Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
File:                     3230302e33332e372e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier:          rJ1j7z7Of94MbQNdy0vdypYbULQkAiNYrZx6cwJK0AE=
Subject key identifier:   41:CB:6E:BD:01:AC:E2:03:58:45:A5:7F:65:46:50:FC:AE:C6:1A:83
Certificate issuer:       /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial:       1E13C8CAD60FDC3BD6E01588B4C8C1F38A3F9C83
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
Signing time:             Tue 04 Feb 2025 18:21:17 +0000
ROA not before:           Tue 04 Feb 2025 18:16:17 +0000
ROA not after:            Tue 03 Feb 2026 18:21:17 +0000
asID:                     8151
IP address blocks:        200.33.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:13:c8:ca:d6:0f:dc:3b:d6:e0:15:88:b4:c8:c1:f3:8a:3f:9c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
        Validity
            Not Before: Feb  4 18:16:17 2025 GMT
            Not After : Feb  3 18:21:17 2026 GMT
        Subject: CN=41CB6EBD01ACE2035845A57F654650FCAEC61A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:cf:f4:b5:4b:6f:1a:ca:11:60:5e:2c:b3:
                    06:87:34:e2:8d:bb:a6:d4:88:9c:4c:d6:70:57:4e:
                    1d:c8:12:d2:e6:d7:d5:26:3f:78:bf:22:71:5f:9c:
                    b1:3e:f8:3a:d5:e0:b2:10:2e:57:1a:81:8b:16:44:
                    e9:27:96:72:9b:3b:13:4c:8f:76:ee:b0:e2:ae:ed:
                    8b:e7:fb:84:e8:f4:16:d6:b2:3f:97:44:bc:51:e2:
                    25:84:c9:ba:d0:e2:48:7a:8a:18:de:6a:a4:94:20:
                    b3:24:b3:0f:e3:5a:6e:a0:7f:0e:01:b0:e7:d3:fd:
                    66:ac:6b:fc:fb:23:ed:65:d4:e7:a2:b5:4e:79:cd:
                    1a:18:de:3d:02:65:6d:f5:1b:0e:29:f0:47:0d:cc:
                    6a:97:56:0e:02:b5:db:50:e7:41:b3:98:c1:a0:55:
                    e7:f6:86:f1:08:a0:6f:df:fc:cf:bc:97:5c:2e:cc:
                    cb:cf:0b:7e:22:9e:46:ea:35:c7:4d:7c:ca:bc:a9:
                    c2:b2:98:ac:ff:3d:97:c1:4e:74:f6:4b:cd:a2:ee:
                    b0:0e:af:a1:d1:fb:a2:64:6a:2f:b7:5d:3a:2c:85:
                    c5:4f:7d:dc:7c:51:a8:00:90:e7:f8:a4:8d:25:6a:
                    d8:c3:a6:62:c0:de:6d:4e:03:d7:1f:ec:9a:e7:ad:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:6E:BD:01:AC:E2:03:58:45:A5:7F:65:46:50:FC:AE:C6:1A:83
            X509v3 Authority Key Identifier:
                keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:84:a8:5f:67:55:e3:a9:ef:b7:a8:9a:38:44:a9:2f:6c:
         df:d2:32:b0:96:be:14:74:04:7a:e7:6f:4c:4d:b9:e6:8e:1b:
         7d:34:ef:65:6b:f5:54:b0:76:af:9f:3a:47:e2:36:ab:b3:44:
         ac:a2:30:2a:8c:1b:47:aa:5f:00:84:96:9c:95:80:7b:87:ec:
         f9:5c:81:b3:c8:9b:11:71:49:73:b3:64:15:94:ec:13:71:d4:
         6e:e4:b3:21:04:88:42:2b:57:9e:95:7c:a8:fb:57:22:84:0c:
         51:c6:bb:e0:a2:b5:ea:e8:d8:10:35:b3:37:1c:24:8d:df:26:
         b8:1d:cf:7b:ab:8c:b1:5e:d6:18:e2:01:5f:dc:7b:2e:c9:d2:
         ef:eb:42:2e:35:a1:42:9e:3c:2c:4d:02:03:e4:93:27:ce:ed:
         26:9a:be:f1:e9:ef:77:13:eb:76:3e:86:83:fe:68:1a:38:1c:
         c9:df:98:04:f5:ca:1d:f1:11:24:c1:17:0e:4f:67:4e:08:07:
         c6:aa:1a:ce:b8:ad:6d:67:30:da:42:f9:e9:26:59:eb:2d:66:
         83:2b:5d:62:da:4a:f1:67:3d:e3:c7:86:04:b2:ce:ff:01:60:
         d6:b5:5c:2f:c8:b8:a5:47:0d:05:87:07:6c:c6:7c:25:ab:fb:
         e5:d9:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:00 2025 by rpki-client