Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137342e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3137342e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          +woz674k2aSUpKlKhXUfmkQNZ3AFG3JXDCD79zpZ7oU=
Subject key identifier:   53:38:E5:11:64:8B:71:E3:91:C0:07:87:67:DC:B5:0D:77:4E:C2:35
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       0868FB605EB7077B1738D221BA829EB43247D655
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137342e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:43 +0000
ROA not before:           Tue 04 Feb 2025 18:05:43 +0000
ROA not after:            Tue 03 Feb 2026 18:10:43 +0000
asID:                     262237
IP address blocks:        161.0.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:68:fb:60:5e:b7:07:7b:17:38:d2:21:ba:82:9e:b4:32:47:d6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:43 2025 GMT
            Not After : Feb  3 18:10:43 2026 GMT
        Subject: CN=5338E511648B71E391C0078767DCB50D774EC235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:a4:44:26:b8:b0:8d:eb:76:e9:75:7f:55:
                    45:c9:d5:4e:17:ea:5d:80:60:6b:a4:9a:da:76:b3:
                    1f:1c:d4:fb:c7:4b:50:d5:f8:aa:27:e8:6d:4f:81:
                    71:1e:a0:a6:40:1c:7c:b4:1f:44:88:16:3d:b1:38:
                    e1:92:cd:5d:43:47:f8:f0:a2:2c:be:16:7d:58:d3:
                    3e:3f:ba:62:ef:c8:11:79:0e:c0:17:d6:39:b4:82:
                    6f:28:50:60:dc:73:87:a6:23:7b:eb:87:db:d6:5f:
                    8b:a3:ac:6e:57:af:12:c3:c3:53:d3:0f:27:fd:aa:
                    65:d5:2f:d5:35:5a:1f:85:db:d2:e6:49:15:7c:03:
                    98:04:8d:e7:5f:5f:bf:2b:04:56:86:ed:b5:86:30:
                    ab:9d:ec:07:06:fa:72:ba:8c:b3:a6:d5:99:3a:ed:
                    84:d7:76:5e:05:20:2a:75:66:bc:97:c5:0d:9c:be:
                    7d:21:4f:e8:43:49:1f:2f:d7:31:7c:be:ca:71:94:
                    58:e1:5d:bc:d0:18:44:bb:cd:6e:f5:a6:4c:df:4f:
                    e8:ef:89:72:c5:3a:aa:79:cf:d9:38:ef:96:2e:c3:
                    98:6d:9d:b1:7c:bc:89:df:7a:13:97:eb:b5:48:57:
                    02:a6:d1:27:1e:2f:e1:c9:c5:3f:45:19:02:c1:03:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:E5:11:64:8B:71:E3:91:C0:07:87:67:DC:B5:0D:77:4E:C2:35
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3137342e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:07:45:05:52:75:19:e0:d6:57:83:af:b0:c0:e3:4b:87:
         dd:8c:4e:8c:df:db:14:71:ae:28:12:99:55:ca:39:70:4a:26:
         70:a3:55:45:10:7e:a4:0a:b0:e9:9c:18:23:d8:21:32:c2:87:
         09:5d:3a:3a:91:c2:52:2c:4b:3a:aa:5e:f8:b0:bf:31:52:29:
         4f:2a:bb:52:62:ce:6c:dc:35:a0:78:8f:00:9f:18:fa:7d:c9:
         ec:10:33:5f:2a:ec:b2:83:0f:39:9e:b0:2d:a7:13:e8:9b:73:
         58:ad:f3:d3:b1:00:c9:ac:6e:ce:6c:4f:71:ad:7b:ce:f3:4f:
         c0:d9:59:28:07:b7:1c:3f:f0:1c:2a:e6:86:04:83:3c:44:85:
         f0:1d:59:0d:9e:2b:38:96:c0:db:c4:52:dc:2e:94:00:c6:7b:
         33:e6:26:c7:e2:4e:3c:49:95:34:da:e0:c9:4d:6a:ca:80:22:
         88:15:3a:1c:c1:39:c9:71:13:b1:16:44:8d:4e:38:64:2a:d5:
         60:59:8c:85:82:a4:b7:d0:38:b1:5e:93:e8:6d:65:5b:c1:49:
         15:c9:7b:37:97:1f:9b:66:ab:41:60:e5:a8:29:a4:99:8d:3c:
         ff:e5:ab:18:ea:e3:7c:bf:18:01:0e:fe:41:3d:62:7b:b6:e4:
         12:a8:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:26:54 2025 by rpki-client