Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/3136312e302e3132302e302f32312d3234203d3e203631343432.roa
File:                     3136312e302e3132302e302f32312d3234203d3e203631343432.roa (raw, json)
Hash identifier:          CvAMDHhU12MOXazVt4oBQ0994v5+gVwqrMZYmJqXRKg=
Subject key identifier:   CB:C5:C4:90:AE:DC:E8:C3:BB:58:55:15:2F:92:43:D9:F5:9B:DC:E2
Certificate issuer:       /CN=AA01668E71E93FC51932988C8351C9140C557FEA
Certificate serial:       6B29689FBF330F0B155244F0270468BCF335F3B5
Authority key identifier: AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/3136312e302e3132302e302f32312d3234203d3e203631343432.roa
Signing time:             Tue 04 Feb 2025 18:51:02 +0000
ROA not before:           Tue 04 Feb 2025 18:46:02 +0000
ROA not after:            Tue 03 Feb 2026 18:51:02 +0000
asID:                     61442
IP address blocks:        161.0.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:68:9f:bf:33:0f:0b:15:52:44:f0:27:04:68:bc:f3:35:f3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA01668E71E93FC51932988C8351C9140C557FEA
        Validity
            Not Before: Feb  4 18:46:02 2025 GMT
            Not After : Feb  3 18:51:02 2026 GMT
        Subject: CN=CBC5C490AEDCE8C3BB5855152F9243D9F59BDCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:d8:d1:ce:3e:61:a1:f6:99:e9:ce:95:38:
                    64:dd:1b:c0:8a:4b:de:24:57:df:37:e6:be:73:01:
                    dc:d7:1b:72:e5:88:2e:f6:12:71:a9:25:3c:95:8b:
                    f3:99:5a:99:ee:76:1c:9f:78:08:1e:ff:f8:c9:f1:
                    b4:c3:bd:05:6c:34:c1:f8:bd:b3:14:10:70:87:3d:
                    8d:7d:86:0b:31:2f:c3:3b:b9:39:c6:d0:1c:f9:1d:
                    59:2e:f3:99:97:07:63:4b:56:25:e1:71:c3:0e:b4:
                    d8:64:46:7d:9b:58:6c:d5:39:ab:b0:4f:2c:4f:9e:
                    ba:f2:1b:1e:1b:0f:e3:89:47:05:51:57:71:b2:8a:
                    de:f0:e2:ef:2d:a6:65:01:c4:81:72:37:9d:a1:59:
                    c4:74:b6:b3:33:bd:d0:f2:2a:e2:75:47:e6:51:7f:
                    db:93:d5:1b:1f:2c:2c:8c:68:f5:5c:c3:c6:4f:87:
                    2f:a6:7a:cb:ea:10:de:5d:dd:8f:28:f2:1e:c7:41:
                    07:6b:9f:b3:74:5a:cc:31:f5:45:0d:1d:c1:96:7e:
                    bf:c1:3e:27:fc:cf:21:cc:70:6f:89:25:2b:1d:de:
                    f5:cf:cc:3a:37:bf:3e:ab:55:35:6d:b3:9e:78:26:
                    95:3f:c9:48:45:8e:15:da:b2:7f:9a:ff:bc:cc:ed:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:C4:90:AE:DC:E8:C3:BB:58:55:15:2F:92:43:D9:F5:9B:DC:E2
            X509v3 Authority Key Identifier:
                keyid:AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/3136312e302e3132302e302f32312d3234203d3e203631343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:c1:fc:2e:d2:f6:96:a4:f2:60:ec:bb:a7:61:ed:a0:d0:
