Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37312e302f32342d3234203d3e20323733383234.roa
File:                     3139302e39332e37312e302f32342d3234203d3e20323733383234.roa (raw, json)
Hash identifier:          wxd8Fu57rB0FyQo4rJwVeZLZx8V7ZJxP8SQf0sjhecA=
Subject key identifier:   9C:08:44:68:06:C4:5D:87:2D:E5:1F:4C:54:8D:93:C7:7F:D0:C3:0A
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       5C0F53ED458DFAF0874C83EC299094576E73E53C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37312e302f32342d3234203d3e20323733383234.roa
Signing time:             Wed 25 Jun 2025 11:45:00 +0000
ROA not before:           Wed 25 Jun 2025 11:40:00 +0000
ROA not after:            Wed 24 Jun 2026 11:45:00 +0000
asID:                     273824
IP address blocks:        190.93.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:53:ed:45:8d:fa:f0:87:4c:83:ec:29:90:94:57:6e:73:e5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 25 11:40:00 2025 GMT
            Not After : Jun 24 11:45:00 2026 GMT
        Subject: CN=9C08446806C45D872DE51F4C548D93C77FD0C30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:b8:3d:90:28:d4:cc:0e:fb:21:77:ca:c1:
                    e0:8c:69:75:2c:56:ac:8f:6d:b4:80:bc:92:e5:18:
                    35:89:d8:37:2f:0a:97:89:20:4f:08:95:00:10:56:
                    f8:bb:61:c6:b7:72:e0:78:2d:db:74:47:c7:5a:49:
                    ed:1b:ef:09:8d:b2:c6:3c:22:f3:71:ed:f5:b3:5c:
                    7c:5c:4f:1b:84:56:38:39:e5:82:ca:c6:66:9c:ef:
                    88:ff:32:a8:45:03:9d:0f:85:90:26:01:96:12:11:
                    5c:a3:6a:c8:e0:cb:e9:3f:9e:cb:fb:03:a8:9e:ae:
                    78:90:ce:9e:86:44:53:57:82:db:bb:d2:35:c6:b6:
                    b8:e7:4c:a4:92:d4:d3:36:85:c8:62:08:aa:f7:49:
                    d7:12:59:d4:3c:bf:79:5c:88:db:01:aa:bd:71:08:
                    52:44:d4:d4:d0:1a:c1:aa:3a:b2:a1:6e:ab:51:52:
                    75:ee:9b:6d:f4:81:b1:12:f0:0c:b3:e7:db:58:ff:
                    97:5a:9f:31:76:c1:75:aa:47:8d:f0:7f:36:d4:64:
                    71:78:5a:13:8a:5f:c7:57:96:80:98:70:98:a8:00:
                    6f:25:e1:3e:cc:81:a5:19:f3:46:fb:f3:17:82:4f:
                    6b:67:5c:6e:38:7b:3e:3a:8f:c7:7a:3a:ec:c0:9a:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:44:68:06:C4:5D:87:2D:E5:1F:4C:54:8D:93:C7:7F:D0:C3:0A
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37312e302f32342d3234203d3e20323733383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:03:1f:4f:d9:7f:18:79:60:c0:df:37:16:d5:88:95:21:
         08:a9:0b:d0:5c:58:94:e0:b7:fd:99:c5:76:3a:fa:88:1c:a5:
         51:86:b9:93:b7:d9:b1:ea:2c:88:69:41:40:f5:70:2f:09:30:
         a1:94:d8:27:7b:02:76:ba:aa:6f:b0:86:48:62:e2:0b:14:14:
         3a:64:b8:57:b5:97:57:de:45:11:66:68:3e:c9:3c:31:db:e4:
         f1:dd:46:22:bd:9d:fd:84:91:ed:58:28:3e:a7:e3:83:76:d8:
         ac:11:e0:63:ff:1d:03:d0:d4:72:ff:cd:2b:6b:87:da:3a:70:
         e0:3e:ef:30:3a:bc:41:87:78:fd:18:f0:11:11:da:0a:2a:c9:
         ef:48:77:1f:89:2d:9c:a2:36:fb:50:d2:b9:b0:5b:18:13:f6:
         67:66:a7:92:d5:fc:55:2b:a4:3b:24:f8:79:7d:79:e4:dc:4b:
         c9:0f:2a:fe:7e:62:5a:a3:ec:3a:68:89:0a:19:fa:d7:a6:b8:
         c5:10:ff:4f:8f:30:f3:b9:ec:c8:90:33:b0:1e:2b:15:03:ba:
         04:bd:d2:94:69:0c:87:f5:bc:28:cb:fc:94:f1:ee:9d:bf:e9:
         2d:ba:76:39:ed:98:96:d5:2b:e8:d0:3b:a8:81:53:49:d9:5f:
         b8:de:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:31:20 2025 by rpki-client