Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39372e302f32342d3234203d3e2037303138.roa
File:                     3139302e39332e39372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          yScFqJd5rOZGVkh/ifh2MuRKXgNoAKo2o9SzergRk04=
Subject key identifier:   DE:8D:6E:C0:39:6A:29:22:31:7B:AC:2E:5B:0B:89:F3:5D:06:87:81
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       5FD07AD7341CDBF437BD5C618BD070D07D2D4584
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39372e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 07 May 2025 18:17:58 +0000
ROA not before:           Wed 07 May 2025 18:12:58 +0000
ROA not after:            Wed 06 May 2026 18:17:58 +0000
asID:                     7018
IP address blocks:        190.93.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d0:7a:d7:34:1c:db:f4:37:bd:5c:61:8b:d0:70:d0:7d:2d:45:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: May  7 18:12:58 2025 GMT
            Not After : May  6 18:17:58 2026 GMT
        Subject: CN=DE8D6EC0396A2922317BAC2E5B0B89F35D068781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:c4:92:79:2e:d0:a7:f9:70:a8:6f:71:bd:
                    30:93:6a:0c:25:33:d8:68:70:44:78:7f:bd:31:20:
                    6f:69:0a:a3:e7:32:25:88:79:7b:9d:e8:c8:ee:ef:
                    ac:a1:83:8c:05:c3:21:6f:3b:5d:b8:bd:9a:2c:98:
                    e3:d2:4c:15:3d:d4:ba:93:5d:1a:14:f1:a8:26:ab:
                    f4:cf:9d:ea:b1:e0:65:9d:d4:62:ad:fa:8f:9d:f7:
                    9a:18:a5:ac:09:11:1e:f6:a3:f6:fe:d6:5d:27:f1:
                    35:d0:80:59:f6:cc:26:40:37:91:be:bd:22:73:ff:
                    24:17:21:e9:10:41:af:db:a4:3e:99:d9:7a:20:2f:
                    b9:17:44:56:62:a2:7f:fd:4c:32:10:da:e6:61:9b:
                    2a:b7:5e:13:3b:32:c9:4b:41:0c:ce:83:69:96:56:
                    30:b2:84:e4:5e:6e:f9:91:f8:97:93:a4:7d:dc:2e:
                    5e:58:79:9f:79:bb:bf:a5:65:2c:0d:66:71:77:4d:
                    e8:8c:1a:b7:24:84:c3:60:aa:df:a7:92:f9:16:d4:
                    8c:5c:5b:af:bb:36:7b:a7:4e:4d:03:fa:a6:d9:70:
                    48:00:4d:68:e4:62:7b:a8:43:99:cd:3f:97:77:39:
                    f2:18:41:90:fd:36:37:8e:10:5b:79:95:49:79:8d:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:6E:C0:39:6A:29:22:31:7B:AC:2E:5B:0B:89:F3:5D:06:87:81
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:60:74:77:ae:45:6d:2a:40:22:e1:34:b6:25:db:66:26:
         6a:73:a5:b8:49:c9:35:8d:35:49:17:c0:9d:28:96:9e:fc:4a:
         b2:80:26:b4:1b:c2:03:da:e7:34:68:89:63:ea:fe:3e:a8:08:
         53:76:c5:3d:29:15:2f:26:28:d2:a0:e5:7d:9c:f5:ab:fd:ba:
         a3:11:a9:17:59:28:bd:1b:dc:0e:46:61:47:85:e1:c7:8f:3f:
         2c:98:7f:6c:37:93:93:a0:ce:8e:6a:a7:73:ff:d7:60:cf:76:
         ae:eb:66:a0:bb:3a:92:5b:f9:9f:fd:8a:17:37:70:6c:35:9a:
         d0:76:7a:c8:55:d6:0a:c1:ae:c4:42:a9:80:6c:70:a4:2e:53:
         bd:2d:31:78:88:7a:8d:b6:31:48:d1:13:f6:cd:96:48:82:19:
         97:4b:66:2d:09:29:66:f6:4d:d2:6d:3e:2e:d2:45:25:d3:12:
         83:90:d9:68:4e:84:8e:e0:35:9a:8c:a4:89:73:32:d4:ac:65:
         95:f0:f7:69:b7:31:3d:cd:12:53:c2:37:fe:c4:a5:06:f0:5a:
         42:45:5f:57:7e:88:68:88:15:77:1b:44:c6:f1:51:d3:03:65:
         fd:a3:f5:db:c0:c7:5f:3a:f8:31:b4:9a:78:b9:1f:2f:64:6b:
         20:d2:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:35:10 2025 by rpki-client