Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130382e302f32342d3234203d3e203238343038.roa
File:                     3137302e3234342e3130382e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          v5icuOaZjtOwYpZbM1QTtWPo/srEw8zLd2panOrEaww=
Subject key identifier:   E3:1D:21:71:29:77:E4:18:98:73:A3:F6:5D:86:C5:D6:8F:82:EC:AC
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       59ED5DFBC8E7BB2D223C3F17C12AFE5A09FA75AD
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130382e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 04 Feb 2025 18:33:54 +0000
ROA not before:           Tue 04 Feb 2025 18:28:54 +0000
ROA not after:            Tue 03 Feb 2026 18:33:54 +0000
asID:                     28408
IP address blocks:        170.244.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ed:5d:fb:c8:e7:bb:2d:22:3c:3f:17:c1:2a:fe:5a:09:fa:75:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Feb  4 18:28:54 2025 GMT
            Not After : Feb  3 18:33:54 2026 GMT
        Subject: CN=E31D21712977E4189873A3F65D86C5D68F82ECAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:89:79:5c:2d:1c:50:23:60:4d:48:a9:c5:
                    85:c0:71:fe:d0:e8:00:01:af:87:62:3f:d6:91:33:
                    63:08:d8:4b:05:ef:f3:f8:c9:85:82:29:e5:e7:12:
                    af:11:e5:5a:64:d2:fc:0b:c5:89:ca:ae:40:fa:bc:
                    c4:b9:dc:ae:f8:b6:bb:18:b4:1f:75:ce:d6:72:98:
                    63:c3:97:eb:03:bf:bb:80:5b:84:b6:bb:c3:47:1a:
                    03:b3:0e:44:bd:02:98:ec:ec:0a:73:a2:19:27:51:
                    93:e1:a1:c1:7b:39:67:6f:e8:f4:44:55:07:75:cb:
                    f3:ef:f0:9d:e8:51:92:71:14:b9:c7:99:3d:ce:7f:
                    38:f5:d5:c1:9f:ec:fe:d4:08:5f:cc:fd:bc:e1:5f:
                    1a:06:3e:77:e4:7a:b7:c1:00:d3:2a:1f:dd:a3:0a:
                    51:5d:00:30:ef:eb:3e:14:37:06:ef:ba:47:77:17:
                    cd:03:5a:c5:7e:d0:c8:2d:c7:8f:43:3b:1e:77:fc:
                    89:25:d0:1e:0c:de:fb:80:75:8c:2a:92:e6:70:bb:
                    90:dc:3f:92:c5:3c:36:c6:13:a8:63:a8:a7:8d:92:
                    04:65:54:ec:4c:db:98:8a:69:53:00:a3:03:9d:71:
                    11:a1:e1:c9:46:dd:a4:25:e6:40:f6:56:43:6d:33:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1D:21:71:29:77:E4:18:98:73:A3:F6:5D:86:C5:D6:8F:82:EC:AC
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130382e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e5:c3:ba:d2:fd:c5:59:07:b7:b6:7b:2b:79:9b:3e:7d:16:
         6e:e7:cb:90:9c:9c:99:23:9a:a6:de:70:0d:0a:48:4d:85:8c:
         8b:5a:0b:e0:61:c5:88:ee:95:b4:f7:88:47:f6:1b:59:e5:f7:
         2e:04:22:57:d2:54:c1:9b:d2:8d:52:ad:84:86:9e:9b:5e:a4:
         1b:83:ab:8b:e2:d2:b3:39:3b:2c:99:24:8c:56:af:e3:60:11:
         57:ec:61:b5:a5:9a:c9:1b:be:45:3d:c6:de:4f:0c:72:f8:0b:
         8a:58:32:d5:7a:03:e0:7f:44:dc:f3:65:0e:85:d9:23:3c:1d:
         d5:54:dc:d5:0e:a9:0f:63:b9:4b:41:46:62:85:8e:8b:01:d2:
         b6:d4:0c:3f:ef:02:75:04:51:7b:f2:0a:a3:d9:af:84:02:2f:
         ec:e6:3c:09:82:68:ab:0f:c5:57:d2:13:51:58:b3:f1:d9:0c:
         82:2e:0f:36:13:09:ff:10:a8:d4:76:33:af:15:a9:ab:12:8f:
         26:e6:7a:0c:a1:7b:e3:36:0d:ad:f9:39:8c:90:41:d8:cf:7a:
         36:d8:79:5b:3b:ce:f2:dd:f9:80:fe:07:01:5e:e2:5e:f4:e2:
         94:6a:73:d9:83:0c:f5:be:cb:b0:e1:8f:c3:5a:18:87:b7:88:
         80:a4:5b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:39:33 2025 by rpki-client