:
         db:f3:a7:8d:48:6c:d0:48:b1:b3:05:09:6c:18:59:f0:95:1d:
         b9:99:20:26:50:68:12:78:45:e6:cf:e7:9b:03:a2:bb:18:79:
         7a:cb:85:99:4a:af:bb:e9:7e:f7:34:ad:4d:ed:8d:f4:c8:d3:
         04:4b:4d:08:20:22:2f:8f:3f:86:1e:34:af:42:24:2d:21:d7:
         ac:e9:a9:a2:22:e0:a6:8b:1d:3b:04:7e:84:43:be:29:a8:68:
         50:5e:b8:87:ea:0a:6d:70:51:98:a5:1d:a0:b5:7a:85:26:a7:
         98:96:5b:b6:11:69:5c:83:3f:54:4f:59:be:92:58:13:9c:2e:
         a2:59:f9:53:2e:b4:f6:41:4d:31:76:cc:b2:bf:d9:05:94:03:
         ef:d6:6e:17:28:06:14:c3:71:6a:5f:b0:ad:ce:bc:77:7c:e9:
         a5:5d:ec:f1:54:63:10:c2:a9:6f:a8:ed:a4:86:6d:fc:e7:b7:
         40:f3:47:3e:ac:54:da:5e:21:36:64:0d:40:29:c6:0e:32:48:
         f2:57:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:16:37 2024 by rpki-client on console-fra.rpki-client.org