Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/3139302e322e38382e302f32312d3234203d3e203238303931.roa
File:                     3139302e322e38382e302f32312d3234203d3e203238303931.roa (raw, json)
Hash identifier:          RexUQlHIaMJpzNDOcxnfWJzXVgwYeFwWz3NpCtwH/kU=
Subject key identifier:   7B:F6:9B:AA:C7:89:63:53:83:0D:69:EC:6D:37:B2:DA:1D:98:24:49
Certificate issuer:       /CN=8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C
Certificate serial:       34AC6038508A6AB1EB25F4472D66B99D2873805D
Authority key identifier: 8B:2D:4D:D9:A5:FD:DF:A2:02:16:31:B2:87:ED:0E:62:17:68:AF:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/3139302e322e38382e302f32312d3234203d3e203238303931.roa
Signing time:             Fri 10 Oct 2025 22:50:07 +0000
ROA not before:           Fri 10 Oct 2025 22:45:07 +0000
ROA not after:            Fri 09 Oct 2026 22:50:07 +0000
asID:                     28091
IP address blocks:        190.2.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ac:60:38:50:8a:6a:b1:eb:25:f4:47:2d:66:b9:9d:28:73:80:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C
        Validity
            Not Before: Oct 10 22:45:07 2025 GMT
            Not After : Oct  9 22:50:07 2026 GMT
        Subject: CN=7BF69BAAC7896353830D69EC6D37B2DA1D982449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:86:b6:0b:32:a0:3e:c3:a9:ec:55:c0:e8:
                    cf:bd:81:12:e8:04:f9:be:0d:02:7a:29:dd:b5:1c:
                    12:58:ff:c2:cb:5f:2e:f9:e6:b9:15:36:62:65:74:
                    d2:a1:b1:f0:a9:ae:a4:5b:2f:fe:b1:e4:38:2b:2c:
                    f4:50:fd:72:d9:07:ea:4d:19:ba:bf:0d:33:a2:38:
                    b3:56:4d:9b:f2:1c:8e:ee:d7:cc:7e:58:0a:c8:a2:
                    0d:b7:9c:16:54:20:85:cf:2e:69:00:5c:f0:5a:0f:
                    77:8a:24:9e:c8:59:47:ef:39:7a:ef:74:33:7b:82:
                    6e:55:08:ca:ab:fe:fc:3a:d6:85:cc:f7:bc:b6:94:
                    6c:4c:94:01:5e:2c:5d:f2:a3:9a:6d:7a:69:da:33:
                    c7:85:d8:eb:a2:0b:1b:71:f7:32:08:b2:1e:42:a4:
                    7c:db:56:12:f4:c6:e9:5e:79:3a:d9:ec:43:70:a6:
                    ac:50:b7:28:4a:49:6d:17:58:a7:06:a7:92:95:e2:
                    7b:d2:75:ed:ab:2e:ea:21:ae:03:65:52:9d:03:db:
                    b2:d5:fd:1c:57:6b:35:1d:22:24:eb:25:47:fd:56:
                    d1:0e:af:1f:fe:6a:b1:9f:bf:c4:ce:fa:d2:70:fd:
                    74:e1:b2:39:6e:27:84:a7:b6:b3:fd:4c:5d:13:99:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:9B:AA:C7:89:63:53:83:0D:69:EC:6D:37:B2:DA:1D:98:24:49
            X509v3 Authority Key Identifier:
                keyid:8B:2D:4D:D9:A5:FD:DF:A2:02:16:31:B2:87:ED:0E:62:17:68:AF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B2D4DD9A5FDDFA2021631B287ED0E621768AF4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97B7FC3FC5D54BBE8224C94D07AF79AD3CD14F92B5F9A773EDBD8C2F2398BE45/0/3139302e322e38382e302f32312d3234203d3e203238303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:f0:e3:b4:0d:f2:e4:e8:69:58:0e:a2:95:1d:e5:dc:53:
         9a:b7:2e:96:38:43:96:e9:03:73:e1:58:f5:bc:7c:b5:2d:a3:
         70:bc:79:28:e1:db:aa:45:3f:89:13:c8:6f:7b:93:6d:0c:4a:
         51:10:3a:92:83:cc:81:df:1b:22:b6:b4:68:75:71:32:20:c0:
         eb:31:90:4b:6f:1c:2f:24:b5:cb:ea:79:42:09:a8:8e:4b:f5:
         cf:f2:35:f9:95:ed:ea:46:ed:7e:82:ac:c3:26:32:7f:50:14:
         28:17:2f:78:94:1a:be:83:56:ae:cb:97:25:21:c8:0f:67:6e:
         d8:a8:98:7a:8e:cf:0b:f0:7b:45:a5:7a:02:71:57:4e:e0:f3:
         71:64:af:92:14:a5:57:fb:3e:f2:9e:31:f5:d0:68:61:0a:8f:
         68:27:74:67:af:33:45:01:ba:5e:65:6a:a4:b1:69:99:0f:cf:
         7a:25:10:7f:85:21:76:4e:19:19:cc:10:41:f0:61:54:8d:13:
         8a:ba:69:84:7e:1a:7f:3f:dd:c6:26:3b:6c:ee:2b:8d:c6:73:
         fa:9d:57:47:6d:48:11:98:d1:ec:90:23:00:ba:8a:d9:80:0c:
         62:c4:1b:e4:a7:b5:6f:de:06:ee:55:36:75:3a:fb:c1:9c:d3:
         5f:ec:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:17:41 2025 by rpki-client