Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31342e302f32342d3234203d3e203332303938.roa
File:                     3137302e3135302e31342e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          lR1zFBCGVK6lljLCLEEe2wru1YG8c+OvD4EoYvFOx1g=
Subject key identifier:   16:44:F0:03:EA:E8:A0:96:ED:AE:EA:95:03:7B:07:DC:2C:B9:D8:A3
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       39EA85233434512D3BC3A90CFBD06994CE35B6F0
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31342e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:02 +0000
ROA not before:           Tue 04 Feb 2025 18:43:02 +0000
ROA not after:            Tue 03 Feb 2026 18:48:02 +0000
asID:                     32098
IP address blocks:        170.150.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ea:85:23:34:34:51:2d:3b:c3:a9:0c:fb:d0:69:94:ce:35:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:02 2025 GMT
            Not After : Feb  3 18:48:02 2026 GMT
        Subject: CN=1644F003EAE8A096EDAEEA95037B07DC2CB9D8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:c2:e2:5c:e7:91:89:27:c4:7e:b1:84:ba:
                    21:ff:cd:00:40:8b:4a:6e:d7:08:e9:b8:16:39:91:
                    fb:d8:24:a6:de:f5:5a:12:cf:d1:37:40:af:0a:e5:
                    14:02:67:82:c2:70:87:da:cc:2b:86:0e:ea:d6:85:
                    02:08:c6:ab:3a:98:de:34:4c:78:2d:90:32:4a:e9:
                    da:ce:b7:8c:e0:cc:5b:f7:42:c7:32:39:f0:1b:63:
                    d8:ed:b2:a5:55:86:69:f4:ac:dd:1c:f3:dd:8f:00:
                    bb:9d:0a:cc:b9:57:f0:cf:a3:c5:54:8c:f2:c0:ac:
                    85:8e:8f:80:36:b7:a5:59:a7:8e:9a:aa:a8:da:e2:
                    b8:b4:b3:51:1d:6b:e0:da:3a:f1:82:c5:23:68:78:
                    72:af:4d:4f:81:69:f0:d4:9d:dd:e0:9e:29:53:81:
                    a4:4b:4f:95:f8:2a:85:aa:bd:6e:86:88:81:87:15:
                    24:84:b9:25:fa:c2:1b:f7:c1:6f:2e:9f:92:f0:bc:
                    69:e1:af:fc:15:0c:5c:67:81:49:8b:8f:13:62:dd:
                    91:b5:74:67:20:ad:87:48:e7:95:eb:dd:ef:1c:0c:
                    2a:93:05:51:a7:69:89:22:5c:39:d8:a4:b9:52:27:
                    af:63:38:7b:6a:d2:a0:d4:de:d9:b0:64:36:d9:93:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:F0:03:EA:E8:A0:96:ED:AE:EA:95:03:7B:07:DC:2C:B9:D8:A3
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3137302e3135302e31342e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c3:a8:20:0e:89:b6:5b:82:7c:9d:ec:fa:34:f1:e1:3f:ab:
         65:60:4e:a5:6b:3d:c0:b8:fa:0b:a8:0d:1f:4d:5e:10:61:4f:
         b4:29:75:fe:bc:41:ae:fa:55:8b:60:57:03:70:15:eb:25:51:
         8a:3d:51:aa:d0:08:a8:3a:d9:fb:45:72:54:19:50:8e:38:ac:
         6f:b1:0c:a2:80:50:0f:85:80:e7:77:6a:3a:20:79:21:62:7e:
         83:48:62:68:2b:8b:c5:c6:4a:90:ac:24:99:45:63:a8:91:c3:
         82:d0:d8:1a:5d:a4:10:6d:18:89:59:0f:c9:cc:d4:82:fb:99:
         72:87:ea:9e:3c:6c:28:20:95:bf:73:49:59:19:87:7b:e3:57:
         49:a4:59:8b:dd:23:5e:55:8a:2d:ec:7c:ec:97:b5:9b:94:e1:
         49:a4:11:72:17:1e:73:92:45:33:b4:7f:3e:ae:55:6e:26:2b:
         49:0b:23:ac:05:fd:f8:0f:6e:2d:82:e5:c4:6b:6e:ed:c8:69:
         6b:03:1a:b2:95:40:1e:dd:a5:d3:39:8b:22:c8:41:1d:c3:2e:
         be:78:da:f9:81:e0:4a:64:a2:ea:c6:49:50:51:85:55:7a:fb:
         8b:2f:e4:c0:bc:66:8c:8a:41:84:4f:2b:72:ee:06:78:7f:41:
         e8:4e:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:20 2025 by rpki-client