Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3130342e302f32342d3234203d3e2038303735.roa
File:                     3136312e3133312e3130342e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          OO8v6+tbxHtq5FaL6iWasDKyF1697TpgFHmmQTd0eFI=
Subject key identifier:   AC:05:32:47:C8:8C:42:AB:4B:CB:31:50:49:74:9F:69:DE:DD:5C:49
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       67211B5ACB6501363A369C1DBFB7812EECFC5798
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3130342e302f32342d3234203d3e2038303735.roa
Signing time:             Mon 12 May 2025 14:15:00 +0000
ROA not before:           Mon 12 May 2025 14:10:00 +0000
ROA not after:            Mon 11 May 2026 14:15:00 +0000
asID:                     8075
IP address blocks:        161.131.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:21:1b:5a:cb:65:01:36:3a:36:9c:1d:bf:b7:81:2e:ec:fc:57:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: May 12 14:10:00 2025 GMT
            Not After : May 11 14:15:00 2026 GMT
        Subject: CN=AC053247C88C42AB4BCB315049749F69DEDD5C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:92:aa:b8:cd:c0:3e:f2:2a:59:63:91:e6:
                    fb:71:5b:d8:26:b2:29:da:d4:97:9b:68:f6:06:26:
                    f0:08:f1:49:7d:e1:f2:f5:da:a9:d9:c1:e4:bd:c8:
                    16:b1:95:aa:cd:95:f1:9d:da:4a:0c:8a:74:c8:b1:
                    3e:c2:56:9e:a2:e5:24:75:49:0b:40:c9:8f:98:41:
                    0c:4f:4c:aa:b9:ef:34:12:77:1e:56:be:68:28:44:
                    e9:d4:3c:1d:b1:92:0b:07:04:49:dc:60:51:c4:18:
                    24:dd:36:9b:d8:20:c7:1c:62:56:ad:7c:3b:52:f8:
                    52:bc:d5:77:e6:3f:a4:5b:91:7c:45:59:20:e6:39:
                    7c:99:c1:27:00:89:50:80:45:1b:22:19:ea:9f:f8:
                    68:c4:fc:06:bf:05:3b:c8:0c:30:b0:0f:03:88:cd:
                    05:72:6d:2c:64:79:c7:b6:d6:16:ca:5e:2c:a5:2b:
                    c6:4f:ab:86:a0:84:43:71:7f:4f:e8:7d:a0:ac:33:
                    4f:b3:f6:b2:bb:be:4c:41:53:a6:ce:d9:e2:30:df:
                    49:a7:78:14:15:9d:f5:8f:ac:80:08:62:a3:68:a4:
                    8e:ce:c2:23:9f:25:d0:61:5b:a2:ba:30:34:2a:f6:
                    de:bc:cd:8e:0a:41:9d:1c:e2:26:16:41:d0:96:ee:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:05:32:47:C8:8C:42:AB:4B:CB:31:50:49:74:9F:69:DE:DD:5C:49
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3130342e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:15:bd:b9:fc:f8:5d:5c:b5:cd:42:33:8a:d1:39:82:30:74:
         83:ca:2e:93:cf:29:25:e4:41:c6:11:79:44:36:18:e4:5a:7f:
         50:f0:cf:b4:4f:84:9e:94:b8:ab:f9:d7:68:2a:a7:ce:1d:ce:
