Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa
File:                     3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa (raw, json)
Hash identifier:          CW82SFcTw/ycYr7z8EEXZp475pYIfeqvMVHdvXgJXKs=
Subject key identifier:   C2:DC:75:11:4B:81:2B:7B:65:5D:7F:B7:C1:8C:26:AC:E8:D4:2B:5F
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       55645A586CB5C8D17B38EF614D39E9F7ED2EC01A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa
Signing time:             Wed 17 Sep 2025 11:47:02 +0000
ROA not before:           Wed 17 Sep 2025 11:42:02 +0000
ROA not after:            Wed 16 Sep 2026 11:47:02 +0000
asID:                     272011
IP address blocks:        190.93.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:64:5a:58:6c:b5:c8:d1:7b:38:ef:61:4d:39:e9:f7:ed:2e:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 17 11:42:02 2025 GMT
            Not After : Sep 16 11:47:02 2026 GMT
        Subject: CN=C2DC75114B812B7B655D7FB7C18C26ACE8D42B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:3d:fc:a3:bd:78:a9:7d:20:5f:69:7a:ae:
                    4c:d5:9a:9c:a6:56:c8:66:2c:8c:fe:76:44:94:4f:
                    71:d4:46:66:09:6f:62:89:85:80:0b:64:c2:9d:29:
                    d6:c3:c7:25:db:be:26:32:56:9d:98:cf:ab:11:9d:
                    50:c0:36:26:36:b9:b7:4e:55:4b:51:eb:e8:01:bf:
                    40:f3:7f:9f:47:06:e1:68:e3:bf:3c:25:7f:56:75:
                    10:aa:b9:7f:6b:d6:35:cc:65:13:e7:04:65:3f:a6:
                    72:25:38:96:56:7f:99:49:04:73:82:f1:5d:1b:8b:
                    a5:39:56:4b:57:cf:3b:fb:06:2f:98:80:5f:58:e9:
                    46:1a:83:ba:36:2d:1c:61:a7:d7:ff:5a:e2:e7:52:
                    8b:d5:8c:2f:4e:6c:0a:ca:23:d6:88:29:88:3f:d2:
                    eb:9a:85:60:dc:49:db:89:eb:d4:80:0b:1c:42:b7:
                    4d:35:54:68:2c:7e:43:4d:b0:f2:2b:55:5d:84:95:
                    5c:37:52:d9:62:19:da:37:58:70:d4:41:f1:b0:71:
                    cb:1f:cf:70:c0:cf:d2:16:2d:ea:67:7a:ce:3a:78:
                    fb:77:b9:0c:75:3f:06:1f:74:4c:7d:b1:3c:2d:1d:
                    e9:1f:ca:86:f2:ed:cc:ec:3b:10:3e:59:33:66:08:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DC:75:11:4B:81:2B:7B:65:5D:7F:B7:C1:8C:26:AC:E8:D4:2B:5F
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:0f:56:37:4c:2d:f2:64:25:a2:3b:69:86:ef:e9:d1:56:54:
         5f:62:5e:94:bd:56:96:0b:81:e0:85:b1:a7:2e:d1:7a:b8:57:
         55:f8:96:9a:5b:9e:06:af:1e:0c:4b:2f:fe:72:17:7e:fb:d8:
         5b:a8:3e:34:5b:79:20:b1:1a:3d:ae:e4:bd:f9:b0:e5:cf:ac:
         c2:8f:14:72:bb:a2:d6:a1:9b:98:66:9d:8e:f6:16:b9:b6:be:
         7f:8e:e0:62:61:68:2b:3f:3a:9d:25:e2:d0:bf:c6:f1:2a:28:
         6a:de:19:92:94:be:23:c6:33:7d:f7:9e:d3:5b:d2:89:7d:53:
         c0:86:37:6c:ac:c4:36:04:1c:61:99:f8:0d:f2:df:ea:85:31:
         1a:23:d3:e7:16:e4:1e:3f:1b:24:16:9e:95:26:26:33:c3:8a:
         28:7d:be:ff:9a:b9:a3:4c:fe:16:29:ec:7d:b8:3b:a6:c9:51:
         42:c7:2f:66:5a:48:96:e9:9e:e0:07:8d:52:36:9a:df:a1:03:
         de:a7:b1:d0:62:7d:0b:76:a9:ec:b0:a5:98:6b:52:85:9b:78:
         17:36:97:5b:58:68:c6:be:c2:8a:e6:c5:58:f2:4b:0b:f8:a3:
         a4:10:1a:90:05:69:cf:b3:c7:62:63:8a:22:91:7e:64:fc:14:
         41:1e:4e:05
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVWRaWGy1yNF7OO9hTTnp9+0uwBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTA5MTcxMTQyMDJaFw0yNjA5MTYxMTQ3MDJaMDMxMTAvBgNV
BAMTKEMyREM3NTExNEI4MTJCN0I2NTVEN0ZCN0MxOEMyNkFDRThENDJCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUuT38o714qX0gX2l6rkzVmpym
VshmLIz+dkSUT3HURmYJb2KJhYALZMKdKdbDxyXbviYyVp2Yz6sRnVDANiY2ubdO
VUtR6+gBv0Dzf59HBuFo4788JX9WdRCquX9r1jXMZRPnBGU/pnIlOJZWf5lJBHOC
8V0bi6U5VktXzzv7Bi+YgF9Y6UYag7o2LRxhp9f/WuLnUovVjC9ObArKI9aIKYg/
0uuahWDcSduJ69SACxxCt001VGgsfkNNsPIrVV2ElVw3UtliGdo3WHDUQfGwccsf
z3DAz9IWLepnes46ePt3uQx1PwYfdEx9sTwtHekfyoby7czsOxA+WTNmCGyjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwtx1EUuBK3tlXX+3wYwmrOjUK18wHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl1+
MA0GCSqGSIb3DQEBCwUAA4IBAQCjD1Y3TC3yZCWiO2mG7+nRVlRfYl6UvVaWC4Hg
hbGnLtF6uFdV+JaaW54Grx4MSy/+chd++9hbqD40W3kgsRo9ruS9+bDlz6zCjxRy
u6LWoZuYZp2O9ha5tr5/juBiYWgrPzqdJeLQv8bxKihq3hmSlL4jxjN9957TW9KJ
fVPAhjdsrMQ2BBxhmfgN8t/qhTEaI9PnFuQePxskFp6VJiYzw4oofb7/mrmjTP4W
Kex9uDumyVFCxy9mWkiW6Z7gB41SNprfoQPep7HQYn0LdqnssKWYa1KFm3gXNpdb
WGjGvsKK5sVY8ksL+KOkEBqQBWnPs8diY4oikX5k/BRBHk4F
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:21:58 2025 by rpki-client