Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3230342e302f32342d3234203d3e20323635373035.roa
File:                     3138362e33332e3230342e302f32342d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          7f1yUseBQc0s+GfyuxFR8tkTMMAtzeGRftMbzNBhi3I=
Subject key identifier:   F4:9D:FD:59:BC:AF:62:D9:56:AF:BF:72:74:25:01:0F:B2:DD:32:44
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       75A47E251129D1AD5C1FD7F5F6569CDB48F87686
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3230342e302f32342d3234203d3e20323635373035.roa
Signing time:             Tue 04 Feb 2025 20:01:36 +0000
ROA not before:           Tue 04 Feb 2025 19:56:36 +0000
ROA not after:            Tue 03 Feb 2026 20:01:36 +0000
asID:                     265705
IP address blocks:        186.33.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:7e:25:11:29:d1:ad:5c:1f:d7:f5:f6:56:9c:db:48:f8:76:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Feb  4 19:56:36 2025 GMT
            Not After : Feb  3 20:01:36 2026 GMT
        Subject: CN=F49DFD59BCAF62D956AFBF727425010FB2DD3244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:fa:c9:2b:74:c7:c5:7d:51:21:a7:6d:1b:
                    86:ae:1e:31:13:ad:e8:dd:62:35:b5:60:33:ce:72:
                    13:b6:60:c6:09:69:99:91:84:9c:d0:3b:fd:fc:19:
                    75:35:e1:20:55:eb:71:d6:86:fa:f0:c0:ee:8b:d3:
                    51:7b:72:74:89:bf:2d:c6:6b:56:33:88:48:b9:5f:
                    f8:59:f7:1c:f0:b7:ba:3c:19:8d:4a:93:7f:16:86:
                    50:39:70:75:13:3a:4d:01:29:ed:a6:9a:5f:ab:58:
                    1b:97:86:da:e7:b8:73:56:70:f0:e2:7f:96:2f:21:
                    fd:05:29:63:8b:a4:de:bd:40:f9:8f:d2:70:25:41:
                    55:1c:ed:17:d4:d9:f1:87:01:90:84:de:fc:e8:03:
                    09:b0:e8:84:41:66:ff:74:88:a5:e0:af:c0:93:2f:
                    95:de:9d:05:98:01:ed:d5:bf:5a:5a:b2:cc:7a:f4:
                    77:48:ec:c8:0d:07:2d:aa:27:8c:79:b0:22:87:c0:
                    a8:7c:c4:8d:05:2d:27:48:16:ae:14:0e:8c:a4:28:
                    ec:ad:37:da:21:67:6c:de:a7:b8:15:9a:12:f1:01:
                    79:37:57:38:52:dd:ce:0d:7b:18:c3:5d:ef:f6:1b:
                    0c:21:e5:04:d1:2a:8f:f8:03:ec:64:19:1e:eb:89:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:FD:59:BC:AF:62:D9:56:AF:BF:72:74:25:01:0F:B2:DD:32:44
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3230342e302f32342d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:e3:5b:72:b0:4e:6b:69:ba:bd:e7:34:0a:e7:0b:45:d8:
         7f:f3:cf:95:92:fe:22:95:f9:e5:88:75:dc:f7:3e:1d:1f:53:
         2a:e4:b8:fd:89:0f:1f:1c:10:e4:bf:a6:ee:46:67:e3:5a:ef:
         b4:64:0e:20:f6:5d:ed:a5:56:48:ba:a6:9f:d4:8d:1d:3c:a2:
         ba:da:04:23:aa:12:ca:ee:1f:36:0f:0a:ba:ed:14:f5:37:af:
         32:85:9e:f3:a4:77:73:98:bc:16:97:b3:c1:60:e1:7e:35:0f:
         2c:48:ee:fb:ed:68:ab:35:30:3a:6d:1c:d2:03:11:de:41:68:
         a7:4b:c9:3d:01:ce:8b:18:a2:33:65:db:44:88:56:ce:04:3c:
         16:72:30:b1:3b:de:cc:3d:45:8a:7d:a1:02:2c:81:cf:36:1c:
         a3:97:7d:fc:83:c4:b2:bf:32:71:70:78:94:e4:18:cb:23:e2:
         1a:5e:87:ed:be:7b:98:3e:86:22:df:72:24:cf:7f:1c:78:13:
         65:77:7d:6d:17:8b:5d:5a:79:41:2a:cd:8b:f8:25:a6:64:c3:
         69:fd:d6:60:b9:20:2d:10:e7:cd:f5:b9:cf:ec:b8:ad:2d:47:
         58:b8:58:68:a9:bf:33:9f:ee:12:0e:61:59:ad:20:67:1a:ec:
         10:a3:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:03 2025 by rpki-client