Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35392e302f32342d3234203d3e20323731383134.roa
File:                     3137302e3234362e35392e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          p8MJC3ekyMfJ79SONjoxEv/h2kHpvawRKWRF+GFIqtw=
Subject key identifier:   5F:A2:32:14:13:B2:77:AF:F3:A2:9D:41:A6:3F:BB:47:CA:0E:6F:45
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       39BD4D3CC8D70CDBCF9877C9D47F7F0E117C6BCC
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35392e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 04 Feb 2025 18:01:14 +0000
ROA not before:           Tue 04 Feb 2025 17:56:14 +0000
ROA not after:            Tue 03 Feb 2026 18:01:14 +0000
asID:                     271814
IP address blocks:        170.246.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bd:4d:3c:c8:d7:0c:db:cf:98:77:c9:d4:7f:7f:0e:11:7c:6b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Feb  4 17:56:14 2025 GMT
            Not After : Feb  3 18:01:14 2026 GMT
        Subject: CN=5FA2321413B277AFF3A29D41A63FBB47CA0E6F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:9a:5d:ac:65:8f:bc:c3:a9:90:57:70:c8:
                    ad:54:05:ab:02:f0:30:ec:5f:ab:0d:11:da:8e:b8:
                    a6:f3:ef:5c:de:06:bf:0c:9b:fd:16:39:18:53:3c:
                    88:d6:70:ac:5f:99:28:3c:a6:24:e8:aa:8f:bf:ab:
                    71:c6:10:25:9b:dc:eb:df:70:ca:fd:bf:66:df:38:
                    a7:25:11:fd:85:36:b5:56:94:02:50:29:56:24:9c:
                    f7:d9:f8:f6:79:80:fa:42:6a:7a:d8:df:97:cc:b2:
                    54:35:4b:29:16:37:78:a5:c4:d5:36:18:1e:91:79:
                    dd:df:d1:0a:99:5d:93:ed:ea:c4:53:49:c8:10:2f:
                    a2:9e:85:28:6c:5f:0b:dc:d6:f4:df:92:8e:ea:05:
                    18:38:a1:75:72:9a:49:96:bd:fa:76:9c:f4:be:6a:
                    4e:c1:d9:ae:f2:9f:11:92:a6:e6:33:7b:f0:92:99:
                    38:c6:c2:ed:76:62:44:57:b1:1c:bc:89:4f:ec:fc:
                    26:05:b6:cc:0d:d1:ac:bc:0d:85:f1:e7:8f:c4:cb:
                    05:b2:4e:4a:f8:90:51:ff:d2:82:3c:e6:37:2d:a6:
                    a7:03:7a:57:d1:eb:27:68:3f:c3:c7:f6:38:bb:d8:
                    d4:98:7a:00:5a:65:3a:cd:7d:6d:30:ba:fe:f5:3b:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:32:14:13:B2:77:AF:F3:A2:9D:41:A6:3F:BB:47:CA:0E:6F:45
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35392e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:32:f5:df:66:f2:af:0a:92:41:7e:86:b9:41:e0:fd:41:
         fa:7d:5b:50:ea:c0:c7:d8:86:1c:b3:db:e7:89:d7:8c:84:35:
         4c:78:03:ac:ec:d8:cd:a7:b5:a3:dd:26:84:83:4b:36:e1:86:
         f3:52:42:ad:3c:41:fd:0a:d0:1a:c9:1a:bc:21:2c:9b:17:31:
         6d:c9:2a:d5:fc:74:6f:07:30:6e:54:ca:9f:3e:85:7f:f1:7f:
         62:21:79:ed:a1:4a:ce:97:ca:fd:d2:59:cf:bf:0c:76:16:b5:
         27:41:74:c6:c3:05:f4:b2:3c:41:0e:60:ce:db:57:ce:75:32:
         97:c0:d6:eb:73:d2:3f:80:01:04:04:5f:4a:3e:58:26:82:97:
         f6:9b:9c:dc:72:9e:5c:9d:74:1d:00:ae:f9:1f:21:5e:26:7c:
         23:8a:b5:06:c9:48:73:45:b5:a1:d4:b4:91:f5:b9:ab:1c:71:
         62:74:f9:4d:35:f1:38:8e:b8:2a:23:94:e9:18:27:da:ac:cb:
         3c:df:64:10:f0:ae:60:54:8e:eb:b1:06:a5:1b:46:79:40:04:
         59:50:10:40:d9:b1:36:b3:05:59:ed:2e:0a:e5:62:80:a0:3c:
         68:8f:93:45:59:d4:3f:8a:74:ab:02:4c:8b:57:aa:22:fd:e1:
         c7:a8:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:21 2025 by rpki-client