Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33332e302f32342d3234203d3e20323732383039.roa
File:                     3136312e32322e33332e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier:          Fz68ufOLi6lcGggkcPTUCK9BoCmunt5g1i2/qLqnNa8=
Subject key identifier:   EA:57:6C:00:5E:9D:DC:30:A4:73:7C:29:7B:56:38:1B:CB:BD:28:C2
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       714E8418B08EDE80FE0743EB3699BAAEAFAEDDBD
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33332e302f32342d3234203d3e20323732383039.roa
Signing time:             Tue 04 Feb 2025 18:42:40 +0000
ROA not before:           Tue 04 Feb 2025 18:37:40 +0000
ROA not after:            Tue 03 Feb 2026 18:42:40 +0000
asID:                     272809
IP address blocks:        161.22.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:84:18:b0:8e:de:80:fe:07:43:eb:36:99:ba:ae:af:ae:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Feb  4 18:37:40 2025 GMT
            Not After : Feb  3 18:42:40 2026 GMT
        Subject: CN=EA576C005E9DDC30A4737C297B56381BCBBD28C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:df:01:88:ec:7d:61:ff:91:87:9a:a5:f3:
                    c5:5b:d4:bb:08:d2:88:e6:86:51:a2:af:05:ec:4c:
                    b1:49:82:f0:46:3a:e6:be:cd:81:6b:72:ed:8e:9b:
                    bc:35:aa:27:49:b5:7c:d8:1f:8d:9e:f2:9e:ef:9f:
                    82:ce:1a:0f:88:40:40:21:73:41:eb:a8:c1:47:e8:
                    6c:1c:51:a8:e4:d0:fc:51:87:ce:d2:89:81:8d:ff:
                    c7:a1:e7:51:42:ae:5c:de:4c:53:aa:d9:64:c8:6d:
                    df:59:d4:72:63:79:87:b8:fd:df:5e:06:32:b2:41:
                    9f:60:e2:87:92:8a:b0:a8:3f:ba:84:58:83:a2:0c:
                    d3:02:75:25:97:03:4e:38:aa:00:c7:26:34:31:4e:
                    4a:65:43:82:59:64:b2:a6:33:86:ce:58:11:6f:51:
                    e6:aa:c0:a6:3b:9f:14:3b:8f:cf:77:18:fd:08:86:
                    70:aa:0a:9f:92:02:78:b9:df:1a:e2:2d:a6:46:e8:
                    9e:ee:7c:01:54:d6:c1:71:55:4a:34:95:41:46:12:
                    88:4a:5d:b7:5a:42:53:9a:07:7e:b0:7e:2f:66:69:
                    c0:e5:2f:a4:39:5b:62:73:a8:01:3c:6b:39:49:a1:
                    09:02:48:1b:78:17:34:50:31:6a:31:84:45:27:0a:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:6C:00:5E:9D:DC:30:A4:73:7C:29:7B:56:38:1B:CB:BD:28:C2
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33332e302f32342d3234203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:dc:16:ae:53:a2:1c:79:4a:fa:fb:4d:95:20:83:45:73:
         03:16:0c:95:00:ad:45:52:b2:5b:c2:fe:e5:8b:66:e7:dd:a9:
         69:33:b6:9b:e4:4b:dd:4e:5f:89:45:3f:f5:1e:43:9a:4e:74:
         b1:d4:49:ee:c9:b1:1c:c9:74:b2:75:80:43:ad:2f:31:f4:3b:
         0a:aa:ce:69:6e:2b:c5:6b:80:03:4f:9f:b3:e6:6d:33:71:b2:
         2d:1a:31:3c:1d:b9:d7:c7:c3:d1:ff:b8:a0:62:6f:c5:81:39:
         ba:49:5c:24:80:fd:33:b6:d2:e2:76:6b:1b:60:86:6f:d9:c6:
         64:1f:aa:fd:ca:03:7a:6f:39:2a:3a:85:b1:6d:2d:9f:27:71:
         3c:b6:c6:96:49:de:67:44:e2:3c:e8:e9:18:a0:32:ce:e3:ab:
         37:f9:74:3a:7e:a3:3a:6d:c0:e5:43:9b:d8:48:2c:0e:27:15:
         a9:c0:19:e8:c7:49:f0:a6:39:05:03:d2:b6:d1:12:78:59:d3:
         c4:ea:e7:2b:27:00:1f:ef:d0:18:31:bf:e9:f9:ad:57:c0:37:
         33:8a:e6:af:04:a2:4b:2f:81:8a:13:72:5c:65:a6:d4:72:f7:
         b6:1d:78:5c:4a:d7:b2:35:39:69:59:63:76:f2:56:29:18:47:
         13:34:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:17:33 2025 by rpki-client