Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa
File:                     3136312e302e3232342e302f31392d3234203d3e203237363635.roa (raw, json)
Hash identifier:          JiP68BYwFkO1ik4XRfGhzKkA0wyKFOP3KWFnisFb2b0=
Subject key identifier:   64:9D:0E:FA:CF:41:02:75:BB:3B:13:65:71:85:3A:34:03:7D:AF:FD
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       3996F5F0494BEA52FDEEF054CFA46A6B5481AE45
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa
Signing time:             Tue 04 Feb 2025 18:36:49 +0000
ROA not before:           Tue 04 Feb 2025 18:31:49 +0000
ROA not after:            Tue 03 Feb 2026 18:36:49 +0000
asID:                     27665
IP address blocks:        161.0.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:f5:f0:49:4b:ea:52:fd:ee:f0:54:cf:a4:6a:6b:54:81:ae:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Feb  4 18:31:49 2025 GMT
            Not After : Feb  3 18:36:49 2026 GMT
        Subject: CN=649D0EFACF410275BB3B136571853A34037DAFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:1f:c7:8a:e8:6b:83:3d:58:a2:71:4a:68:
                    45:6b:07:d9:ef:2c:45:24:4c:f6:b8:a7:e7:7f:d1:
                    5f:95:f8:1f:79:d1:ea:66:46:22:a9:ad:fe:a1:a0:
                    f3:8d:a4:19:7b:1a:66:c8:0c:1e:b9:72:db:7b:96:
                    2d:4a:2b:7e:24:c3:8c:a6:7c:17:8e:56:81:ce:fc:
                    7b:a1:aa:31:31:f4:66:64:1b:1f:44:8a:cc:2e:92:
                    6a:9f:f7:b0:60:6c:b3:cf:6f:47:9d:e1:cd:b8:68:
                    03:60:5b:e6:fb:a6:fa:e4:6b:2a:62:d1:3c:b0:ed:
                    e7:cf:05:84:9c:f0:4b:e1:59:25:cc:36:8c:6e:82:
                    6f:99:c0:70:8c:b1:b8:5e:1b:17:b3:36:52:42:d1:
                    75:78:e0:19:09:80:4e:df:1a:f9:96:13:91:6e:8c:
                    95:1e:62:39:46:2b:e2:7e:0d:9e:4d:ac:26:64:38:
                    34:3a:d1:ba:c2:7d:ba:ca:89:4e:59:0d:93:3e:0b:
                    49:27:c9:b3:35:b6:c6:de:00:af:20:80:95:dc:a7:
                    0f:8a:a1:e5:25:e8:e1:5e:83:14:a6:5e:fb:b1:33:
                    b0:96:da:4c:56:28:c5:c7:d1:63:54:7d:29:27:59:
                    b4:79:a5:55:b4:49:ec:76:3c:46:f3:b1:3d:18:02:
                    73:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:0E:FA:CF:41:02:75:BB:3B:13:65:71:85:3A:34:03:7D:AF:FD
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:11:d2:48:f9:53:95:35:39:99:10:61:14:bd:12:bb:cd:
         4c:ce:d2:bb:3f:ca:30:f9:f5:e6:53:73:5f:28:11:41:6e:ef:
         e1:44:94:8c:00:e5:8b:10:34:29:85:5c:78:c1:24:6a:26:f5:
         fc:9f:cc:15:7d:07:b4:a7:c6:7c:a1:89:c6:88:17:9d:fb:42:
         a5:93:13:e5:fe:fc:7a:a2:8a:00:ff:e9:2e:2d:23:31:c5:33:
         b1:81:1e:92:d7:6f:83:ea:86:06:c0:2e:74:55:cf:27:a5:c5:
         63:51:cb:66:63:07:84:ad:3b:6e:57:51:a2:cc:ba:ea:70:af:
         62:72:5c:3e:13:43:60:9c:c2:5f:b9:e3:f1:85:96:64:42:c3:
         ca:99:aa:53:56:13:04:11:a6:76:59:54:69:50:80:d4:72:ee:
         a4:b4:14:07:3b:4a:d8:a1:34:5b:d3:39:3a:14:aa:cf:28:02:
         54:ae:fa:78:71:7a:1b:b4:bd:6b:43:06:a1:7a:f6:cf:13:c1:
         3e:67:df:0a:a3:c9:b3:65:ee:cc:d1:0d:3b:1b:4b:98:9c:cd:
         a7:af:ca:71:85:cf:99:17:fd:81:9c:1d:d7:09:8d:52:0e:7c:
         c2:83:f7:c5:ad:6f:32:e5:96:02:42:1f:d7:cc:51:82:7c:7e:
         d1:89:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:03:23 2025 by rpki-client