Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36382e302f32342d3234203d3e203237373839.roa
File:                     3139302e39332e36382e302f32342d3234203d3e203237373839.roa (raw, json)
Hash identifier:          cik/DuoGhPVc8YDuNedaoSVM+7m90zrq6+D61LR5Q98=
Subject key identifier:   B8:5F:61:F0:36:CD:D4:83:E6:87:87:55:0D:B7:CA:BE:8F:A9:03:96
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       31F1685BEA264513ECBE4F75644AAC0AA22F0CBE
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36382e302f32342d3234203d3e203237373839.roa
Signing time:             Thu 05 Mar 2026 18:30:00 +0000
ROA not before:           Thu 05 Mar 2026 18:25:00 +0000
ROA not after:            Thu 04 Mar 2027 18:30:00 +0000
asID:                     27789
IP address blocks:        190.93.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f1:68:5b:ea:26:45:13:ec:be:4f:75:64:4a:ac:0a:a2:2f:0c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:25:00 2026 GMT
            Not After : Mar  4 18:30:00 2027 GMT
        Subject: CN=B85F61F036CDD483E68787550DB7CABE8FA90396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:83:ac:2e:24:8f:51:8c:1d:65:1a:11:bf:
                    b3:84:29:75:8e:a9:ba:1b:3e:a4:81:b6:3a:92:30:
                    3b:61:98:35:72:f6:f8:18:26:f2:f6:71:16:7e:d0:
                    b1:35:48:37:c2:df:21:1f:05:49:84:1d:4b:9e:92:
                    a4:66:42:1f:db:e3:dd:4b:09:1a:73:65:b2:78:8f:
                    44:de:07:67:79:ae:fd:7d:92:25:29:04:02:8a:fb:
                    01:63:22:d1:da:50:7e:26:d9:32:9c:03:df:68:85:
                    3d:f1:1d:39:9e:5d:ab:45:21:b5:c9:3a:0e:75:f9:
                    eb:00:0a:f9:2a:50:2a:89:79:1f:76:40:c6:c2:ce:
                    50:b0:3c:1b:8b:d1:a7:72:23:f7:2d:c6:85:b0:89:
                    8f:75:1f:17:f3:2c:df:71:af:bb:a3:a0:f9:70:27:
                    b1:1d:5c:86:6a:aa:e5:3f:d2:58:5e:9e:87:75:fa:
                    d4:26:79:6c:98:0b:36:d7:17:8b:8f:a2:7a:7c:19:
                    c7:ec:6f:a2:8b:64:49:b1:e9:10:15:93:93:84:83:
                    a8:56:f7:c4:cc:d1:d3:84:19:2c:cd:ed:af:02:a3:
                    12:cd:c3:2c:b8:6d:a8:9b:6b:96:63:60:38:b0:15:
                    78:28:c2:2f:88:3f:dd:31:e0:a1:31:d3:78:12:96:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5F:61:F0:36:CD:D4:83:E6:87:87:55:0D:B7:CA:BE:8F:A9:03:96
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36382e302f32342d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:30:b8:1a:1b:ab:36:82:3c:3f:6d:fd:7e:a9:ac:19:38:
         8e:b4:2d:8b:49:d1:be:c8:03:8a:c2:0e:60:47:51:a6:95:f4:
         c2:3c:65:5b:2a:cf:af:a2:a1:e8:f1:86:32:ea:a2:ca:62:63:
         cb:67:b2:af:78:0a:1f:49:66:85:7e:b4:e1:57:a5:cf:db:7b:
         8f:a1:23:73:30:60:f9:67:de:55:0b:94:4e:58:a6:e7:44:71:
         32:b4:3f:e6:e3:d3:ca:6b:ec:ad:5c:4e:a5:31:a2:22:f4:3c:
         63:5f:b1:c7:af:39:c2:94:28:14:8b:69:dd:e6:c1:25:3e:de:
         e7:06:bf:da:2b:e3:d8:99:fe:1e:2e:78:3a:97:f7:00:ce:b5:
         77:89:70:16:94:de:64:68:e0:fc:b5:53:31:b4:3d:53:41:dd:
         11:d2:c1:49:a6:63:c3:98:cf:dd:42:84:a7:8b:10:d5:b1:6a:
         8c:8b:c2:4b:e2:6b:3a:0c:0a:d1:3b:5d:2e:2d:9f:2b:8a:b7:
         27:a7:10:2b:fb:1a:fa:02:fc:b0:5f:d1:fa:a9:b1:10:21:e7:
         36:bf:7b:9c:2d:2c:49:4f:e4:b1:c3:8c:26:b8:70:08:4c:35:
         17:ac:1c:d9:51:26:67:00:40:de:4c:5d:c3:3d:7b:55:f3:d1:
         ce:39:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:50 2026 by rpki-client