Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa
File:                     3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa (raw, json)
Hash identifier:          v0I7Ssh6jKhM9xb7tu2Vv8kmST8W+VnnY+pYA7DcA6M=
Subject key identifier:   8F:70:18:EF:D8:7F:F3:D3:F8:36:5E:72:9A:EE:D6:FE:71:68:12:E0
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       35245CDA759736E140265B4DB60AD225487C8640
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa
Signing time:             Tue 04 Feb 2025 18:40:43 +0000
ROA not before:           Tue 04 Feb 2025 18:35:43 +0000
ROA not after:            Tue 03 Feb 2026 18:40:43 +0000
asID:                     271945
IP address blocks:        190.110.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:24:5c:da:75:97:36:e1:40:26:5b:4d:b6:0a:d2:25:48:7c:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Feb  4 18:35:43 2025 GMT
            Not After : Feb  3 18:40:43 2026 GMT
        Subject: CN=8F7018EFD87FF3D3F8365E729AEED6FE716812E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:4a:8f:ed:88:b3:06:ff:e9:95:00:0a:ba:
                    7d:6b:27:91:8a:9b:ab:82:61:f5:7b:fb:1f:5f:3c:
                    d7:0a:1b:dd:44:6e:b3:a4:0f:bc:d4:ee:39:4a:59:
                    2e:a4:98:7d:2d:16:8b:52:90:13:5f:61:a0:d4:84:
                    2d:05:f1:76:54:1b:ee:4f:45:12:75:d0:20:7d:32:
                    e7:9c:b9:0c:2a:9b:e7:c7:68:16:74:d4:f5:01:f7:
                    18:84:b8:59:89:49:13:36:c6:4f:34:21:8d:f3:27:
                    a4:54:41:e8:b5:fc:79:09:67:98:f3:fe:5b:62:a5:
                    c7:d2:32:81:dd:ab:0f:2e:9f:a2:ad:12:43:8e:b2:
                    2b:19:cb:6d:79:d0:bc:e7:09:9b:51:71:07:b6:ac:
                    a7:28:cd:53:ba:72:f6:95:20:d2:f4:c7:e4:a3:62:
                    59:59:c0:ee:af:a2:d6:55:ba:ff:e0:fc:cc:90:64:
                    1e:c3:26:58:ac:64:93:c4:5c:56:94:31:3d:7b:c5:
                    02:9b:dd:6a:f2:1b:ec:50:1c:fc:f3:2a:25:fc:71:
                    46:b4:ca:8f:b6:b5:64:64:0a:c1:4b:e4:ea:5f:28:
                    1d:6a:c0:e6:37:61:a4:f8:a6:22:81:f7:bd:6f:9d:
                    67:1b:bb:cf:14:8c:5c:70:95:60:a6:1b:72:ca:1c:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:70:18:EF:D8:7F:F3:D3:F8:36:5E:72:9A:EE:D6:FE:71:68:12:E0
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:60:b4:89:82:23:d1:ef:f4:30:19:9e:28:ef:02:64:e6:f2:
         32:d3:8d:e7:ba:75:c2:0b:5e:b9:54:0e:76:a6:17:40:b3:60:
         38:7a:42:12:b4:d4:4b:bc:b4:c1:49:91:29:2c:7e:34:04:bf:
         24:0e:5b:26:43:d2:f0:53:6e:92:33:d8:67:e7:63:74:36:d1:
         f5:09:a7:80:28:85:b8:a9:6a:3f:e9:b8:a1:ae:10:36:b0:02:
         49:1e:1e:21:e6:58:40:64:41:ec:df:66:c0:73:b8:a2:29:e2:
         4d:20:c3:22:a0:21:ab:dc:7b:d9:18:5f:ec:32:d3:c4:f7:e1:
         39:a2:93:18:d9:83:bf:10:e0:dc:72:09:da:8e:a3:8a:7f:1b:
         f7:fd:0a:d3:69:bc:f3:e4:4f:f0:83:fb:56:4e:9b:c9:da:01:
         be:ab:3e:90:d0:38:8e:5f:bd:a4:01:c6:c5:86:23:2e:c4:63:
         cb:5b:f1:4d:a9:e7:f0:fc:e3:32:44:3e:fa:ff:a2:79:d7:fe:
         4f:4d:29:db:47:cc:80:91:c3:ec:2a:55:c2:c3:4b:90:d6:65:
         3d:42:14:ab:cb:df:4c:4a:33:fb:4a:31:9e:5a:31:31:28:11:
         6c:d1:6d:a5:9f:39:3c:3c:38:98:a4:3c:b3:f5:02:95:0c:56:
         4a:7c:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:58 2025 by rpki-client