Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa
File:                     3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          jW3b7DYtffEk5waDjmpM5w0Gk/TrDUVL/Z9Fyfljua0=
Subject key identifier:   C5:0A:DA:17:9F:0F:57:08:70:EE:AC:EB:60:A5:B0:7A:58:8F:C0:9D
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       6897FCDA154E0640DAB4065CA81195F8F114B5AC
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 04 Feb 2025 18:40:42 +0000
ROA not before:           Tue 04 Feb 2025 18:35:42 +0000
ROA not after:            Tue 03 Feb 2026 18:40:42 +0000
asID:                     269931
IP address blocks:        190.110.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:97:fc:da:15:4e:06:40:da:b4:06:5c:a8:11:95:f8:f1:14:b5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Feb  4 18:35:42 2025 GMT
            Not After : Feb  3 18:40:42 2026 GMT
        Subject: CN=C50ADA179F0F570870EEACEB60A5B07A588FC09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:bb:7d:b7:fc:4f:d6:bc:ca:4e:fb:e0:a6:
                    ea:cf:97:72:cf:e0:4b:38:83:1c:6e:08:d9:a2:d6:
                    26:0d:d5:65:4a:ed:4a:08:59:bf:5e:2f:46:10:46:
                    7d:b9:42:57:25:92:53:3c:c9:0c:2b:34:b1:dc:04:
                    42:20:f1:91:44:5e:9c:ea:8c:43:10:56:f9:69:8e:
                    20:f2:fd:f7:89:d9:cf:b2:d8:04:93:6f:ab:ee:0c:
                    fc:94:24:7d:3c:20:c5:39:ba:3f:37:d2:ef:dc:27:
                    5b:24:93:65:45:83:a3:7c:5f:ed:72:db:1b:c9:9c:
                    bf:2e:75:bc:48:de:9f:f9:15:cd:5c:89:a1:55:7f:
                    9a:ce:3c:32:0d:66:5d:b8:7f:45:8a:fd:3c:2e:78:
                    fc:52:40:b4:dc:cf:25:66:01:72:fd:1f:bc:f2:1c:
                    9f:dd:84:47:87:4c:4b:fd:02:0c:dc:f7:37:28:84:
                    56:37:cd:03:ea:1b:1e:b0:4e:1a:64:6b:22:76:7d:
                    b8:b9:35:4f:49:30:1c:7a:d2:0d:71:3b:37:60:25:
                    01:e7:63:76:e1:dc:44:2e:5f:75:09:ee:b1:86:46:
                    e9:8c:32:76:eb:78:32:61:a7:3a:9f:d5:91:2b:85:
                    f9:e2:9b:18:22:4d:f9:89:b7:4a:33:ed:27:46:96:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:DA:17:9F:0F:57:08:70:EE:AC:EB:60:A5:B0:7A:58:8F:C0:9D
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:f7:6d:ff:6d:25:fe:9e:c2:4d:85:e1:99:6e:2a:f3:ac:
         76:48:75:57:a7:06:16:14:3a:28:db:85:3c:56:a7:1b:67:f2:
         49:72:d5:56:b3:c0:e0:ad:38:03:ac:22:64:54:61:54:97:4e:
         28:7d:91:0d:59:d0:fd:e6:af:49:bd:3b:b8:58:ab:f7:77:70:
         a8:e7:2e:23:89:4e:a3:60:76:06:ff:89:31:1d:d4:e8:de:59:
         2f:5b:83:5a:7e:fc:57:34:b4:07:4c:61:e8:51:ad:21:d8:b4:
         d4:c8:5f:f7:bd:fa:7d:c7:58:0b:92:1e:f2:8f:7c:1d:d8:9b:
         1f:93:96:9f:fa:f1:b5:33:3c:00:c5:f2:25:e5:d5:6e:b8:1c:
         d5:16:61:f0:f0:75:80:dc:f9:aa:d1:71:24:30:79:a4:3d:41:
         9a:8e:c2:c5:80:ae:20:df:3e:a8:6f:9d:2d:dd:78:51:ce:39:
         00:63:3e:cb:43:91:a2:0a:22:2f:a9:12:cc:11:54:eb:83:33:
         12:4b:1f:2e:53:4c:51:ae:ca:5e:76:39:3e:4a:36:03:4c:ad:
         db:07:59:18:48:51:cb:b0:50:73:14:8b:1d:03:62:34:1d:c4:
         e9:b3:6c:92:eb:0e:88:be:7e:85:3f:8b:86:a6:2c:45:f4:31:
         22:e9:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:55 2025 by rpki-client