         c6:3c:21:45:6a:5e:da:33:97:ec:bc:ef:95:ce:53:52:6e:00:
         05:7f:41:38:c2:92:87:aa:c7:81:11:22:04:60:55:40:3c:e8:
         ce:67:c0:60:84:93:cc:e9:98:ac:53:7d:10:3b:16:c6:1d:35:
         b3:e5:65:16:a8:b0:93:7e:70:d0:51:0c:e9:30:d2:2f:37:d2:
         30:17:cf:01:45:5a:fb:18:98:30:87:43:9c:cf:a4:9c:36:26:
         88:dd:c4:4c:31:4f:22:42:c0:d4:d4:6b:21:85:9d:0c:0e:47:
         0d:5d:2d:83:99:69:a9:b0:bf:72:90:e6:65:66:16:ea:39:27:
         a6:0c:46:8b:5f:c1:71:b7:52:c2:15:0a:72:3d:db:d0:5a:22:
         1c:bf:e6:7f:e7:e9:74:44:15:77:7f:b8:6f:1b:ce:38:0f:08:
         2d:b6:49:b0:71:16:44:34:68:fc:89:66:a9:39:dd:00:9a:de:
         a1:eb:ac:a6:b7:a1:cb:e1:de:c3:e4:a4:cf:7d:bb:5b:98:4f:
         d9:4f:12:ca:0b:25:96:0a:79:83:0c:aa:85:db:04:ae:29:4b:
         c9:d2:5b:68:86:f6:f8:80:f6:ac:93:2e:cf:cd:26:24:88:41:
         97:22:72:d7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUaylon78zDwsVUkTwJwRovPM187UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEwMTY2OEU3MUU5M0ZDNTE5MzI5ODhDODM1MUM5MTQw
QzU1N0ZFQTAeFw0yNTAyMDQxODQ2MDJaFw0yNjAyMDMxODUxMDJaMDMxMTAvBgNV
BAMTKENCQzVDNDkwQUVEQ0U4QzNCQjU4NTUxNTJGOTI0M0Q5RjU5QkRDRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7tjRzj5hofaZ6c6VOGTdG8CK
S94kV9835r5zAdzXG3LliC72EnGpJTyVi/OZWpnudhyfeAge//jJ8bTDvQVsNMH4
vbMUEHCHPY19hgsxL8M7uTnG0Bz5HVku85mXB2NLViXhccMOtNhkRn2bWGzVOauw
TyxPnrryGx4bD+OJRwVRV3Gyit7w4u8tpmUBxIFyN52hWcR0trMzvdDyKuJ1R+ZR
f9uT1RsfLCyMaPVcw8ZPhy+mesvqEN5d3Y8o8h7HQQdrn7N0Wswx9UUNHcGWfr/B
Pif8zyHMcG+JJSsd3vXPzDo3vz6rVTVts554JpU/yUhFjhXasn+a/7zM7VcPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUy8XEkK7c6MO7WFUVL5JD2fWb3OIwHwYDVR0j
BBgwFoAUqgFmjnHpP8UZMpiMg1HJFAxVf+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMUIzM0VBRUVBM0UyRkJBNUY3NTg1QTE2Rjk2NTREMDIz
MDgzNDc4MTlDREE2NUEyRUM4OERGOTYxMTMwN0Q1LzAvQUEwMTY2OEU3MUU5M0ZD
NTE5MzI5ODhDODM1MUM5MTQwQzU1N0ZFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTAxNjY4RTcxRTkzRkM1MTkz
Mjk4OEM4MzUxQzkxNDBDNTU3RkVBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjFCMzNFQUVFQTNFMkZCQTVGNzU4NUExNkY5NjU0RDAyMzA4MzQ3ODE5
Q0RBNjVBMkVDODhERjk2MTEzMDdENS8wLzMxMzYzMTJlMzAyZTMxMzIzMDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDM2MzEzNDM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOhAHgwDQYJ
KoZIhvcNAQELBQADggEBAAfrwfwu0vaWpPJg7LunYe2g0MY8IUVqXtozl+y875XO
U1JuAAV/QTjCkoeqx4ERIgRgVUA86M5nwGCEk8zpmKxTfRA7FsYdNbPlZRaosJN+
cNBRDOkw0i830jAXzwFFWvsYmDCHQ5zPpJw2JojdxEwxTyJCwNTUayGFnQwORw1d
LYOZaamwv3KQ5mVmFuo5J6YMRotfwXG3UsIVCnI929BaIhy/5n/n6XREFXd/uG8b
zjgPCC22SbBxFkQ0aPyJZqk53QCa3qHrrKa3ocvh3sPkpM99u1uYT9lPEsoLJZYK
eYMMqoXbBK4pS8nSW2iG9viA9qyTLs/NJiSIQZcictc=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:05:03 2025 by rpki-client