Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323637363939.roa
File:                     3137302e3235342e33302e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          ksD9MmjT9cHXo4ctaU0UliB5PJy8gmeu5F2W8BiIIwk=
Subject key identifier:   6A:D3:0E:85:71:34:D1:CF:92:1E:90:53:1E:82:6A:94:42:40:33:78
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       705FD6FDD73050926DCD4F9201A229F868A9F3CB
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 04 Feb 2025 20:04:48 +0000
ROA not before:           Tue 04 Feb 2025 19:59:48 +0000
ROA not after:            Tue 03 Feb 2026 20:04:48 +0000
asID:                     267699
IP address blocks:        170.254.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5f:d6:fd:d7:30:50:92:6d:cd:4f:92:01:a2:29:f8:68:a9:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Feb  4 19:59:48 2025 GMT
            Not After : Feb  3 20:04:48 2026 GMT
        Subject: CN=6AD30E857134D1CF921E90531E826A9442403378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c2:19:39:4c:a2:52:2b:61:1d:16:72:56:d7:
                    f3:70:71:68:bb:24:99:87:72:11:b6:44:1d:88:e9:
                    3b:07:05:f1:31:a9:91:81:d2:c5:67:4f:69:0a:fd:
                    fd:a9:92:98:cd:0f:d6:c2:c0:9b:24:60:4b:99:6c:
                    b0:c1:b3:b4:56:c1:d1:9f:af:39:92:37:a4:4c:7c:
                    f4:26:ff:9d:41:c5:6c:a7:d9:d2:2a:2b:c6:57:8f:
                    f0:6a:35:c8:bf:c5:22:cc:49:aa:c8:fe:4f:42:79:
                    bc:43:25:ea:eb:98:1e:b3:39:e5:ab:ff:cb:0b:b8:
                    fd:c3:58:55:27:79:14:1a:15:75:f1:18:3d:32:b9:
                    7c:0e:2d:ae:ca:1b:b5:54:21:5c:79:99:b7:77:f4:
                    65:86:62:48:bc:83:cf:5b:dd:41:97:9e:3d:17:b0:
                    c1:ed:95:d0:2d:28:3d:3e:b9:aa:cf:f2:ce:65:88:
                    6a:b0:21:a0:61:f9:14:08:12:69:aa:da:27:68:50:
                    0e:45:cd:6a:90:bd:ec:82:3f:36:5b:66:c8:70:01:
                    d7:f8:44:a6:5c:39:d0:ce:a2:f9:4f:a3:a6:19:e4:
                    e1:61:54:43:08:f1:04:22:7c:4f:c7:ba:88:b8:eb:
                    36:7b:f8:1a:cf:7c:c0:67:69:3d:73:2e:f5:dd:05:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:0E:85:71:34:D1:CF:92:1E:90:53:1E:82:6A:94:42:40:33:78
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:a2:6d:50:45:00:e0:7c:90:77:25:ce:3c:14:3d:36:9b:
         f7:16:3b:27:f5:70:29:19:5b:c8:cf:43:6f:b5:23:7a:c1:e1:
         57:05:48:41:97:3a:7d:36:10:8b:a2:61:34:43:48:1c:26:c4:
         4b:c2:e8:07:70:aa:e8:dd:cc:db:45:2f:be:05:b6:51:7d:9e:
         2c:d2:f0:e4:fb:13:57:52:8b:13:c7:f2:f4:12:21:75:75:2b:
         29:82:e4:47:1a:3f:c3:75:35:63:b7:7b:d6:2d:0e:f6:8a:17:
         35:fb:1c:bd:49:83:9d:e6:1a:1e:d7:41:d6:cb:a6:d2:c9:56:
         18:59:29:aa:5a:e5:aa:92:9e:55:eb:fb:6d:34:14:65:69:b4:
         b6:58:88:aa:8d:9d:40:ad:36:11:73:fa:60:da:c4:c2:60:14:
         7a:a2:d2:5f:30:39:4e:d6:a6:09:75:e7:af:23:2a:19:e7:56:
         94:b5:7d:3d:32:73:fa:b6:37:c1:25:4a:67:22:17:f1:dd:d2:
         97:2a:ee:f1:f6:e8:b4:8b:b9:48:77:bd:9e:65:f4:36:fb:84:
         a2:4e:78:74:bf:54:3e:01:17:f3:f0:24:79:f7:f2:da:81:4c:
         3e:26:9b:dd:d9:bc:60:db:ce:98:6a:20:97:4a:56:09:ce:98:
         e7:0a:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:06:32 2025 by rpki-client