Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e203237373839.roa
File:                     3139302e39332e3130382e302f32332d3233203d3e203237373839.roa (raw, json)
Hash identifier:          8rowe0d0ormwyE5msW469c/bgWrBuTN8611B0Dkga28=
Subject key identifier:   36:69:37:A1:E4:73:23:CB:4F:51:94:8A:AD:EF:56:C1:EB:14:71:82
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7BA0B22DC53297D443949A61B055B5FF112F7563
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e203237373839.roa
Signing time:             Fri 26 Sep 2025 11:48:46 +0000
ROA not before:           Fri 26 Sep 2025 11:43:46 +0000
ROA not after:            Fri 25 Sep 2026 11:48:46 +0000
asID:                     27789
IP address blocks:        190.93.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a0:b2:2d:c5:32:97:d4:43:94:9a:61:b0:55:b5:ff:11:2f:75:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 26 11:43:46 2025 GMT
            Not After : Sep 25 11:48:46 2026 GMT
        Subject: CN=366937A1E47323CB4F51948AADEF56C1EB147182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:fc:18:ea:cf:d2:7f:32:3b:cc:d5:c8:52:
                    b6:61:43:79:f4:19:48:66:26:c9:f7:bf:fb:61:89:
                    07:23:f5:ae:67:d5:c9:ee:7f:bb:ed:4b:f4:00:ef:
                    60:04:e8:53:63:ff:d4:e0:53:f7:59:76:70:cb:e9:
                    04:39:a5:15:54:6b:3e:10:e1:71:f7:db:26:e7:4a:
                    28:13:27:bf:5b:30:9d:fa:f3:b0:97:c2:f6:f2:25:
                    76:ef:04:a8:53:17:ec:86:ce:41:77:17:ca:8d:33:
                    4c:c3:ec:ea:81:ec:62:a5:8a:9a:93:18:6b:da:e9:
                    8a:f2:f6:e0:fd:fe:3f:60:73:da:bf:90:c2:98:f6:
                    ba:15:a5:47:0e:aa:97:86:70:cb:a2:18:7a:25:7e:
                    5b:11:02:d1:87:e9:1d:4a:7f:18:9d:87:b5:6f:99:
                    4e:9e:2e:5f:3d:27:39:66:01:e2:34:6f:81:99:a1:
                    a2:cd:bd:2d:34:87:1d:e6:89:f8:d1:ba:ca:43:80:
                    fd:42:5e:c1:06:24:53:28:7b:3e:0b:c4:97:33:8a:
                    63:ec:48:04:f7:d3:9f:67:0f:e2:14:6b:eb:d2:17:
                    b4:9e:98:c1:24:8a:ca:d1:ba:f0:d0:87:b9:5e:f5:
                    dd:f7:c5:6b:6f:88:db:f4:16:ef:04:87:5b:62:5c:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:69:37:A1:E4:73:23:CB:4F:51:94:8A:AD:EF:56:C1:EB:14:71:82
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:c5:7f:46:b5:73:05:1b:44:43:65:cd:79:dc:8b:67:0b:
         f7:45:ae:47:7e:de:e0:e4:84:8a:08:e6:f9:1f:2d:12:95:36:
         b8:50:ef:79:49:f1:a9:a8:a4:67:f4:3c:2c:7f:8c:3b:d8:ff:
         bb:2a:94:b5:8b:b7:42:c4:dc:5f:5e:d7:50:a1:7a:1b:47:3d:
         00:31:94:3a:e4:18:4a:af:b4:05:3d:29:61:bd:a6:d6:a8:d0:
         72:62:4a:27:42:bd:fd:8d:40:81:dd:5a:7b:62:7f:f8:10:40:
         0f:2c:43:e1:ce:7b:3f:4b:f7:c4:c4:dd:d9:fc:53:98:ea:d3:
         11:19:18:81:35:0e:64:16:42:43:04:43:ba:dd:73:92:e6:4a:
         ef:8e:d1:6b:41:da:b5:75:0e:57:39:79:57:80:1f:1d:3a:2c:
         7a:85:d9:b9:3c:b0:b3:f4:50:5c:f5:90:67:0d:2c:ba:89:9a:
         86:ed:45:02:64:7a:8e:b3:30:74:a1:6d:05:a1:9b:a9:87:f2:
         a8:90:9a:f5:79:ea:e4:49:38:ba:8e:93:d1:47:4d:eb:20:5f:
         88:32:99:e5:77:9b:c8:76:53:d6:da:5f:f9:9b:7b:83:2b:0c:
         0e:95:72:f6:11:b6:52:d3:6e:57:90:0e:25:0c:0b:ff:27:2e:
         f1:3b:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:50:39 2025 by rpki-client