Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137332e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3137332e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          VC3hzyAtRtV7ePkrL75g9oqqXXVsCm97eWOF+5CBcv4=
Subject key identifier:   50:E4:52:16:5F:48:7F:89:AA:07:91:1F:97:DD:F1:E6:64:F5:7A:DF
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       0524C68507CF46AD7F0D4872FB8A0A3E73C1D2C6
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137332e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:49 +0000
ROA not before:           Tue 04 Feb 2025 18:05:49 +0000
ROA not after:            Tue 03 Feb 2026 18:10:49 +0000
asID:                     262237
IP address blocks:        161.0.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:c6:85:07:cf:46:ad:7f:0d:48:72:fb:8a:0a:3e:73:c1:d2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:49 2025 GMT
            Not After : Feb  3 18:10:49 2026 GMT
        Subject: CN=50E452165F487F89AA07911F97DDF1E664F57ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:cd:a9:a9:58:41:b4:bf:7f:25:f3:6f:1d:
                    68:8e:c2:06:d4:8d:ae:5e:3c:30:6c:70:5b:83:21:
                    61:73:9f:e3:e6:48:2b:3d:8f:eb:37:15:f9:bd:32:
                    5b:8f:9f:28:0f:9f:cb:b7:d3:3d:e7:d3:da:3a:e2:
                    9e:94:92:e7:05:20:d7:b5:6e:70:53:8f:d7:c7:7f:
                    fc:d1:bc:2b:4a:38:97:ea:25:c0:07:59:de:7c:54:
                    9e:f2:7f:9a:63:29:fa:24:47:5a:2e:80:27:29:75:
                    f7:fa:68:3e:5a:19:af:87:19:c1:da:ae:f8:f2:18:
                    9d:26:80:4a:c4:99:03:1a:0a:55:f3:a2:d0:64:ba:
                    9d:16:71:bb:f2:db:13:c1:77:16:08:df:eb:d2:38:
                    39:71:f5:7f:56:4a:b3:66:39:d7:ed:52:e1:1e:3f:
                    ab:9d:26:6a:51:92:46:5e:7b:cf:31:02:53:88:06:
                    6d:12:f2:79:c2:fc:21:0b:c4:d4:e5:d1:a4:5e:d8:
                    10:25:80:58:11:d9:b8:53:8e:0c:8c:16:ae:3e:84:
                    84:51:fc:55:16:d4:6d:f9:d4:bd:80:15:71:a2:83:
                    c7:16:cd:53:91:23:0e:18:7c:98:8f:9e:d6:72:cd:
                    60:0e:c9:0e:90:18:6b:31:91:bc:04:a3:b5:fd:50:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:52:16:5F:48:7F:89:AA:07:91:1F:97:DD:F1:E6:64:F5:7A:DF
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137332e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:d8:14:2a:0e:51:e5:49:51:4b:80:20:38:83:aa:37:4f:4b:
         71:eb:22:41:60:72:6f:69:e7:58:31:14:86:96:63:e9:46:33:
         0d:e0:73:8f:d7:52:58:74:a1:20:44:53:3c:32:cc:db:17:2b:
         4a:e4:cf:c7:9d:04:36:45:c0:eb:02:fc:f5:b5:fc:08:d6:e7:
         fc:89:d9:74:5c:8c:b9:2b:9e:ec:5d:2b:70:b8:71:36:9a:fc:
         46:fc:0b:b5:aa:c1:2a:e4:21:b8:0d:83:98:be:ad:8a:33:fa:
         01:9e:88:ce:b9:0b:21:88:ef:6b:b3:11:e7:48:02:7e:cf:56:
         51:91:8c:1e:10:52:06:d0:a6:e7:47:65:b4:2b:50:3f:ad:d7:
         74:be:38:c7:c0:4a:56:16:4b:67:1f:1f:4b:04:6d:ae:38:a3:
         6c:da:5c:e9:47:37:6b:57:fc:ea:28:43:c0:7e:4f:6b:1e:77:
         7b:4e:37:cf:40:dc:32:c3:31:54:8b:8f:69:94:52:6a:97:5c:
         30:9e:c8:e7:d1:64:6a:06:e1:43:b3:7a:42:4f:4d:bc:54:c3:
         a6:81:04:2c:6f:3d:00:c1:9c:d0:4e:a4:4a:0c:ec:a4:58:a1:
         91:a9:67:91:cc:92:39:d6:10:07:ba:7a:49:40:85:e4:84:29:
         20:74:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:28:13 2025 by rpki-client