Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136342e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3136342e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          VVlInOEcJ6SfsvJUi3jdXX/Jl/gSDZwSuyzuyoS0GMo=
Subject key identifier:   34:40:E4:BE:F0:8D:51:57:A0:11:4A:14:CD:36:07:82:53:D7:2D:81
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       47857B2E1669B7AE70C6981AAD956C7CCD29C313
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136342e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:40 +0000
ROA not before:           Tue 04 Feb 2025 18:05:40 +0000
ROA not after:            Tue 03 Feb 2026 18:10:40 +0000
asID:                     262237
IP address blocks:        161.0.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:85:7b:2e:16:69:b7:ae:70:c6:98:1a:ad:95:6c:7c:cd:29:c3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:40 2025 GMT
            Not After : Feb  3 18:10:40 2026 GMT
        Subject: CN=3440E4BEF08D5157A0114A14CD36078253D72D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:82:64:ac:5c:3d:67:a9:83:53:1e:3b:58:
                    22:a2:29:e0:bb:89:9e:6d:f8:a9:77:bc:42:11:01:
                    ae:b7:3a:20:52:2d:16:22:dc:df:6f:1f:10:62:d9:
                    3c:9e:d6:7e:d4:2e:7a:2b:cc:a9:f5:7f:6e:31:3c:
                    fb:09:01:a9:d8:90:7e:0b:5a:17:c0:dd:ff:c9:5c:
                    24:f7:b7:91:70:97:b6:08:06:01:b1:ee:b5:00:ae:
                    a0:bc:19:68:ef:ea:77:5f:b6:57:12:a7:4b:2e:b2:
                    26:a5:9f:a4:46:20:34:bc:8f:7e:95:e9:b3:03:21:
                    58:6c:cd:c3:9b:23:a7:e4:af:2d:55:0f:fc:a1:e2:
                    3e:eb:f1:5c:f9:f0:4e:be:19:3c:5a:19:2a:4e:4d:
                    ce:d4:32:ec:b4:bc:ae:c0:47:54:21:00:9f:09:51:
                    10:4b:e6:cc:cc:05:ed:b3:38:c3:0e:b0:24:2a:0c:
                    5e:3d:40:3a:53:ea:e6:b4:04:fc:0d:1a:4a:29:a6:
                    51:11:c5:d5:05:c7:dc:fd:1f:37:f0:fb:d8:2f:a1:
                    84:d8:f6:9d:b8:dc:da:31:e4:87:4c:9c:70:5f:af:
                    28:f2:b9:0e:bb:ba:03:e7:c0:04:a0:bc:09:15:b9:
                    11:e6:ce:7c:36:cd:88:16:25:c6:e3:70:57:f1:4f:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:40:E4:BE:F0:8D:51:57:A0:11:4A:14:CD:36:07:82:53:D7:2D:81
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136342e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b3:8b:e5:0e:da:13:75:1a:52:94:5a:41:e9:e1:4b:a3:7b:
         65:b8:68:73:9a:5f:7b:d9:c3:91:bc:75:08:1b:23:ee:06:a5:
         67:63:72:6b:00:83:ce:f1:75:75:ec:31:1a:33:49:04:9d:73:
         8e:37:f5:4b:a3:d2:52:ef:6f:b5:3c:b7:11:1b:b9:6f:5c:e7:
         8d:36:ea:78:ea:27:ca:87:b6:00:64:2d:aa:b2:d1:b3:7f:86:
         61:97:54:3d:c6:1f:21:64:15:ee:99:c0:4d:39:14:d0:a8:df:
         b6:c3:1a:17:32:3e:f7:3b:6d:13:9d:86:35:2f:b5:32:d8:ff:
         0c:3c:44:d4:ab:ca:89:a5:ae:9c:5f:f4:a5:ee:c6:ac:ea:2f:
         1c:3b:32:67:c8:73:03:6c:38:08:d0:81:90:a3:e2:6e:0e:38:
         07:22:d6:67:47:ee:f5:23:d9:a3:33:50:4d:70:91:16:db:3e:
         35:cf:d8:00:90:30:f2:20:5a:b7:70:0b:35:7a:ce:dd:f1:0a:
         b3:94:48:3d:8f:bf:df:40:4f:34:62:69:ee:2b:db:a0:b2:c4:
         4d:bf:fe:70:4c:70:d8:bc:be:7b:72:c9:ad:2e:8b:d1:93:67:
         18:07:fa:55:77:bb:94:51:2a:74:6e:bc:91:00:fe:66:bc:b5:
         ba:ca:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:12 2025 by rpki-client on console.sobornost.net