Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa
File:                     3139302e36312e33332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          7PPBs7FjDXPXnoaIFe5p0nGJJkwQSNLmcBViz2pyoGE=
Subject key identifier:   4F:95:84:60:92:7A:37:DD:9F:52:37:62:33:7A:7E:83:F4:D1:56:84
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       05034D7BA4DB0104CF54B0DD444402A204B76078
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:06:50 +0000
ROA not before:           Tue 05 Mar 2024 18:01:50 +0000
ROA not after:            Tue 04 Mar 2025 18:06:50 +0000
asID:                     52468
IP address blocks:        190.61.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:03:4d:7b:a4:db:01:04:cf:54:b0:dd:44:44:02:a2:04:b7:60:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Mar  5 18:01:50 2024 GMT
            Not After : Mar  4 18:06:50 2025 GMT
        Subject: CN=4F958460927A37DD9F523762337A7E83F4D15684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:07:29:c0:76:50:3e:6c:ac:45:e0:00:56:
                    65:ee:01:9f:29:ae:e9:58:39:cb:29:ae:e9:42:29:
                    e0:43:e6:95:b5:bb:ea:0c:6c:5d:ee:b8:44:6a:c9:
                    02:4f:c3:c7:a4:ab:24:d5:85:3d:bc:98:cf:46:46:
                    f0:43:68:8c:a7:55:82:e8:6b:63:e3:04:b2:0c:50:
                    dd:25:30:d4:f9:9a:8c:b5:6a:43:19:96:89:17:50:
                    4c:75:0b:fc:59:0b:b1:b3:03:14:de:8e:53:b6:af:
                    60:7e:60:d5:8d:e1:1b:3b:16:e9:1f:40:42:49:d5:
                    85:17:34:c4:57:56:02:16:e6:90:39:59:58:c8:78:
                    98:a3:93:58:df:c8:7e:a4:18:f2:48:87:f0:f6:1a:
                    52:29:89:81:a3:67:83:90:17:cd:50:2c:44:13:d9:
                    b6:8f:9f:94:4e:4e:a0:35:57:f2:4d:a8:20:e4:38:
                    77:ce:a1:a1:2a:05:83:73:bb:c9:20:58:a4:86:98:
                    67:46:10:cd:e7:3f:79:6c:d1:9d:6a:76:94:d8:ed:
                    d6:be:60:6e:a1:86:26:8c:ad:f8:a0:4e:84:b0:8a:
                    74:d4:cf:0f:3e:f1:84:a3:b9:16:81:36:7a:81:79:
                    30:0f:6b:25:05:8a:c9:3f:43:96:c0:51:94:5e:fd:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:95:84:60:92:7A:37:DD:9F:52:37:62:33:7A:7E:83:F4:D1:56:84
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:74:de:69:cc:7a:ef:40:a9:47:1e:96:0e:40:fb:34:01:5d:
         7d:bf:45:1c:71:64:c4:3f:7f:95:4e:a9:58:c8:3c:28:f1:9c:
         e6:bb:17:9e:4e:4a:99:82:43:94:06:e1:b1:2d:34:3f:bc:21:
         f6:a7:f7:f5:f7:bd:02:11:7a:c8:63:81:b3:0b:e1:ce:03:81:
         cb:6e:53:d5:fc:37:29:97:48:e8:76:7c:8d:06:6b:bf:c8:99:
         fc:4f:20:e4:85:d2:ef:23:40:fc:b5:85:30:96:af:ad:70:ba:
         b3:73:ac:30:13:25:5c:7e:31:40:a0:7a:1e:93:78:63:0c:c1:
         93:64:c3:61:8c:de:65:11:a1:e2:f0:c7:b6:09:1f:71:dc:76:
         05:35:57:0a:74:91:f3:ed:28:01:25:dd:69:96:2f:9e:1e:e6:
         2c:83:ab:16:e2:9a:73:fa:5c:b7:ec:e6:32:2c:61:79:5f:1e:
         7d:56:03:a2:c1:20:4e:a2:83:a2:51:8f:2a:5e:1a:87:37:ee:
         6e:ef:62:61:2d:d4:c7:5e:24:06:a2:39:4b:c6:3f:b3:0f:5f:
         b9:ba:02:83:4d:9b:5f:6f:e8:f2:09:34:16:8b:fb:21:0f:47:
         fd:17:35:a9:2a:09:d1:73:b6:69:bf:4d:db:2c:2d:d0:d0:ab:
         aa:a5:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org