Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e20323635363532.roa
File:                     3137302e38332e35392e302f32342d3234203d3e20323635363532.roa (raw, json)
Hash identifier:          gT7+uwRWK/HFuJu92U0Gi3ZS3YnrfeJoQm1uiQmR9a8=
Subject key identifier:   10:C9:5E:14:84:1C:D8:7F:26:81:63:CB:B9:92:BD:0A:9D:76:18:17
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       4A4071AA854C3DE4F3EC4C4D46DD105FD9D4B3ED
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e20323635363532.roa
Signing time:             Tue 05 Mar 2024 18:08:55 +0000
ROA not before:           Tue 05 Mar 2024 18:03:55 +0000
ROA not after:            Tue 04 Mar 2025 18:08:55 +0000
asID:                     265652
IP address blocks:        170.83.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:40:71:aa:85:4c:3d:e4:f3:ec:4c:4d:46:dd:10:5f:d9:d4:b3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Mar  5 18:03:55 2024 GMT
            Not After : Mar  4 18:08:55 2025 GMT
        Subject: CN=10C95E14841CD87F268163CBB992BD0A9D761817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:99:37:d4:a4:77:4c:78:61:de:d7:5c:97:
                    70:3f:2b:05:d4:80:43:f0:1d:8b:2c:d6:15:b8:45:
                    d4:32:b6:39:be:f6:91:fd:5c:4c:1a:4d:55:21:d5:
                    cf:97:f2:83:d4:e0:6b:3a:22:af:f5:35:f8:8c:3d:
                    78:8d:57:5e:d9:2c:df:99:25:4d:8a:70:73:ac:d9:
                    0a:cb:d4:f7:d5:1c:b2:43:ba:eb:44:37:18:fa:a3:
                    f3:30:c3:77:41:42:bb:e0:05:42:af:ef:8a:8b:ed:
                    6d:1c:cd:63:97:17:b5:f1:b8:dc:36:4c:53:05:ed:
                    7f:ab:82:8d:59:31:3d:27:42:e2:82:95:24:4b:9f:
                    a2:cf:09:d1:f4:9b:fd:85:9d:00:97:13:d0:e3:a5:
                    4d:8c:26:c3:0a:d8:bb:38:7a:6f:56:62:01:e0:41:
                    a5:f6:8c:bb:b7:e0:e6:53:11:4c:3d:5a:08:eb:8f:
                    7f:40:0a:6f:a4:51:06:1d:a4:5e:77:f8:8b:34:a2:
                    02:d8:80:17:0e:60:4a:3b:29:66:90:df:0f:bc:9c:
                    8b:e4:d9:35:b0:27:cb:ea:06:fb:ab:c3:3c:42:d4:
                    fb:1e:5d:c8:52:a5:36:71:09:09:b7:86:49:e3:ac:
                    f6:43:a3:b1:5b:fe:a8:1f:16:42:40:88:58:a2:0f:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:5E:14:84:1C:D8:7F:26:81:63:CB:B9:92:BD:0A:9D:76:18:17
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e20323635363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:fa:05:b8:04:3c:98:ea:d2:60:73:71:29:7c:03:cd:00:
         1e:d5:63:1e:05:1d:27:2a:a0:9b:1d:42:59:51:64:6c:76:a6:
         c3:8b:51:92:12:98:55:4c:c0:35:b1:5b:22:8c:f4:57:a6:e6:
         20:4a:33:9a:23:d8:7c:cc:da:3a:1b:30:7d:5f:ef:de:16:8f:
         59:4a:cb:90:c6:f0:3b:e9:28:1e:27:87:da:a5:aa:b5:6a:6b:
         11:8d:16:43:6e:84:26:0f:f8:6c:64:9a:34:21:ce:9d:3c:6c:
         17:c9:97:fe:6d:74:ac:ec:b9:10:11:4d:f0:76:e8:50:af:d7:
         21:57:c2:4e:66:eb:fa:64:18:70:7e:b2:00:5e:24:0a:5d:b0:
         bc:15:4d:26:4e:12:d2:12:53:22:d8:3f:40:5f:53:4d:d0:92:
         2e:37:01:d5:ff:02:57:d9:27:81:60:2f:5a:78:3a:b6:57:8d:
         c2:72:2c:b7:6e:1a:fa:fa:49:6a:c8:f5:40:6e:b3:27:f7:6a:
         72:65:aa:ab:f8:19:b0:1d:17:3f:d9:a0:2c:c1:e5:03:7a:a9:
         1e:c1:13:52:a4:e1:bf:43:3f:ae:b9:5b:59:56:75:f5:42:5c:
         8c:35:4e:af:9e:ed:34:e9:49:6a:18:23:50:6f:2d:d2:00:42:
         2c:a3:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 14:08:40 2024 by rpki-client on console-ams.rpki-client.org