Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e203134303830.roa
File:                     3137302e38332e35392e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier:          10e7aLMU7SaqTadO32b5AuTSIU2Ir+wZBcd2aXkENSs=
Subject key identifier:   74:21:06:A3:42:A1:83:1E:B4:D4:83:FC:FF:EB:2A:3F:34:5F:95:86
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       302CD717FB6310DAF359130C7BA9349CA218D8BC
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:08:54 +0000
ROA not before:           Tue 05 Mar 2024 18:03:54 +0000
ROA not after:            Tue 04 Mar 2025 18:08:54 +0000
asID:                     14080
IP address blocks:        170.83.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 10:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2c:d7:17:fb:63:10:da:f3:59:13:0c:7b:a9:34:9c:a2:18:d8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Mar  5 18:03:54 2024 GMT
            Not After : Mar  4 18:08:54 2025 GMT
        Subject: CN=742106A342A1831EB4D483FCFFEB2A3F345F9586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:6f:e9:de:30:2f:01:e4:a9:b2:18:33:cd:
                    53:18:53:64:4b:9b:e7:de:00:d0:f2:4b:8e:ec:3f:
                    74:2e:31:fd:44:69:8e:23:4b:ac:ec:02:15:71:d9:
                    d6:f5:bc:ba:c1:8f:8a:35:2c:c4:90:94:d5:41:e8:
                    56:bd:cc:f8:9b:da:7d:2c:42:78:de:f5:c1:3d:be:
                    2b:b9:90:c2:c4:99:e1:0b:c1:8d:4e:a9:0a:2c:2c:
                    90:13:55:cb:11:e3:f0:6f:a9:a6:c7:f2:78:1c:d9:
                    69:ef:15:43:c1:1e:8f:a4:04:cf:ce:d9:96:e2:14:
                    e4:90:12:bb:fb:28:9f:e0:97:04:d6:f1:15:0c:f6:
                    b2:39:c6:9a:21:62:cb:41:9c:17:67:cc:d5:08:21:
                    95:c3:96:92:bf:13:82:c4:e5:3e:18:b4:83:7a:95:
                    63:c2:37:64:89:48:10:e6:8b:2c:45:9b:97:e9:ad:
                    bf:5e:cc:8f:bf:03:ba:72:2a:3d:07:ad:cd:b1:2d:
                    ec:65:da:d0:a1:a8:94:71:ae:6c:73:31:b1:45:33:
                    b4:e7:37:91:f3:ba:ce:89:ee:30:12:e1:2e:26:48:
                    a5:87:c6:eb:ac:e7:dd:8c:ed:e2:b2:f5:4e:b8:2a:
                    5d:41:41:7a:92:c8:31:f0:66:0d:61:cb:7c:7e:ec:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:06:A3:42:A1:83:1E:B4:D4:83:FC:FF:EB:2A:3F:34:5F:95:86
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f9:4a:4d:82:18:74:33:66:a4:a5:6d:5c:27:5a:df:a8:50:
         7a:be:b6:31:50:82:4f:a9:6b:91:9d:64:e4:48:f9:00:6b:48:
         79:89:b3:8c:f2:ab:88:a1:35:2c:f4:ea:6e:e7:a7:53:37:10:
         68:1f:9b:52:8e:40:b0:4a:cf:ea:e7:ff:2b:d9:a0:1d:44:d1:
         48:1a:04:66:00:74:24:9f:86:97:9f:3e:cd:5d:5b:6d:71:36:
         67:bf:8b:81:aa:b1:8d:1d:75:22:0d:59:4d:8f:64:41:aa:d8:
         b0:93:d7:df:d3:81:f1:63:25:45:47:da:c4:5e:2f:5c:65:50:
         b2:04:08:a0:6e:d8:9a:23:8b:55:88:55:15:49:d6:68:9f:8c:
         55:b2:35:fa:01:af:38:f8:22:b9:a0:16:77:ce:d6:67:04:2c:
         eb:88:d9:e8:f6:d9:d5:8d:ab:17:75:47:42:28:77:b8:0f:f3:
         96:26:b1:ef:8f:a4:5d:56:a3:84:a7:b3:ae:70:16:28:ad:a4:
         e8:e8:08:67:56:f7:e3:9c:03:65:25:1f:c7:7d:fb:ea:6f:00:
         64:4c:46:3c:35:cc:cd:70:0e:6b:2b:c1:5e:7e:84:f8:8a:8b:
         50:55:49:84:71:16:cd:85:af:d9:d6:af:57:c8:cb:97:07:90:
         bd:11:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:26:40 2024 by rpki-client on console-ams.rpki-client.org