Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e34392e302f32342d3234203d3e20323730313033.roa
File:                     3139302e3131352e34392e302f32342d3234203d3e20323730313033.roa (raw, json)
Hash identifier:          YhJvZkG1yW3YucjBjMeEAhP7HK5i3jTNewvkPCF9DVA=
Subject key identifier:   2D:D3:3A:0B:3D:90:EF:BC:0C:73:AD:B6:C4:2F:E5:FE:5B:33:0F:74
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       45A4A898566739EDA7F768A10A3FA549036592A5
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e34392e302f32342d3234203d3e20323730313033.roa
Signing time:             Tue 04 Feb 2025 18:07:39 +0000
ROA not before:           Tue 04 Feb 2025 18:02:39 +0000
ROA not after:            Tue 03 Feb 2026 18:07:39 +0000
asID:                     270103
IP address blocks:        190.115.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 23:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a4:a8:98:56:67:39:ed:a7:f7:68:a1:0a:3f:a5:49:03:65:92:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:39 2025 GMT
            Not After : Feb  3 18:07:39 2026 GMT
        Subject: CN=2DD33A0B3D90EFBC0C73ADB6C42FE5FE5B330F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:7b:a1:cb:bb:41:7a:39:c5:cc:d6:1f:f4:
                    63:6f:8f:ff:6c:8c:b8:b3:cc:3e:79:bf:05:4f:41:
                    99:6e:ec:c7:95:fe:24:d0:4c:ab:8b:c7:2c:23:55:
                    c8:53:b7:37:0d:63:30:51:d7:eb:7d:a9:ca:2f:9f:
                    96:b8:82:0d:1d:72:4a:81:d2:2f:03:e1:e3:89:5b:
                    c3:04:26:86:21:cb:53:35:f7:9f:79:4f:cd:a2:31:
                    c8:f1:64:d1:61:ee:21:dc:54:1b:ff:ad:dc:dd:ab:
                    38:e3:67:d9:ac:ab:4a:1e:cf:9e:7b:c8:51:0e:d8:
                    b0:0e:48:86:49:9e:fc:c4:7e:0c:39:0f:57:f5:30:
                    54:c7:3c:84:f6:2a:30:e4:d1:2e:c2:8a:ee:2e:a4:
                    9f:82:4d:ed:a7:8a:86:5d:38:31:88:30:6a:43:71:
                    15:62:27:07:8c:4a:44:c5:78:69:1c:37:47:33:39:
                    f1:03:c1:b2:c4:cd:dc:9b:db:7f:11:4a:5e:e0:26:
                    c5:7f:dc:35:77:bd:d7:d8:15:0d:d8:1a:b2:01:f0:
                    f7:60:f2:3d:4e:a6:7b:0f:05:56:4d:4b:b7:42:c7:
                    64:d2:fb:f8:89:df:bd:31:b0:27:b5:cb:d0:82:ba:
                    48:24:26:c8:4f:d2:67:e8:e7:3d:f6:e7:b4:82:6b:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:3A:0B:3D:90:EF:BC:0C:73:AD:B6:C4:2F:E5:FE:5B:33:0F:74
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e34392e302f32342d3234203d3e20323730313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:be:a2:f9:59:85:8f:57:8b:cd:2a:c2:e6:3f:a9:8e:4a:97:
         95:eb:3c:06:45:c8:99:58:73:35:51:b7:ec:f1:c6:dd:d9:d7:
         54:6e:d0:2b:f6:41:d5:2d:85:3c:15:e7:1e:4d:53:7f:3f:89:
         dc:36:0c:77:50:bb:dc:77:d1:9d:b3:52:0f:55:09:b6:6e:4c:
         3d:eb:8b:2c:09:d2:b9:0c:99:8c:9a:7f:e1:cb:84:ff:74:10:
         92:01:6e:de:7a:48:b1:d3:5e:68:d1:8c:a7:b3:7d:48:26:c1:
         7b:48:da:cd:57:60:b9:a2:33:87:d1:d6:14:2e:f6:49:7b:81:
         0a:a0:57:e9:7f:f7:bd:ff:f0:2e:75:6f:1b:2b:dd:19:3d:ee:
         7d:bb:15:19:93:19:0d:cb:42:00:c5:60:8f:1b:25:3c:c7:ec:
         7c:d1:bf:39:b4:db:5e:6f:9f:21:24:aa:3f:f0:19:ea:f7:5b:
         3c:97:49:49:72:d4:9d:8d:06:a8:cf:8f:33:bd:45:17:88:82:
         a6:3d:63:47:b4:59:f6:6c:7b:75:66:5b:fe:23:f2:a7:28:78:
         a1:3f:65:b7:31:15:00:65:5e:7a:65:bb:cd:4c:44:c8:de:9b:
         a8:b7:2c:ff:a9:af:bf:c0:18:22:73:c6:cd:4b:53:34:51:57:
         dd:c7:81:1d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURaSomFZnOe2n92ihCj+lSQNlkqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNTAyMDQxODAyMzlaFw0yNjAyMDMxODA3MzlaMDMxMTAvBgNV
BAMTKDJERDMzQTBCM0Q5MEVGQkMwQzczQURCNkM0MkZFNUZFNUIzMzBGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeXuhy7tBejnFzNYf9GNvj/9s
jLizzD55vwVPQZlu7MeV/iTQTKuLxywjVchTtzcNYzBR1+t9qcovn5a4gg0dckqB
0i8D4eOJW8MEJoYhy1M19595T82iMcjxZNFh7iHcVBv/rdzdqzjjZ9msq0oez557
yFEO2LAOSIZJnvzEfgw5D1f1MFTHPIT2KjDk0S7Ciu4upJ+CTe2nioZdODGIMGpD
cRViJweMSkTFeGkcN0czOfEDwbLEzdyb238RSl7gJsV/3DV3vdfYFQ3YGrIB8Pdg
8j1OpnsPBVZNS7dCx2TS+/iJ370xsCe1y9CCukgkJshP0mfo5z3257SCaxg9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULdM6Cz2Q77wMc622xC/l/lszD3QwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzkzMDJlMzEzMTM1MmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnMx
MA0GCSqGSIb3DQEBCwUAA4IBAQCHvqL5WYWPV4vNKsLmP6mOSpeV6zwGRciZWHM1
Ubfs8cbd2ddUbtAr9kHVLYU8FeceTVN/P4ncNgx3ULvcd9Gds1IPVQm2bkw964ss
CdK5DJmMmn/hy4T/dBCSAW7eekix015o0Yyns31IJsF7SNrNV2C5ojOH0dYULvZJ
e4EKoFfpf/e9//AudW8bK90ZPe59uxUZkxkNy0IAxWCPGyU8x+x80b85tNteb58h
JKo/8Bnq91s8l0lJctSdjQaoz48zvUUXiIKmPWNHtFn2bHt1Zlv+I/KnKHihP2W3
MRUAZV56ZbvNTETI3puotyz/qa+/wBgic8bNS1M0UVfdx4Ed
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:36:13 2025 by rpki-client