Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39322e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          D/IzVJ8T1znsC6y8/nGK7NyS1KBnBfq+XSpgp17CiEM=
Subject key identifier:   22:E2:A9:E7:0D:5F:F5:39:95:F8:D8:E7:AC:DC:50:F7:9B:3B:AC:08
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       5083760B9D652414D86F6C75E3E4756B8E6DCDA3
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39322e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 06 Aug 2025 02:45:00 +0000
ROA not before:           Wed 06 Aug 2025 02:40:00 +0000
ROA not after:            Wed 05 Aug 2026 02:45:00 +0000
asID:                     18678
IP address blocks:        190.108.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:83:76:0b:9d:65:24:14:d8:6f:6c:75:e3:e4:75:6b:8e:6d:cd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug  6 02:40:00 2025 GMT
            Not After : Aug  5 02:45:00 2026 GMT
        Subject: CN=22E2A9E70D5FF53995F8D8E7ACDC50F79B3BAC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:14:71:92:b2:bb:01:38:48:b5:65:d0:37:
                    f0:e9:9b:73:09:18:4c:0b:60:0f:2b:73:47:c1:39:
                    8d:36:e4:13:35:49:4f:8b:6a:fb:21:38:a9:a6:b9:
                    7e:61:56:2e:5b:bf:96:24:ba:d7:b6:87:13:7d:12:
                    ad:62:43:fb:30:d0:fd:48:4b:a1:e1:2d:06:b5:73:
                    b1:fd:b7:ab:fc:ea:ac:51:48:1d:03:3a:97:63:92:
                    e8:19:1b:a2:b7:75:0a:75:3c:56:6f:f8:de:7b:b8:
                    1c:db:98:7d:08:d1:f2:d9:15:10:f8:87:e9:27:5e:
                    d5:4a:12:12:94:17:73:41:05:49:f8:e6:1d:c0:60:
                    ba:b3:a4:90:1d:38:75:8e:65:02:33:92:5d:78:d7:
                    fe:ac:9c:a2:0b:9e:0e:1b:2c:8f:38:b5:c6:61:de:
                    ae:a7:7f:31:91:8e:72:62:f4:2f:b1:5b:82:fd:00:
                    eb:27:79:59:aa:07:dd:6b:64:82:28:43:e0:a8:34:
                    57:5f:bb:4a:83:35:34:4c:36:a8:bc:24:e8:55:27:
                    59:a1:d5:df:34:86:dd:e0:4b:df:e4:e6:c8:1c:5a:
                    d3:a8:f6:8d:cd:93:ab:ad:4f:0d:db:c3:0b:18:23:
                    57:d4:18:4d:74:27:21:73:93:e6:7a:52:e3:21:81:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:A9:E7:0D:5F:F5:39:95:F8:D8:E7:AC:DC:50:F7:9B:3B:AC:08
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:c3:2a:17:1b:9f:74:77:cd:c7:2c:9e:4e:52:93:cc:d5:
         14:ad:3c:c3:6f:72:94:0c:09:92:58:21:3b:56:65:c5:b7:84:
         88:c4:62:9a:e7:0b:7c:79:40:a1:59:2c:90:fc:aa:7c:52:a8:
         72:a9:8a:35:48:47:9c:df:e1:58:2a:c0:06:40:05:1e:94:7e:
         92:25:8b:7b:1e:a5:76:79:9b:07:5c:a7:8a:52:43:80:2f:36:
         83:ad:36:5f:fb:1c:d2:8b:0b:ce:0f:61:3f:8a:94:77:93:26:
         48:d8:42:61:75:ff:f2:61:bc:e5:a0:f1:db:34:70:5a:4b:05:
         b2:7e:3f:22:71:a9:a6:cf:d2:33:56:72:cf:ed:5d:fb:99:99:
         ae:0f:bc:19:ab:6d:c6:03:6b:d1:c1:cc:97:f2:a4:36:e6:ed:
         65:ed:e9:6e:80:d9:1d:f1:dd:b2:d5:a7:87:08:a3:42:16:17:
         ed:5a:88:fb:72:e5:e5:b8:fa:b4:50:6d:cb:9f:67:ea:b4:34:
         60:dc:ff:c3:f6:f7:3d:88:fc:d1:e2:6b:4f:59:46:26:66:f2:
         2b:07:21:8c:91:9b:9d:b0:e7:72:09:c9:35:1d:3a:e2:eb:74:
         08:aa:ec:94:3a:5c:1c:21:10:c0:7f:42:76:b9:e4:b0:60:67:
         ec:58:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:35 2025 by rpki-client