Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37372e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e37372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          6n6zXeTkKcLRgfrO30cRDfOzRwVmA5DV//4a7V9dclM=
Subject key identifier:   E5:EC:24:24:E0:1F:D0:1A:A4:1F:4C:38:3C:E4:2C:22:FB:C1:72:69
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3AA8B7D549CD8FF9C87504B334D6D68387335E5C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37372e302f32342d3234203d3e20383334.roa
Signing time:             Thu 25 Sep 2025 18:05:00 +0000
ROA not before:           Thu 25 Sep 2025 18:00:00 +0000
ROA not after:            Thu 24 Sep 2026 18:05:00 +0000
asID:                     834
IP address blocks:        190.93.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a8:b7:d5:49:cd:8f:f9:c8:75:04:b3:34:d6:d6:83:87:33:5e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 25 18:00:00 2025 GMT
            Not After : Sep 24 18:05:00 2026 GMT
        Subject: CN=E5EC2424E01FD01AA41F4C383CE42C22FBC17269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:63:42:d6:01:8a:45:21:7a:37:97:6a:2f:
                    df:78:84:0e:9e:0e:03:00:46:b2:1f:c7:e8:09:22:
                    63:7d:63:a1:32:7c:c7:b9:fc:c5:6b:ea:4a:f7:4c:
                    a2:ab:70:4d:c3:89:48:74:1b:da:7d:73:6d:8f:f2:
                    4b:35:f5:d3:ac:89:38:29:05:55:09:0b:d8:3a:82:
                    d8:7d:47:fb:2b:65:bd:12:c6:82:82:b8:e0:5a:d0:
                    95:e0:29:f1:ca:f5:c6:09:18:f2:73:c9:c4:57:79:
                    57:de:d3:0f:c5:dc:2c:04:74:61:0b:25:ec:3e:0a:
                    20:6d:07:29:21:91:f5:41:da:e3:d3:f8:61:6c:be:
                    b9:04:36:8c:8d:c8:f5:4e:91:4c:b6:54:82:b9:a4:
                    bb:90:fa:cf:49:53:75:ff:37:69:8d:56:2c:31:76:
                    11:0f:99:dc:77:db:9a:9c:02:39:6a:09:ea:d0:6d:
                    34:9a:42:1f:40:89:e5:48:4f:4f:de:ab:06:20:cf:
                    c2:f2:67:89:9d:27:a6:f3:a9:5c:50:63:2e:12:a8:
                    08:4c:a9:bd:bf:ac:35:3a:9a:ec:08:c2:b8:ac:2d:
                    1d:b3:55:5e:1c:f9:a3:1f:85:28:28:b8:01:a3:84:
                    51:0f:f3:f4:8e:8a:2e:a2:aa:91:9c:fa:18:ee:42:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:24:24:E0:1F:D0:1A:A4:1F:4C:38:3C:E4:2C:22:FB:C1:72:69
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:10:fd:7c:47:7f:00:db:90:15:a5:d1:02:40:0e:6d:3b:07:
         5b:ac:c3:74:db:5d:58:49:fd:1d:e0:82:ab:7d:15:1b:10:3c:
         b1:92:f8:41:f7:bd:07:93:0f:dd:89:07:54:21:b6:8a:00:d6:
         99:b0:91:0d:12:d0:ee:a5:84:13:a2:cc:45:b3:ef:45:d9:ec:
         a7:05:b3:5d:cb:b0:87:4d:88:d8:d6:53:85:84:8f:87:a6:05:
         9d:db:bb:ab:cd:86:75:20:6e:2c:e7:f7:a1:ab:b2:fb:d2:e8:
         8a:55:4d:9d:bd:91:a7:46:ef:34:ab:d0:4a:d3:54:7c:8f:c9:
         b2:63:e2:c4:1b:5d:55:29:ed:06:1e:ab:fb:46:5c:54:80:29:
         fd:05:2e:cf:e6:6a:89:23:59:c3:8d:67:5c:20:6c:6e:5c:2d:
         35:e2:59:57:e5:20:91:8d:94:b2:44:f5:a1:ea:ea:d8:9d:2e:
         bc:5e:8c:f3:c7:83:6e:2c:f8:38:5b:d3:81:d7:4d:f6:f7:8f:
         d5:0c:ef:96:ac:ba:6d:8a:17:1a:fd:87:45:0a:b2:7c:a4:c7:
         6d:cc:7d:ba:eb:d3:b3:be:cb:31:18:4f:fd:2f:94:16:68:e3:
         ce:ee:5b:cb:98:43:bf:b4:cc:6d:7c:45:c9:7d:af:b7:c8:7b:
         6d:d0:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:43:26 2025 by rpki-client