Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e20323635363532.roa
File:                     3137302e38332e35392e302f32342d3234203d3e20323635363532.roa (raw, json)
Hash identifier:          k6L6EU4wGIjb7GNhhwvDBAm/k4S84zdAO87Zh5CYHKg=
Subject key identifier:   1B:60:17:B7:85:B2:83:C9:99:1B:3C:78:FB:FA:72:86:08:25:96:8D
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       78D95A53E45A996CBFE14C23512B77F5367139A5
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e20323635363532.roa
Signing time:             Tue 04 Feb 2025 18:09:38 +0000
ROA not before:           Tue 04 Feb 2025 18:04:38 +0000
ROA not after:            Tue 03 Feb 2026 18:09:38 +0000
asID:                     265652
IP address blocks:        170.83.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 15:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d9:5a:53:e4:5a:99:6c:bf:e1:4c:23:51:2b:77:f5:36:71:39:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Feb  4 18:04:38 2025 GMT
            Not After : Feb  3 18:09:38 2026 GMT
        Subject: CN=1B6017B785B283C9991B3C78FBFA72860825968D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:87:21:a9:eb:49:03:54:48:40:4b:3a:16:
                    83:94:d3:51:bb:45:42:0d:5d:00:49:e6:8d:4a:30:
                    ab:a0:a6:01:8f:17:32:e9:8c:a2:3c:33:1c:5e:4c:
                    94:b2:2a:83:9c:aa:fd:63:1e:51:8e:27:d3:cb:a9:
                    4e:93:11:a4:65:bb:82:30:e6:61:95:ab:89:ae:4a:
                    14:5d:8f:c9:a8:a6:3b:45:ac:ea:a1:2c:d3:a3:12:
                    c1:38:ce:57:ff:b7:c8:6e:fa:29:e3:aa:36:70:96:
                    8a:27:38:04:6e:06:ea:f4:2e:c1:29:df:b0:85:6d:
                    a0:aa:6f:67:79:5b:61:3d:9b:04:21:0a:9c:f0:d3:
                    e0:99:67:f5:06:42:94:5b:7f:da:6f:cc:8f:38:e1:
                    c8:92:8e:bc:85:54:48:5f:d3:92:a1:6d:f8:2b:b9:
                    4a:da:ab:9e:0b:5f:16:72:f0:7f:a2:32:7a:24:ce:
                    8e:91:0f:75:37:16:88:34:e1:0d:96:aa:85:c4:18:
                    03:f4:d9:6d:98:ea:ca:5f:52:7e:bd:0e:3b:1f:29:
                    cf:4b:8a:f5:1e:e3:40:55:84:0c:39:e6:83:9c:28:
                    77:82:be:b6:6a:01:37:e6:c0:0c:38:1c:84:b5:12:
                    04:f8:2a:12:c8:c6:78:4e:a5:a7:b2:a2:2a:ed:48:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:60:17:B7:85:B2:83:C9:99:1B:3C:78:FB:FA:72:86:08:25:96:8D
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/3137302e38332e35392e302f32342d3234203d3e20323635363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:18:b2:3a:b3:c7:39:cf:71:c9:e5:dd:c4:7a:0a:78:3b:
         ce:d3:0e:df:b4:9b:c0:e3:ee:ed:60:b9:b0:0e:2a:ce:74:89:
         47:e9:1f:33:2b:d2:c6:ef:99:31:88:04:0f:0d:6b:76:57:84:
         74:32:aa:2b:30:4b:57:e9:b3:2d:09:61:8d:6d:be:0d:39:c5:
         b2:8c:d5:1e:fa:8b:32:31:b3:8e:14:62:2d:33:b7:6b:ce:70:
         98:3e:30:6b:e8:4c:49:ce:9d:19:31:56:1a:5c:2a:54:4e:5d:
         d4:c8:a3:26:4e:ad:7a:b2:07:56:d4:05:19:69:fe:fe:e5:37:
         82:79:ef:5d:78:eb:bc:9a:73:ec:a1:52:d5:8e:ba:16:96:ac:
         9d:7d:34:01:25:42:9a:b6:46:ff:5c:10:0c:87:dd:62:86:ba:
         72:d2:d5:84:55:99:e3:d5:7c:97:6d:fe:5f:76:25:a3:f2:e2:
         8f:01:2c:2e:95:0c:d1:cf:e2:a1:e6:28:fa:6f:ab:2a:6f:2f:
         2a:3c:6d:d9:a8:36:ee:39:84:70:be:b9:6a:96:fc:7c:f3:73:
         dd:86:7f:14:0e:ac:d3:b2:09:24:73:3a:6c:22:6d:f3:84:9f:
         17:67:87:1e:e3:eb:de:90:fe:f1:fd:94:62:cb:e0:c9:9e:97:
         00:fd:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:08:03 2025 by rpki-client