Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3136312e302e3131322e302f32312d3234203d3e20323633323232.roa
File:                     3136312e302e3131322e302f32312d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          NEYV3gD9pHsLBiwMzLEZRMdAPOZ6Y7ry26MWnK5bn7c=
Subject key identifier:   C7:23:3C:C5:95:D6:5D:93:90:ED:82:65:56:0E:9D:60:9C:66:C3:87
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       5C5C336A160E80CF36D8BD10DB0EB698ADA525C9
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3136312e302e3131322e302f32312d3234203d3e20323633323232.roa
Signing time:             Tue 04 Feb 2025 18:36:14 +0000
ROA not before:           Tue 04 Feb 2025 18:31:14 +0000
ROA not after:            Tue 03 Feb 2026 18:36:14 +0000
asID:                     263222
IP address blocks:        161.0.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5c:33:6a:16:0e:80:cf:36:d8:bd:10:db:0e:b6:98:ad:a5:25:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Feb  4 18:31:14 2025 GMT
            Not After : Feb  3 18:36:14 2026 GMT
        Subject: CN=C7233CC595D65D9390ED8265560E9D609C66C387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:fd:8a:3b:e0:45:8d:e4:ce:df:a9:da:d4:
                    73:02:76:6a:f2:77:45:0c:4d:55:4a:1d:bb:7b:43:
                    16:d7:9b:21:d7:3e:57:e5:0f:02:71:ff:23:4e:0f:
                    b7:30:77:6a:b0:6d:f0:e9:33:9e:1c:51:de:ac:aa:
                    ca:e4:9b:6d:71:5f:6f:6f:c9:fd:87:a7:6f:01:53:
                    7d:29:0a:2a:3d:3f:ee:47:66:d4:b2:14:16:46:f9:
                    d6:39:7a:72:6e:2f:8c:80:7d:86:60:bd:1e:6f:f1:
                    ea:69:60:8f:01:48:67:cc:fc:4c:fe:90:83:3e:85:
                    1a:98:f6:c1:a7:76:3c:ef:da:87:64:d9:04:8e:68:
                    60:b3:bc:7a:df:7a:2b:92:c1:2c:71:d9:5f:35:91:
                    b4:2c:53:ea:51:5b:b6:9e:08:ae:41:e0:e4:37:35:
                    2c:83:35:b8:d6:5b:dd:ce:91:a6:ef:bb:be:46:ac:
                    6c:7a:36:3c:63:8b:2e:9a:a2:a0:e2:c4:d5:15:ed:
                    85:a7:4a:07:8a:de:d7:d2:35:60:e1:38:40:a1:e5:
                    9e:b5:2e:35:80:9a:87:ce:09:d4:06:9e:e7:f1:e3:
                    97:c0:fc:6d:47:8b:f4:f4:87:1e:ec:17:86:28:49:
                    98:af:18:57:62:e5:f4:30:92:2e:27:74:14:1f:f5:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:23:3C:C5:95:D6:5D:93:90:ED:82:65:56:0E:9D:60:9C:66:C3:87
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3136312e302e3131322e302f32312d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:bb:26:a7:2e:e4:6c:2a:98:b2:be:e6:91:fb:e8:1d:6a:
         1c:eb:36:71:9d:08:68:12:98:27:45:b9:30:58:ae:8f:78:0c:
         63:a4:50:d4:0e:5e:10:4b:75:3d:ee:65:37:2d:87:eb:0a:65:
         c5:e5:26:68:f2:82:7c:a6:b2:6d:79:9b:ca:74:09:33:4b:6f:
         72:4d:95:06:b4:b3:59:c8:bd:4e:7c:04:fb:c4:9b:bb:2a:6b:
         a4:b7:b5:45:df:fe:b0:e0:1d:ed:48:d2:66:af:a9:1f:e6:77:
         e9:43:5d:64:4a:e1:d0:77:9e:89:2c:02:80:ca:c3:f1:00:30:
         48:75:04:51:a9:74:06:66:2e:48:c8:c8:a5:92:27:fb:28:30:
         26:05:e6:87:9a:b5:a6:53:f4:18:9a:16:f6:5f:ea:c8:f1:e4:
         c6:8a:01:62:27:68:01:4f:dd:cd:09:6f:8e:05:61:d2:62:a7:
         7e:59:d9:88:e5:e2:93:2a:d4:01:04:ab:ae:55:39:69:3e:da:
         0e:48:03:0a:96:db:fd:e3:27:39:f0:2b:af:71:61:8b:46:e8:
         67:9c:01:7c:2b:06:e5:17:fb:69:ac:6c:3d:97:a4:f8:62:b1:
         6a:08:68:39:13:8a:f0:96:d5:f6:e9:00:a9:35:ba:c6:ba:1b:
         48:d4:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:30 2025 by rpki-client