Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa
File:                     3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          8t+AKmlnak1G0/xVOfoHgOIeh3ChsNMERRboLIKVXFU=
Subject key identifier:   CD:3D:C5:15:EB:67:3B:64:DF:FE:78:A3:87:22:B2:A0:A3:DB:7D:66
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       066B76B114F503C98CBFFB2D13172BE32F062137
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:24:55 +0000
ROA not before:           Tue 04 Feb 2025 18:19:55 +0000
ROA not after:            Tue 03 Feb 2026 18:24:55 +0000
asID:                     11014
IP address blocks:        170.150.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6b:76:b1:14:f5:03:c9:8c:bf:fb:2d:13:17:2b:e3:2f:06:21:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:19:55 2025 GMT
            Not After : Feb  3 18:24:55 2026 GMT
        Subject: CN=CD3DC515EB673B64DFFE78A38722B2A0A3DB7D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:75:64:75:01:11:3f:55:b5:4b:3f:93:2e:
                    b4:8e:82:ee:e9:ef:c5:a8:12:1f:c3:2e:6b:ec:a8:
                    67:6f:d8:bd:03:af:54:38:66:48:f0:2d:5e:f8:4e:
                    6c:16:9c:14:f7:f9:81:85:52:97:2f:1b:4e:65:50:
                    e6:c4:ba:5e:56:ad:52:86:08:ca:64:e4:c2:02:47:
                    25:4a:ae:16:37:eb:56:14:4a:02:a4:65:cd:73:cd:
                    e7:6a:3a:a9:de:30:f7:d3:05:f1:0f:5e:db:da:b9:
                    b2:e5:d9:1a:c5:c1:ec:d9:74:64:e2:10:26:43:9c:
                    c3:16:04:26:54:e1:20:99:47:af:4b:c4:8d:76:55:
                    2f:ba:78:b6:2f:df:fc:f1:00:d8:3c:b5:57:3b:ee:
                    41:dd:ad:d4:b5:2a:b0:34:35:26:8e:0e:59:50:2a:
                    34:c1:0f:a4:8e:f5:e1:9c:c7:09:b2:bd:a4:a4:d8:
                    5c:e6:5c:5e:0a:af:ac:7b:8a:2f:55:18:ed:92:09:
                    39:2e:ec:88:4d:c4:66:44:96:8a:b3:9a:a2:c8:af:
                    c6:2e:81:78:2b:94:d8:e8:ac:93:49:25:02:b7:6f:
                    a6:36:21:20:7f:62:d5:ce:aa:28:99:da:d6:e9:e6:
                    98:94:77:7f:79:39:60:9e:2e:5b:50:86:98:b1:95:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3D:C5:15:EB:67:3B:64:DF:FE:78:A3:87:22:B2:A0:A3:DB:7D:66
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:25:71:d6:36:b5:56:d1:01:01:0b:11:34:ed:b1:69:b1:2e:
         c7:5a:85:68:38:90:fc:76:34:14:d4:6f:59:b8:26:6f:88:ba:
         7b:86:d3:86:a6:32:ab:99:8f:82:d5:36:b8:d3:59:43:fb:25:
         6a:bf:20:f5:3b:9f:e4:48:34:29:92:98:e4:d3:b9:72:1f:e3:
         f2:13:b9:7a:ae:a7:f8:35:2d:2f:e8:31:b4:ad:e4:d8:2d:ae:
         7a:67:71:e3:bf:b9:6e:07:b7:51:27:9b:82:b5:ed:27:68:d0:
         6b:fd:c6:10:65:31:3f:76:b6:c1:8c:e3:cd:c4:19:5a:4b:1a:
         23:a2:2e:18:48:7c:d8:d2:f1:69:a8:ae:25:58:eb:53:ec:30:
         83:46:12:22:0f:8a:ad:e6:cb:ef:b4:ca:9b:d2:99:e9:f7:da:
         5a:e2:2a:0a:a3:68:f7:b0:2e:86:20:4c:e3:06:b9:e4:3a:f1:
         d9:07:7d:fb:fb:b8:0f:30:6a:5a:3e:68:48:13:a1:e6:8b:37:
         66:06:91:53:63:00:ca:92:3e:6f:ed:ae:fa:8b:d4:a4:ae:fd:
         fb:d7:7b:07:62:fa:5b:de:15:69:ce:73:6c:df:05:59:71:8d:
         bc:e3:e7:ea:42:29:ba:40:4e:ab:9a:7c:24:d5:9a:41:66:ff:
         80:b0:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:19 2025 by rpki-client