Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa
File:                     3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa (raw, json)
Hash identifier:          fUW3tUsvqGap4WkiMNoAgipxhvItDr9NjaKsDUPVr2Y=
Subject key identifier:   07:99:8D:F8:40:9C:00:D1:6E:B0:96:E3:8A:02:1E:B3:F0:D3:EB:87
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       0328C82AC6D73C610D439A8C8D470A76F2E77FA2
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa
Signing time:             Tue 05 Mar 2024 18:06:24 +0000
ROA not before:           Tue 05 Mar 2024 18:01:24 +0000
ROA not after:            Tue 04 Mar 2025 18:06:24 +0000
asID:                     271945
IP address blocks:        190.110.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:28:c8:2a:c6:d7:3c:61:0d:43:9a:8c:8d:47:0a:76:f2:e7:7f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Mar  5 18:01:24 2024 GMT
            Not After : Mar  4 18:06:24 2025 GMT
        Subject: CN=07998DF8409C00D16EB096E38A021EB3F0D3EB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:84:e3:56:c3:64:f7:71:51:7d:aa:9b:84:
                    97:5b:77:75:06:61:3a:08:89:d4:26:82:65:f4:1a:
                    4f:ae:fc:a3:ab:ca:0f:c5:de:20:5f:8c:69:e6:0c:
                    d2:e0:e7:f5:84:01:59:f5:f4:43:04:23:90:6d:c3:
                    cb:8e:36:da:0f:08:73:66:5b:e2:e0:78:2c:f5:6a:
                    af:37:fa:60:f0:12:24:01:40:ef:b6:65:97:2f:4d:
                    46:2b:a2:01:73:62:6a:3a:4e:67:f2:84:43:30:5e:
                    e3:e1:6a:fc:b0:43:e0:21:51:ac:93:68:56:aa:78:
                    67:93:9b:0a:e3:cb:66:8b:1c:0a:4c:32:a4:70:c8:
                    0c:c1:66:5a:1a:08:1a:92:2a:f6:28:12:04:bd:a4:
                    cb:62:a4:a2:c4:79:f6:3f:1c:d9:68:f9:ff:b1:64:
                    03:80:57:b2:89:93:df:a3:44:ae:12:29:bb:2a:aa:
                    6e:d2:33:dd:be:3a:0f:20:8c:e4:b6:c7:ad:be:d0:
                    69:d8:af:c9:b1:56:ea:2d:29:d3:27:6d:19:fa:da:
                    84:00:03:e8:cf:a3:d1:8f:04:56:96:52:92:ef:41:
                    a1:ed:43:f5:59:2e:7f:b8:ea:bd:07:22:2c:8b:2f:
                    2a:04:78:f0:be:69:58:21:02:be:8a:0a:3b:0d:d1:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:8D:F8:40:9C:00:D1:6E:B0:96:E3:8A:02:1E:B3:F0:D3:EB:87
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33332e302f32342d3234203d3e20323731393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:7d:cc:55:d9:0c:51:9e:e5:c0:31:3f:49:f0:70:ef:3f:
         ae:fa:c1:1d:fb:ee:74:97:86:74:01:f1:78:1a:9d:bd:7a:79:
         b3:e0:72:ce:fd:2f:74:3a:6e:b9:c3:4d:aa:3c:e2:a6:69:d4:
         70:a8:80:06:ad:ac:14:71:36:a2:e2:f6:c6:ef:9b:96:96:3b:
         e9:96:3c:fe:33:92:a4:e7:e0:63:aa:31:c4:65:32:2f:97:6b:
         fd:88:f6:62:d2:0f:12:53:56:59:35:7d:ff:ab:26:da:65:e8:
         e3:0a:24:5a:fd:54:3f:66:68:8f:6b:26:e2:94:8b:20:0d:41:
         38:d6:ed:0b:a7:70:1d:66:71:f9:f6:0a:99:f9:e9:09:60:e1:
         56:df:87:44:ae:6d:ff:d8:97:49:b2:56:9b:54:1b:8e:ee:f3:
         76:04:dd:a9:35:a1:0f:95:8f:d2:22:a5:27:a2:25:26:38:7c:
         9c:de:44:f3:30:a6:6f:13:68:15:d5:73:85:d6:c1:e6:a4:b9:
         ff:71:84:8b:2a:f6:2e:0a:f6:eb:52:c9:ae:1e:4f:14:a1:bc:
         5f:c6:2e:22:28:35:df:9f:04:09:b8:f3:e0:6d:97:f2:44:77:
         dd:35:16:2f:5b:bf:9c:eb:14:72:1a:b8:f4:ba:d8:34:a5:33:
         39:03:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org