Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e33332e302f32342d3234203d3e203332353930.roa
File:                     3139302e3231372e33332e302f32342d3234203d3e203332353930.roa (raw, json)
Hash identifier:          6mOqiWiIJXIx6+AYyy9PA8WyCrLX/9pSubtoDCec4aY=
Subject key identifier:   11:8C:7B:26:73:2C:9A:42:17:15:98:FC:15:8E:EA:9E:E1:9A:A1:41
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       21F9C8E60E68D81650894EFB203E2AAD0196E5F5
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e33332e302f32342d3234203d3e203332353930.roa
Signing time:             Tue 04 Feb 2025 18:41:46 +0000
ROA not before:           Tue 04 Feb 2025 18:36:46 +0000
ROA not after:            Tue 03 Feb 2026 18:41:46 +0000
asID:                     32590
IP address blocks:        190.217.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f9:c8:e6:0e:68:d8:16:50:89:4e:fb:20:3e:2a:ad:01:96:e5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:46 2025 GMT
            Not After : Feb  3 18:41:46 2026 GMT
        Subject: CN=118C7B26732C9A42171598FC158EEA9EE19AA141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:87:21:20:aa:23:2b:5c:ec:85:88:b6:18:
                    50:a5:cd:e5:bb:8d:cb:b1:9b:ab:b9:90:5f:07:d0:
                    af:53:82:11:db:38:f2:59:70:f4:70:d2:2c:52:db:
                    a7:cc:16:22:33:84:67:07:74:6f:01:95:5e:72:c7:
                    7f:b1:52:a5:1c:a5:9b:9d:ae:a5:93:25:e4:55:87:
                    cf:f5:7d:43:35:e7:c1:7e:dd:0e:e5:94:77:6d:27:
                    30:3b:8c:4b:95:64:8e:4f:d4:3d:60:be:fe:8b:f8:
                    7e:af:3c:b0:87:50:15:20:d7:75:9d:0b:40:dc:72:
                    99:04:b7:30:91:7f:85:6a:db:f0:74:50:bc:87:06:
                    cd:60:f4:f5:be:d9:b3:03:2e:ea:df:45:73:8e:48:
                    e3:9f:62:ef:5d:b2:03:ee:d3:89:09:0b:94:d8:f8:
                    1f:e5:15:47:c3:3b:96:fc:1e:33:bf:75:42:f0:78:
                    8d:fc:f4:b8:1d:16:59:f3:aa:73:03:de:a0:e6:17:
                    fb:1b:9a:02:29:37:df:dc:7c:b0:0c:14:a2:33:a6:
                    9f:80:a1:48:9e:30:62:ab:ca:6a:ef:62:49:78:da:
                    14:04:d5:f2:9f:7b:8b:5c:f5:da:05:fd:5c:f0:83:
                    e3:45:22:ad:ec:45:8a:9d:2d:c3:62:c5:2c:e3:5c:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8C:7B:26:73:2C:9A:42:17:15:98:FC:15:8E:EA:9E:E1:9A:A1:41
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e33332e302f32342d3234203d3e203332353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:1e:22:73:9a:f7:77:28:5a:6a:28:e4:62:e2:59:61:0e:
         ee:97:70:65:56:87:7b:dd:f5:12:ec:61:72:a7:bf:f7:b0:2b:
         01:db:c3:cc:53:80:a6:42:d7:f3:4a:41:d2:f8:cd:85:18:12:
         c5:9d:3a:1e:4b:fa:27:a7:3f:04:e9:11:12:55:41:47:69:76:
         f3:9b:bb:6b:3e:f7:ac:51:4a:12:76:50:b5:fd:e4:ac:2e:8a:
         2f:55:86:20:3b:c6:48:43:3b:b6:0f:7b:27:d4:93:00:07:99:
         3a:57:c3:b9:cb:c6:f0:94:11:e9:e2:6d:c2:ea:8d:27:5c:02:
         73:42:bf:f0:7b:c2:75:7c:2b:53:4c:d3:f2:d5:93:97:bf:62:
         90:be:9e:89:0c:68:a6:80:a1:2d:46:87:ec:cb:36:21:d0:c8:
         54:70:76:3f:84:1b:93:83:73:f7:0a:c4:3c:78:81:d8:a3:2e:
         56:22:3f:6d:bd:b8:7b:1e:53:c8:40:7d:1e:94:e6:69:42:db:
         fc:46:36:75:11:56:7b:45:bf:c9:31:f5:4b:97:ca:f7:d9:de:
         13:33:be:ef:61:9d:91:bc:78:79:dd:3e:5e:ce:10:a4:84:7a:
         02:25:10:24:bd:a7:92:d9:b9:67:be:ee:70:66:e4:c7:a5:cf:
         c7:80:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:39:26 2025 by rpki-client