Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e203134303830.roa
File:                     3137302e38332e35392e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier:          Rva13RMhsoiowh2ao6XSuo8nV/jdPHfTonHpCzJnQcQ=
Subject key identifier:   69:85:D2:F9:47:4D:88:9E:85:78:43:02:3B:E1:6E:45:1F:D2:6A:49
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       098D68858BD626F7580724DD5116BD733D974D5F
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:09:39 +0000
ROA not before:           Tue 04 Feb 2025 18:04:39 +0000
ROA not after:            Tue 03 Feb 2026 18:09:39 +0000
asID:                     14080
IP address blocks:        170.83.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8d:68:85:8b:d6:26:f7:58:07:24:dd:51:16:bd:73:3d:97:4d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Feb  4 18:04:39 2025 GMT
            Not After : Feb  3 18:09:39 2026 GMT
        Subject: CN=6985D2F9474D889E857843023BE16E451FD26A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:83:9a:45:6a:1e:1f:0c:4b:bc:62:fc:50:
                    36:d7:92:22:5d:34:df:34:23:45:bf:7e:2d:84:86:
                    0e:1e:98:c0:bb:0b:6b:6c:f0:b6:a4:f4:6a:77:6e:
                    47:bd:da:7e:e7:e6:d1:10:35:bb:49:fd:ce:43:ce:
                    be:e2:9e:0e:2f:ac:86:f7:81:91:f6:ee:1b:05:fd:
                    38:dd:5b:b9:26:32:16:c9:7c:df:ae:13:29:29:f0:
                    d6:83:b1:b1:6f:5b:1d:08:25:9a:24:3d:66:54:cd:
                    fa:59:7a:af:24:5b:57:81:ea:19:a2:f4:af:49:27:
                    a3:d3:87:b7:fd:a5:5d:f5:a1:75:54:d3:0a:68:35:
                    87:bb:be:ea:6d:fe:2f:fd:38:2a:0a:a7:9b:c2:4e:
                    cb:cd:1f:ee:c6:21:60:fe:c4:01:80:42:34:97:c5:
                    1d:8e:cb:f8:2b:46:ba:fa:a2:7e:26:1c:e3:e8:8b:
                    ac:48:99:8b:f2:2c:70:20:f8:5f:83:d1:62:fb:59:
                    47:09:11:a8:f4:50:78:29:63:28:7b:66:b7:1d:2e:
                    4c:bd:99:81:48:7b:49:90:4b:8a:39:25:ae:52:84:
                    41:17:40:bd:4c:b0:f3:70:68:96:f5:94:ad:63:36:
                    ad:c5:09:98:1f:bf:77:a3:30:21:35:47:a7:0b:09:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:85:D2:F9:47:4D:88:9E:85:78:43:02:3B:E1:6E:45:1F:D2:6A:49
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:31:31:db:cf:8f:ca:01:9f:4e:ff:6c:d9:c9:ec:4d:39:75:
         39:de:8d:7c:20:ac:6a:ca:ff:f8:5e:bb:5d:de:ad:fd:78:b3:
         2b:35:80:bd:a2:19:2a:a7:d7:88:d2:49:ae:50:4f:42:08:7f:
         c9:93:79:d3:9c:e0:ee:69:f8:42:ab:e6:66:a3:34:94:ac:80:
         8a:c8:30:d7:19:95:1f:c0:d4:da:f2:45:b2:fa:72:17:5b:89:
         6d:c2:fe:7c:40:31:8f:b8:ff:b4:e5:98:99:b0:47:27:73:fa:
         77:8b:e3:3b:bb:36:d9:19:6a:7e:68:3e:96:54:40:a1:70:93:
         3e:db:aa:31:fa:f3:e5:50:e9:d4:59:1c:98:3b:b6:e4:8c:84:
         39:e6:2e:c8:79:a9:c7:b6:f1:ce:60:c1:c4:43:39:d9:50:20:
         dd:f6:9a:e1:1c:56:b8:08:c1:66:42:dd:1c:3f:aa:23:d7:cf:
         83:f4:87:8f:24:cf:a3:21:32:9d:1c:33:78:fc:53:e7:94:a5:
         ff:04:82:f3:ad:e4:2c:53:60:69:f8:0c:b5:d4:89:af:6c:89:
         86:c2:1c:1a:c7:26:f9:12:6e:d7:86:17:fe:5b:d4:71:a3:48:
         c9:a3:d4:88:97:00:59:35:6f:8a:53:6d:33:9c:8b:b2:4d:0f:
         00:45:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:59 2025 by rpki-client