         9a:19:60:21:07:60:30:c1:09:29:9a:7a:72:1f:88:2a:48:20:
         76:b5:6e:73:86:ee:c6:76:0d:eb:a5:54:12:72:6f:6b:a0:ed:
         b8:f5:fe:85:27:90:f0:e2:a2:22:f8:46:19:02:66:0b:57:74:
         0f:60:2f:38:a0:73:28:bd:5b:45:94:89:cd:e7:19:27:df:11:
         29:ed:c8:b3:7c:24:0b:51:eb:52:1e:cf:6a:41:b9:ca:a7:06:
         19:ac:af:04:ea:65:94:6b:c9:be:2a:db:eb:20:e2:fa:1b:8b:
         e3:ee:b3:19:3a:bb:3f:bb:d1:e0:15:65:6e:8a:5b:f6:a5:66:
         d1:6c:3f:c9:31:fa:7a:6f:fa:45:04:ff:11:0b:55:f0:bd:e9:
         58:39:16:33:24:53:86:a2:32:6e:d7:e7:d1:92:b8:1d:fd:ca:
         2a:ab:ba:cc:fb:9f:26:99:75:65:e9:8e:51:40:c4:8d:a5:a8:
         c7:db:c3:17:00:56:47:94:4e:12:85:de:38:6f:ac:95:a5:7a:
         74:a1:0c:5f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZyEbWstlATY6Npwdv7eBLuz8V5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3RUNGODNEMUFENzJBRERCRTc0ODEzQ0YzNDBGMUU1
QkRBMDIzOTAeFw0yNTA1MTIxNDEwMDBaFw0yNjA1MTExNDE1MDBaMDMxMTAvBgNV
BAMTKEFDMDUzMjQ3Qzg4QzQyQUI0QkNCMzE1MDQ5NzQ5RjY5REVERDVDNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hZKquM3APvIqWWOR5vtxW9gm
sina1JebaPYGJvAI8Ul94fL12qnZweS9yBaxlarNlfGd2koMinTIsT7CVp6i5SR1
SQtAyY+YQQxPTKq57zQSdx5WvmgoROnUPB2xkgsHBEncYFHEGCTdNpvYIMccYlat
fDtS+FK81XfmP6RbkXxFWSDmOXyZwScAiVCARRsiGeqf+GjE/Aa/BTvIDDCwDwOI
zQVybSxkece21hbKXiylK8ZPq4aghENxf0/ofaCsM0+z9rK7vkxBU6bO2eIw30mn
eBQVnfWPrIAIYqNopI7OwiOfJdBhW6K6MDQq9t68zY4KQZ0c4iYWQdCW7hw1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrAUyR8iMQqtLyzFQSXSfad7dXEkwHwYDVR0j
BBgwFoAU+X7Pg9Gtcq3b50gTzzQPHlvaAjkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzQ0QkNGRTA0OEUwRkFFMjBGQUJEQTc0NzYxNzBCMUVE
MUY4NkYwRDZENTk4NUFBOTNFMTFDOUNBODY4QjE5LzAvRjk3RUNGODNEMUFENzJB
RERCRTc0ODEzQ0YzNDBGMUU1QkRBMDIzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTdFQ0Y4M0QxQUQ3MkFEREJF
NzQ4MTNDRjM0MEYxRTVCREEwMjM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjc0NEJDRkUwNDhFMEZBRTIwRkFCREE3NDc2MTcwQjFFRDFGODZGMEQ2
RDU5ODVBQTkzRTExQzlDQTg2OEIxOS8wLzMxMzYzMTJlMzEzMzMxMmUzMTMwMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMwMzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKGDaDAN
BgkqhkiG9w0BAQsFAAOCAQEAURW9ufz4XVy1zUIzitE5gjB0g8ouk88pJeRBxhF5
RDYY5Fp/UPDPtE+EnpS4q/nXaCqnzh3OmhlgIQdgMMEJKZp6ch+IKkggdrVuc4bu
xnYN66VUEnJva6DtuPX+hSeQ8OKiIvhGGQJmC1d0D2AvOKBzKL1bRZSJzecZJ98R
Ke3Is3wkC1HrUh7PakG5yqcGGayvBOpllGvJvirb6yDi+huL4+6zGTq7P7vR4BVl
bopb9qVm0Ww/yTH6em/6RQT/EQtV8L3pWDkWMyRThqIybtfn0ZK4Hf3KKqu6zPuf
Jpl1ZemOUUDEjaWox9vDFwBWR5ROEoXeOG+slaV6dKEMXw==
-----END CERTIFICATE-----
Generated at Sun May 18 01:07:28 2025 by rpki-client