Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37342e302f32342d3234203d3e203333333932.roa
File:                     3137302e3233332e37342e302f32342d3234203d3e203333333932.roa (raw, json)
Hash identifier:          ZN0MuWcSMWD+OokApz1Q4aajfNcUDIid7++jdJoWZKg=
Subject key identifier:   AE:E4:CA:C2:AC:F3:E5:EB:20:27:79:E1:A9:49:14:5D:3F:1F:5D:63
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       61D1CF37A849237DEAA3E3799318C9436A1516CA
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37342e302f32342d3234203d3e203333333932.roa
Signing time:             Fri 04 Apr 2025 18:13:58 +0000
ROA not before:           Fri 04 Apr 2025 18:08:58 +0000
ROA not after:            Fri 03 Apr 2026 18:13:58 +0000
asID:                     33392
IP address blocks:        170.233.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 23:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d1:cf:37:a8:49:23:7d:ea:a3:e3:79:93:18:c9:43:6a:15:16:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Apr  4 18:08:58 2025 GMT
            Not After : Apr  3 18:13:58 2026 GMT
        Subject: CN=AEE4CAC2ACF3E5EB202779E1A949145D3F1F5D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:14:46:12:0d:5f:d5:2b:a9:95:79:6c:60:
                    21:9b:25:4b:70:19:64:4e:ce:14:5a:c5:a5:90:e2:
                    d4:b4:44:16:fc:00:f4:d0:25:81:74:1e:a5:44:1e:
                    f9:98:97:9f:b7:03:3a:d7:f9:f7:70:c9:c7:27:3c:
                    62:e1:55:65:4c:7c:42:7b:99:1b:08:88:e4:b3:f6:
                    ee:02:20:99:41:0a:4c:aa:f6:09:1c:24:7f:1b:8b:
                    71:f9:c7:f5:4d:75:ba:ad:88:0b:0d:fd:c9:93:17:
                    ee:3d:aa:b1:cc:93:8e:6b:b1:5e:6f:c8:f3:dd:dd:
                    78:45:3f:1c:36:78:14:46:69:01:7a:c2:b5:b2:51:
                    64:a4:ed:47:7d:55:6f:99:7a:f1:05:43:43:8c:d1:
                    90:ce:56:47:52:c3:36:7c:c4:17:33:1e:56:32:89:
                    ab:4f:35:5c:5b:bf:79:6b:b2:8f:1b:74:08:12:93:
                    70:f3:ac:e2:8f:ff:62:ef:29:f3:7d:ed:d3:e4:0d:
                    c6:38:bb:80:fd:ae:a7:86:35:ff:c6:1b:e2:81:e1:
                    3e:ca:4f:b0:fa:56:e9:46:db:aa:3c:7f:e1:96:56:
                    b1:04:32:c5:3c:61:30:8f:bf:9c:8b:68:dd:3b:cf:
                    09:d7:e1:6f:bb:ef:4f:50:9f:5a:b2:f4:d7:dc:8f:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E4:CA:C2:AC:F3:E5:EB:20:27:79:E1:A9:49:14:5D:3F:1F:5D:63
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37342e302f32342d3234203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:76:c9:c0:f5:39:77:92:6f:e4:23:0e:cf:d4:34:a1:00:
         eb:3b:44:58:1b:ba:f3:f1:8d:6c:c8:71:54:8a:a3:b3:2a:f6:
         df:f6:a4:66:77:8a:34:c1:fc:d4:2c:68:7f:2e:41:fc:f9:2b:
         b6:22:f3:51:4b:5c:e0:aa:45:30:9b:13:3c:cd:04:74:62:fa:
         29:51:a5:6b:30:bd:f4:4a:51:8a:0d:8f:15:5a:1b:57:45:16:
         5b:90:63:8c:87:b2:81:a2:41:6d:ce:1e:9b:49:92:8d:b4:70:
         93:b6:c4:c2:7f:c0:32:7a:d3:9a:7c:43:70:9c:20:cc:90:13:
         1b:eb:9a:b2:fa:db:0d:6c:61:41:b1:61:ce:f8:43:f7:e3:ec:
         42:2c:a3:14:55:de:23:f6:9a:c7:80:b8:6a:b6:0e:f1:c2:90:
         e3:19:79:10:03:00:fd:52:64:02:d8:be:85:ea:90:1c:f5:62:
         3f:88:fc:cf:33:c0:b1:b5:d0:9e:3b:3c:2b:e7:7d:76:65:1c:
         7f:c8:de:7b:ec:01:0a:55:c7:2e:3a:4a:a4:aa:6e:d1:62:01:
         46:58:a5:0a:db:3a:bf:d9:b9:19:46:44:93:45:bb:59:bc:7a:
         a7:46:ee:b8:68:97:67:f0:fd:6c:22:78:2a:f8:cf:64:47:9d:
         dc:58:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:05:53 2025 by rpki-client