Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233332e302f32342d3234203d3e203237363630.roa
File:                     3138362e3139302e3233332e302f32342d3234203d3e203237363630.roa (raw, json)
Hash identifier:          ZjYUgPrfuV3bbbxkp2PBPCH5WroGQ2hmiFdirXTKJdM=
Subject key identifier:   EF:41:5D:33:DC:BF:3A:67:4A:0F:90:B7:81:4B:F2:25:A9:2A:51:02
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       546901AFCF151A25C7649A9F4A0BD90506F3BF23
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233332e302f32342d3234203d3e203237363630.roa
Signing time:             Tue 24 Jun 2025 16:23:27 +0000
ROA not before:           Tue 24 Jun 2025 16:18:27 +0000
ROA not after:            Tue 23 Jun 2026 16:23:27 +0000
asID:                     27660
IP address blocks:        186.190.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 03:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:69:01:af:cf:15:1a:25:c7:64:9a:9f:4a:0b:d9:05:06:f3:bf:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: Jun 24 16:18:27 2025 GMT
            Not After : Jun 23 16:23:27 2026 GMT
        Subject: CN=EF415D33DCBF3A674A0F90B7814BF225A92A5102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:f2:e3:97:b9:cc:18:6e:92:3b:a1:1f:2c:
                    d9:99:cf:b4:bb:ad:34:c1:c0:62:6c:7b:f2:67:49:
                    f2:dd:8e:da:d6:82:55:98:e3:c1:4c:6d:01:73:7d:
                    87:12:76:35:44:48:b4:32:25:38:8b:38:0a:c7:fe:
                    df:13:84:6a:d6:ab:e6:66:3c:e9:49:e1:ed:3f:a2:
                    69:ee:28:7e:58:fe:02:ae:9e:2a:72:12:cd:3b:06:
                    93:e9:b6:3d:ab:e1:ba:a3:96:14:bc:91:a1:54:91:
                    e1:5b:1d:e7:4f:3f:65:3c:d1:7a:00:71:99:be:88:
                    ba:ee:05:05:03:7d:17:41:bf:26:59:82:29:7b:a9:
                    bf:10:11:94:60:a1:3e:6c:af:67:b4:02:61:39:36:
                    10:87:9a:b7:78:94:f9:99:53:07:7e:02:44:6f:cb:
                    bb:2b:6e:f1:a5:e9:c6:e1:7a:75:a3:1b:7f:ed:e7:
                    6b:21:a7:16:07:9b:f8:64:b5:40:f1:be:02:b6:d5:
                    9a:ad:82:8c:6c:a5:f3:a8:1d:dd:f8:63:53:89:aa:
                    20:e5:a6:55:16:cc:17:58:28:70:db:ee:0f:93:d8:
                    65:e5:51:36:8c:6b:00:09:53:da:e4:9c:88:f1:ff:
                    db:31:3f:4f:f4:04:6b:6b:56:5b:6b:70:53:0b:b3:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:5D:33:DC:BF:3A:67:4A:0F:90:B7:81:4B:F2:25:A9:2A:51:02
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233332e302f32342d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:34:3a:93:d5:9e:2c:8c:5b:9e:78:93:9e:f3:6e:36:45:
         59:72:3d:51:cb:10:9b:7b:05:6e:b6:3d:86:15:4f:39:6d:c1:
         e3:fc:d2:2a:e4:94:50:b7:37:f1:32:85:df:7d:04:3d:c2:25:
         01:3d:bb:ec:06:0c:fe:f1:ff:d3:f3:da:f7:e2:c5:e0:06:dd:
         e7:3c:e6:e7:6e:5e:2d:97:b3:2d:a9:f7:0a:2b:9b:5b:51:dd:
         aa:fd:63:3f:6e:e6:aa:38:8f:fe:31:a9:31:aa:f1:e6:ad:58:
         04:f6:e1:52:a8:07:2d:36:a5:54:10:98:a5:76:3e:a1:45:0f:
         90:f2:2d:aa:ad:1b:36:e0:4c:f6:c5:da:31:54:73:e1:5d:79:
         3a:3a:39:8b:e3:75:72:a7:a0:32:39:15:39:81:db:ac:34:13:
         da:d9:f6:7f:39:8f:db:c9:68:3d:61:88:f1:da:83:75:2f:5b:
         3b:2a:bb:37:07:c5:a6:07:82:76:7f:f5:07:92:19:49:76:28:
         b0:79:e2:14:ff:34:38:12:b4:7c:21:ae:d9:fb:fd:86:00:14:
         41:c6:0c:5f:c2:c8:ce:4c:d5:35:22:b2:1f:50:ef:65:93:b5:
         0c:f3:8c:6d:ad:7e:f7:94:5b:bd:14:fe:18:03:61:1c:14:51:
         47:cf:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:16:55 2025 by rpki-client