Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          f0u9fTHf7i8eJLcCE1bTHq5Uw92+cO1owLF8AFgEAhU=
Subject key identifier:   64:29:0D:99:29:CA:AD:C6:5D:20:CD:6F:CF:AE:C2:DE:E2:68:FA:CE
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       296202C1E3548C3B997C40D012BE1ABFB7CF1953
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 15 Aug 2025 12:30:00 +0000
ROA not before:           Fri 15 Aug 2025 12:25:00 +0000
ROA not after:            Fri 14 Aug 2026 12:30:00 +0000
asID:                     834
IP address blocks:        190.93.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 06:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:62:02:c1:e3:54:8c:3b:99:7c:40:d0:12:be:1a:bf:b7:cf:19:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Aug 15 12:25:00 2025 GMT
            Not After : Aug 14 12:30:00 2026 GMT
        Subject: CN=64290D9929CAADC65D20CD6FCFAEC2DEE268FACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:41:da:4c:99:4b:2e:31:9a:75:ce:6c:e4:
                    2b:5d:4b:90:09:f3:0f:91:37:79:23:d5:8f:be:6d:
                    d2:96:55:77:12:1d:55:78:89:1a:9b:03:b9:18:b3:
                    f5:4f:5b:c3:25:d6:aa:9d:c3:1c:a1:7a:11:31:1e:
                    32:c2:04:9f:0d:5a:bd:91:70:3d:4a:ae:be:8f:bf:
                    7a:1a:e5:c7:c5:8c:d4:b4:e3:7e:a7:30:54:b6:86:
                    17:d7:37:6d:32:08:de:7c:b9:35:07:57:9e:ac:d6:
                    f6:e0:17:2e:d1:70:57:56:56:28:f6:ab:50:75:a0:
                    6d:b6:4e:53:13:70:10:c1:0e:e7:9f:22:db:63:90:
                    18:af:85:88:ac:94:2b:40:bd:78:4e:6a:72:14:1f:
                    e2:5e:27:6f:0e:72:47:e3:0b:1d:6a:4b:54:88:c7:
                    c5:61:c8:59:d6:fe:39:74:34:a4:7d:89:89:54:ac:
                    f6:2d:b9:9c:64:a0:54:2f:30:df:83:60:19:6d:55:
                    62:a0:b1:cb:61:74:98:5b:ca:81:cb:58:67:22:a7:
                    f3:77:d9:dc:f0:bf:cc:1b:3b:c5:d2:c4:5a:2e:3c:
                    20:13:50:f4:3a:4e:a0:8f:fe:49:a6:a2:66:25:09:
                    42:83:82:54:32:c9:53:14:ab:1c:1c:1d:af:4f:c2:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:0D:99:29:CA:AD:C6:5D:20:CD:6F:CF:AE:C2:DE:E2:68:FA:CE
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:e1:f9:a4:10:40:de:5b:95:95:1b:2d:01:e1:4a:6d:70:
         03:7f:d1:75:15:39:33:54:56:4b:16:9c:ca:ed:e6:ef:8a:bf:
         90:37:28:e3:7f:20:56:31:ad:3f:1d:c4:54:3c:ba:59:51:ce:
         af:05:a3:5a:af:8c:d1:f1:98:3b:31:23:82:47:94:dd:20:16:
         a9:14:6d:8c:3a:50:48:06:1a:64:65:f4:47:01:4d:fb:66:a8:
         3c:df:0b:a5:9d:c9:9e:9c:51:5e:4e:2c:a9:b5:3b:ed:ee:1f:
         78:0e:42:7b:46:fb:6f:6d:25:4c:19:8e:9a:0d:4a:e2:b9:5e:
         c9:c9:39:5b:e9:6c:4a:4f:6b:24:ec:5c:42:16:2c:d9:ac:c7:
         06:75:15:e6:73:7e:57:27:18:14:7f:c3:a1:2b:4f:9d:61:31:
         df:77:75:22:fa:32:f1:ed:bf:ec:e5:5f:8c:35:ee:68:a1:99:
         80:3d:ca:4f:43:81:78:52:09:fa:1f:58:b9:99:2e:e4:ab:2c:
         f3:cb:d0:f6:c1:60:d9:20:f8:11:20:33:78:e0:50:9e:e6:6a:
         dc:30:ab:50:24:ff:30:ec:54:29:7b:dd:c6:e0:ca:63:17:79:
         04:bc:75:4e:1f:8d:0f:00:c9:e4:11:af:25:3a:6f:bb:d2:de:
         94:fc:59:ca
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUKWICweNUjDuZfEDQEr4av7fPGVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTA4MTUxMjI1MDBaFw0yNjA4MTQxMjMwMDBaMDMxMTAvBgNV
BAMTKDY0MjkwRDk5MjlDQUFEQzY1RDIwQ0Q2RkNGQUVDMkRFRTI2OEZBQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4kHaTJlLLjGadc5s5CtdS5AJ
8w+RN3kj1Y++bdKWVXcSHVV4iRqbA7kYs/VPW8Ml1qqdwxyhehExHjLCBJ8NWr2R
cD1Krr6Pv3oa5cfFjNS0436nMFS2hhfXN20yCN58uTUHV56s1vbgFy7RcFdWVij2
q1B1oG22TlMTcBDBDuefIttjkBivhYislCtAvXhOanIUH+JeJ28OckfjCx1qS1SI
x8VhyFnW/jl0NKR9iYlUrPYtuZxkoFQvMN+DYBltVWKgscthdJhbyoHLWGcip/N3
2dzwv8wbO8XSxFouPCATUPQ6TqCP/kmmomYlCUKDglQyyVMUqxwcHa9Pwre5AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUZCkNmSnKrcZdIM1vz67C3uJo+s4wHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzkzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dXjANBgkqhkiG
9w0BAQsFAAOCAQEAnQDh+aQQQN5blZUbLQHhSm1wA3/RdRU5M1RWSxacyu3m74q/
kDco438gVjGtPx3EVDy6WVHOrwWjWq+M0fGYOzEjgkeU3SAWqRRtjDpQSAYaZGX0
RwFN+2aoPN8LpZ3JnpxRXk4sqbU77e4feA5Ce0b7b20lTBmOmg1K4rleyck5W+ls
Sk9rJOxcQhYs2azHBnUV5nN+VycYFH/DoStPnWEx33d1Ivoy8e2/7OVfjDXuaKGZ
gD3KT0OBeFIJ+h9YuZku5Kss88vQ9sFg2SD4ESAzeOBQnuZq3DCrUCT/MOxUKXvd
xuDKYxd5BLx1Th+NDwDJ5BGvJTpvu9LelPxZyg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:09:03 2025 by rpki-client