Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38382e302f32342d3234203d3e20323734313037.roa
File:                     3139302e39332e38382e302f32342d3234203d3e20323734313037.roa (raw, json)
Hash identifier:          E7/9BlPnM63cPcnbM8zDReraMhin2T4xkaMC+zbup/I=
Subject key identifier:   91:51:7E:4A:C0:6E:01:C8:F4:4C:E5:62:F0:99:E5:1A:38:96:47:7A
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       402C87EB92C6DF6273D57D31345926E5C0935CBB
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38382e302f32342d3234203d3e20323734313037.roa
Signing time:             Thu 07 Aug 2025 11:30:00 +0000
ROA not before:           Thu 07 Aug 2025 11:25:00 +0000
ROA not after:            Thu 06 Aug 2026 11:30:00 +0000
asID:                     274107
IP address blocks:        190.93.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2c:87:eb:92:c6:df:62:73:d5:7d:31:34:59:26:e5:c0:93:5c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Aug  7 11:25:00 2025 GMT
            Not After : Aug  6 11:30:00 2026 GMT
        Subject: CN=91517E4AC06E01C8F44CE562F099E51A3896477A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:bd:a3:2f:5b:04:27:56:ae:12:44:52:d0:
                    58:eb:38:66:d3:1f:46:82:07:84:31:b1:b6:b1:3a:
                    d7:df:ba:d0:41:12:86:1c:93:a4:27:9a:3b:d7:97:
                    44:a2:40:2e:b1:3d:f0:b2:71:08:c0:f0:3b:ea:40:
                    0b:34:7c:64:6a:66:3b:fa:d5:0a:be:9f:6c:16:55:
                    b4:45:e1:19:de:9a:c2:d0:11:6d:9b:87:93:ee:8b:
                    55:08:ff:b5:b7:4f:fd:3c:b6:f4:43:89:a3:4e:b5:
                    8f:c2:c5:ea:89:a5:19:77:55:ef:9e:db:7c:4f:2a:
                    ed:ab:ae:7f:4b:cf:c6:20:31:b6:b6:32:9b:9f:d6:
                    ff:15:ec:c4:83:c6:42:48:72:92:6a:bb:16:07:3f:
                    36:44:b1:58:80:be:57:e1:71:5c:b6:39:c5:75:71:
                    51:ad:d2:3c:8e:a3:92:ce:a5:90:a5:fb:f5:22:da:
                    7e:4a:91:63:13:b6:3d:23:e7:75:a7:55:8a:84:44:
                    1a:30:b9:77:af:1b:e0:c3:e1:93:69:1e:5a:80:fa:
                    6d:11:2f:3d:34:3d:cd:04:e9:ac:07:99:9c:b3:63:
                    23:da:14:24:72:fe:08:a9:f1:61:e8:d7:25:b0:bc:
                    ef:af:f5:d7:46:da:d9:c6:cd:ca:1b:d6:1d:e9:d6:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:51:7E:4A:C0:6E:01:C8:F4:4C:E5:62:F0:99:E5:1A:38:96:47:7A
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38382e302f32342d3234203d3e20323734313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:10:d2:ab:1b:46:00:90:6b:bf:89:9b:3a:4f:95:ed:6c:9f:
         63:1f:d7:0d:af:bd:20:18:2c:c0:f5:77:e0:58:cf:66:6f:eb:
         74:d2:d8:45:b3:ac:ac:6c:23:b5:92:e4:6c:b5:7c:a4:79:a7:
         b5:2e:85:20:06:4b:85:97:ba:b2:f6:c5:4b:30:6e:cb:96:df:
         05:3b:ba:3c:1f:60:68:43:8f:e4:84:96:e0:27:57:c7:8f:42:
         50:4f:23:f0:a5:73:a7:1f:b6:0b:e6:69:a6:fc:2d:1c:48:c5:
         cd:ff:f2:b4:97:32:4e:68:75:91:1e:13:58:ee:ee:c1:2b:01:
         04:27:3d:f1:5b:f9:57:58:32:94:1f:85:22:b0:fa:31:6a:8e:
         2b:ac:9e:88:77:9f:8c:a3:09:0a:68:82:e8:a2:6c:fe:8a:25:
         4d:e7:a7:01:3e:82:a6:dc:18:dd:4a:62:87:72:1d:13:80:ab:
         f7:29:30:e3:d2:05:92:df:53:1d:91:6e:4d:1f:37:cc:95:a6:
         a3:dc:4b:d5:1c:b5:14:98:a5:b9:b4:5a:3a:ca:a1:0a:2b:d6:
         07:e0:3c:22:f9:58:c5:8d:01:31:dc:37:18:49:bf:67:9f:e0:
         60:fc:d8:04:9b:b8:cb:78:1e:91:e6:80:c6:26:52:7f:77:c3:
         15:01:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:33 2025 by rpki-client