Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/3136312e302e36362e302f32342d3234203d3e20323733393639.roa
File:                     3136312e302e36362e302f32342d3234203d3e20323733393639.roa (raw, json)
Hash identifier:          l74By27q9DO6QHzsc13PMsYOkEn/8oDVY4znzYIe3yg=
Subject key identifier:   A7:33:F9:FD:C0:E8:F1:97:7A:D9:BF:BC:57:CA:7B:97:10:0D:40:33
Certificate issuer:       /CN=757DADF1F2EB6AA36F2041416BF44D36D82E365C
Certificate serial:       6C4A1B3577B9B735B1F929EB41898F38E0A847F3
Authority key identifier: 75:7D:AD:F1:F2:EB:6A:A3:6F:20:41:41:6B:F4:4D:36:D8:2E:36:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/3136312e302e36362e302f32342d3234203d3e20323733393639.roa
Signing time:             Tue 10 Dec 2024 23:20:00 +0000
ROA not before:           Tue 10 Dec 2024 23:15:00 +0000
ROA not after:            Tue 09 Dec 2025 23:20:00 +0000
asID:                     273969
IP address blocks:        161.0.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4a:1b:35:77:b9:b7:35:b1:f9:29:eb:41:89:8f:38:e0:a8:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757DADF1F2EB6AA36F2041416BF44D36D82E365C
        Validity
            Not Before: Dec 10 23:15:00 2024 GMT
            Not After : Dec  9 23:20:00 2025 GMT
        Subject: CN=A733F9FDC0E8F1977AD9BFBC57CA7B97100D4033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:91:62:1a:6a:43:b4:28:ed:25:85:5c:11:
                    79:36:44:48:9f:a2:43:b7:ef:18:0d:19:ea:f2:43:
                    b9:f5:94:71:c9:a6:13:d6:68:16:88:1a:ce:a6:49:
                    23:26:70:aa:a6:0f:9d:37:f7:81:9c:51:6c:11:11:
                    56:70:c7:07:e7:7f:0c:c6:bf:eb:c1:f6:51:58:38:
                    7a:a6:ef:d6:6d:21:13:86:7a:60:25:ac:ae:50:11:
                    2e:b0:20:60:fb:50:ad:15:bb:f1:2b:0f:aa:f0:f2:
                    7e:96:e7:ae:f2:9d:a8:f9:75:80:fc:7e:ce:13:36:
                    96:86:bf:39:ad:52:e5:ab:b2:ba:2b:e7:07:41:44:
                    41:0e:8b:4b:db:d6:e1:d9:e0:f0:8c:b1:c7:30:e4:
                    12:75:ed:89:6e:29:2c:d3:01:ca:2b:6a:f7:23:bf:
                    65:65:58:f7:f1:e4:ea:cd:8f:fb:92:1d:21:ce:ee:
                    11:2d:55:eb:b4:d8:2b:4b:41:c2:45:d7:2b:e1:d5:
                    77:8f:42:a5:51:40:1d:99:08:45:85:9d:39:68:a3:
                    e5:11:c2:66:42:69:fc:23:49:de:65:36:be:c4:cf:
                    ee:44:36:43:8f:e2:91:d3:be:94:d2:68:bc:66:d5:
                    58:98:71:02:e3:5c:fc:4d:5f:26:28:52:d7:be:ce:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:33:F9:FD:C0:E8:F1:97:7A:D9:BF:BC:57:CA:7B:97:10:0D:40:33
            X509v3 Authority Key Identifier:
                keyid:75:7D:AD:F1:F2:EB:6A:A3:6F:20:41:41:6B:F4:4D:36:D8:2E:36:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/757DADF1F2EB6AA36F2041416BF44D36D82E365C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1698F32138AF4429524D454163F67230DC130CC4E23D163FE7CFB8A7B0E2DE3/0/3136312e302e36362e302f32342d3234203d3e20323733393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:f7:cd:42:16:45:18:42:7e:d3:08:4b:67:77:ec:fd:1d:
         36:1b:88:64:c5:5f:d8:e8:67:5f:9f:de:26:2c:0f:c8:e7:91:
         13:16:1d:b4:ae:2b:6c:51:76:f1:e4:a7:b6:b7:48:a6:53:a9:
         11:a2:28:68:93:c4:2a:b3:dd:64:cc:fa:9b:da:50:dc:3b:21:
         28:bd:e8:d9:52:30:08:83:ba:e4:61:e5:6c:62:a5:e4:b8:2a:
         b6:03:4b:d1:3f:89:6f:d2:e0:3d:e8:7e:51:fc:d0:20:d2:bd:
         c6:bd:02:0d:7e:5d:fb:2a:e1:d7:c7:48:f9:a0:b2:84:3f:40:
         ea:48:c3:bc:51:3f:92:56:3c:b9:af:92:a7:ea:07:23:cf:08:
         12:d8:b6:39:01:65:c5:ff:be:06:a5:02:cd:e7:32:18:ee:ae:
         33:57:c4:32:a5:d6:b0:42:a0:8d:e6:f1:d8:6a:dd:a5:e5:52:
         f0:ee:9c:66:4a:26:ad:be:c4:9f:ae:2d:67:11:d4:25:65:ad:
         37:5a:21:cb:a3:60:6a:44:d9:6c:40:fe:ac:1c:f5:e4:99:d9:
         ef:cb:17:70:e1:97:6e:93:0c:f3:50:2f:51:54:d8:ee:65:e1:
         11:2c:d1:2e:19:4d:57:80:5a:fc:1a:fd:de:8c:1c:02:fb:90:
         8b:99:cf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:55:00 2025 by rpki-client