Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38342e302f32342d3234203d3e203532343233.roa
File:                     3139302e39332e38342e302f32342d3234203d3e203532343233.roa (raw, json)
Hash identifier:          Ed5wOkuBdUM4F/Ud0YallVtKjXEybEoZDGrgDENvKj4=
Subject key identifier:   EC:08:2C:9E:34:6E:2B:DB:D2:69:59:32:E4:41:CC:21:94:86:9B:FB
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       786D0965DA50C665456069ADF77F3D33FF8902B0
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38342e302f32342d3234203d3e203532343233.roa
Signing time:             Thu 26 Jun 2025 11:15:00 +0000
ROA not before:           Thu 26 Jun 2025 11:10:00 +0000
ROA not after:            Thu 25 Jun 2026 11:15:00 +0000
asID:                     52423
IP address blocks:        190.93.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6d:09:65:da:50:c6:65:45:60:69:ad:f7:7f:3d:33:ff:89:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 26 11:10:00 2025 GMT
            Not After : Jun 25 11:15:00 2026 GMT
        Subject: CN=EC082C9E346E2BDBD2695932E441CC2194869BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:48:9b:52:46:a0:ea:35:d5:cd:ba:4e:ce:
                    b4:4a:20:50:cc:c7:55:85:02:a8:f6:10:86:ac:47:
                    9b:31:6a:a7:d7:98:56:43:60:06:81:4b:71:da:67:
                    48:41:59:70:fb:61:c7:f6:b5:2d:c2:b8:54:58:93:
                    40:32:d2:f7:66:cd:23:b9:e7:6b:97:7b:20:ee:4d:
                    54:5d:25:23:ba:30:9d:2e:41:31:15:f9:47:cb:e8:
                    6e:f3:52:73:88:bd:75:1b:70:70:7a:af:d4:00:5e:
                    39:96:cf:1d:dd:30:6c:ed:dd:9e:90:95:d7:95:44:
                    00:a5:2b:e4:7c:cd:c1:3f:d5:37:76:cb:21:cc:52:
                    fb:a2:9e:e8:be:47:28:7d:66:1b:b4:90:0e:3a:c5:
                    8d:33:46:c3:74:fe:b4:5a:19:30:43:9a:0c:c8:02:
                    32:20:88:51:bc:e3:6b:0e:1a:71:cd:04:3d:ed:bd:
                    18:35:26:77:55:6d:be:19:b6:6a:ae:e2:cc:49:5e:
                    ad:32:f0:e1:1a:92:09:af:cf:ca:08:09:ac:e5:c6:
                    e4:17:7f:9d:a5:c1:d1:5b:2b:b6:0c:65:20:45:7c:
                    2d:17:14:8a:6a:20:12:f9:ed:db:96:28:f0:be:d6:
                    95:4f:e5:04:30:04:de:22:27:cb:32:4b:90:3e:58:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:2C:9E:34:6E:2B:DB:D2:69:59:32:E4:41:CC:21:94:86:9B:FB
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38342e302f32342d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:c1:41:3d:d1:a4:52:24:7b:77:57:61:80:08:27:00:75:
         14:77:0a:3f:6c:03:44:20:38:3a:53:37:79:77:ac:79:f5:54:
         84:37:93:b7:21:2f:99:48:f1:58:56:c6:8e:6e:d7:bc:3a:e6:
         bb:3b:a5:e3:ba:54:f2:cb:56:bf:c7:54:ff:40:e6:65:8f:50:
         e0:47:8d:7e:7f:4b:37:4e:f2:5b:37:7c:a6:23:e7:22:80:c8:
         c4:ea:d5:09:8d:e5:ea:eb:34:44:53:90:97:ec:b5:bb:77:b7:
         b5:23:20:df:86:e2:68:4e:22:99:f9:93:5a:73:9b:99:b6:0d:
         45:ef:d9:4d:ad:88:d6:f3:99:c0:6e:d2:6f:51:02:db:af:26:
         b4:65:35:5a:ca:8b:b3:49:7b:d1:d0:82:90:f5:39:7a:35:5c:
         97:f8:63:91:f2:25:57:1a:f2:3a:d7:53:9a:38:5f:b0:3f:b1:
         53:3f:85:bc:1f:4e:03:50:cd:1c:fa:9c:dd:76:9f:96:a2:74:
         6d:2c:1e:7d:c0:96:b8:ba:f2:63:5e:b8:02:76:79:a2:b5:4e:
         2c:d5:da:70:d5:36:dc:b0:1b:8a:7a:ce:0a:2a:1e:bf:05:87:
         67:94:b4:32:46:4e:e5:fb:31:14:6b:6e:ea:82:37:84:1c:0b:
         ff:30:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:35:10 2025 by rpki-client