Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa
File:                     3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          L2PpYQPOI7BVV35khFghfWGdJZE6n1xqFZr3chGegKw=
Subject key identifier:   B8:18:57:5F:66:10:DA:DD:A6:FE:52:9B:F9:45:CE:8A:4C:2A:DB:3E
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       63AEDC0A274359C3C522ED0F8E5E9F3713AF06EF
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 04 Feb 2025 18:01:15 +0000
ROA not before:           Tue 04 Feb 2025 17:56:15 +0000
ROA not after:            Tue 03 Feb 2026 18:01:15 +0000
asID:                     271814
IP address blocks:        170.246.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ae:dc:0a:27:43:59:c3:c5:22:ed:0f:8e:5e:9f:37:13:af:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Feb  4 17:56:15 2025 GMT
            Not After : Feb  3 18:01:15 2026 GMT
        Subject: CN=B818575F6610DADDA6FE529BF945CE8A4C2ADB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:a1:6f:54:8a:9a:c1:9d:ec:77:47:f5:d9:
                    c9:8d:ae:ce:d7:e7:ca:11:64:4b:a4:2d:ac:ee:56:
                    bb:b9:67:2f:0f:cb:03:aa:91:a6:c7:fc:3f:fa:23:
                    41:5d:76:6b:32:ee:c9:04:03:85:05:35:e2:1f:78:
                    9f:c8:41:1c:c2:ea:ad:29:58:bd:5f:ac:4d:eb:29:
                    3d:31:58:5a:c8:16:55:f4:4a:7c:f8:20:ef:8b:6b:
                    8f:58:3b:c8:17:cc:6a:62:33:46:89:67:e0:fd:95:
                    d2:28:b2:21:e0:15:68:4e:d8:26:69:e1:af:da:6f:
                    9a:8a:d0:f6:31:a8:e2:85:87:af:72:18:c2:d8:75:
                    7f:45:8e:65:83:a2:5d:eb:d1:a7:21:3d:28:dd:b1:
                    3d:35:0f:5e:a0:a4:7f:8a:17:e9:7c:4c:98:d3:30:
                    84:eb:b8:5d:9a:2d:e3:08:c9:59:88:b4:1d:37:6d:
                    82:ce:c6:4a:f3:07:c3:5f:c9:d9:7a:67:10:e4:75:
                    1d:0a:93:8d:72:a6:d7:aa:71:85:4d:1d:a0:65:a0:
                    15:f7:99:de:c4:c4:ca:e8:d1:a3:f4:ca:c5:db:08:
                    6b:00:a5:63:50:90:b1:23:73:2d:9e:6d:d4:ff:83:
                    7c:d9:ed:ca:6e:59:ca:cb:bf:92:90:12:db:42:0d:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:18:57:5F:66:10:DA:DD:A6:FE:52:9B:F9:45:CE:8A:4C:2A:DB:3E
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:48:f3:0c:43:8b:56:69:96:a0:c1:60:6e:0c:4b:bd:43:
         6e:0f:90:d1:93:d4:c9:c7:e6:e0:8f:06:0e:09:8e:92:a2:da:
         75:30:4d:e0:b9:1c:ea:4d:dd:9f:3c:9b:87:e8:7a:96:ac:92:
         3f:a8:c7:f1:6e:4b:d9:a2:75:e4:02:1e:f0:1d:b2:1b:b0:98:
         52:1c:5a:66:02:2d:44:6e:67:fc:eb:a1:e6:2b:92:97:10:57:
         91:bc:0c:e3:a3:00:f7:a7:19:d4:cd:19:53:21:f5:be:d9:9d:
         e7:ca:bb:ae:8c:7e:f2:f3:ae:60:28:72:2d:e4:4e:9f:e0:bb:
         ac:34:71:93:fe:6f:73:c1:20:a0:1b:75:af:c0:78:45:2e:83:
         23:e2:30:97:e8:82:39:8d:52:f7:c4:c4:26:f5:83:ec:cf:e8:
         56:82:d3:a2:cd:0a:4b:d1:fc:4c:d6:d6:74:59:bf:d2:5b:de:
         4b:52:65:9f:e7:38:3a:cb:f8:80:06:47:d1:81:71:4d:33:67:
         bb:2d:90:22:93:f2:96:37:65:b9:1f:97:10:58:5e:8e:b8:1e:
         5e:8e:ef:d0:6f:51:b6:45:ff:cd:b5:d2:3d:b2:13:41:16:51:
         cf:71:6e:ef:36:77:83:ba:b2:4d:1c:86:67:53:45:40:a7:72:
         ff:e1:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:08 2025 by rpki-client