Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39332e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          hWbFBHpyynOOCB4SZrbZajh0XSYKYdGZ4LE0Onk5IVc=
Subject key identifier:   81:A0:73:08:82:94:5A:1A:C7:41:45:AF:79:C1:9B:95:E1:00:02:4D
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       1CE3B098978217A3D1BA1976B79E865DC82BA9BD
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39332e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 15 Aug 2025 15:00:00 +0000
ROA not before:           Fri 15 Aug 2025 14:55:00 +0000
ROA not after:            Fri 14 Aug 2026 15:00:00 +0000
asID:                     18678
IP address blocks:        190.108.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e3:b0:98:97:82:17:a3:d1:ba:19:76:b7:9e:86:5d:c8:2b:a9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug 15 14:55:00 2025 GMT
            Not After : Aug 14 15:00:00 2026 GMT
        Subject: CN=81A0730882945A1AC74145AF79C19B95E100024D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:72:bc:59:9d:6b:cb:61:0e:74:96:1c:1d:
                    e1:88:96:c7:47:72:5b:b5:e7:b8:24:fc:b5:21:9f:
                    78:8e:98:fc:f7:bd:80:96:65:e3:ce:6e:46:28:ad:
                    7a:1e:a3:54:82:02:eb:b6:5c:05:49:23:77:fb:0e:
                    56:f8:88:74:f0:6b:b7:66:6f:d6:82:57:dc:af:34:
                    24:eb:c8:1e:8b:0a:1e:fa:4c:f6:82:4f:03:50:28:
                    52:39:80:2c:ab:37:05:a2:41:d2:54:d5:c9:3d:2a:
                    fc:20:41:ef:17:47:0e:3a:0d:e8:5c:ca:a7:e0:5f:
                    d3:30:d9:64:04:88:5c:8d:04:a1:c4:80:c0:f5:9e:
                    7f:c2:70:f9:4b:45:3f:c3:8f:87:ac:78:18:a4:da:
                    b2:9f:10:b6:ac:49:04:11:06:da:c0:ec:ea:3e:12:
                    4c:55:60:76:6b:50:83:ee:28:a6:f0:19:42:b3:ff:
                    0e:f3:36:f1:6f:b9:68:27:ea:96:2e:0e:44:b2:20:
                    bd:27:9b:b7:a9:35:d5:a9:4e:81:34:84:60:b5:06:
                    2b:fd:97:53:68:3f:8c:cb:8e:56:26:22:c4:cf:79:
                    be:3d:66:ea:b7:40:63:96:0f:4c:86:eb:07:72:2c:
                    ac:29:ff:f5:24:45:19:6c:f5:4a:e8:55:5c:39:dd:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A0:73:08:82:94:5A:1A:C7:41:45:AF:79:C1:9B:95:E1:00:02:4D
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:17:44:a3:8d:4e:fe:e8:1e:09:79:78:e9:da:fa:83:b6:29:
         3c:9b:ed:ad:f0:26:64:37:c5:20:66:e5:9d:80:d5:04:2b:5f:
         1d:a5:c9:0e:81:9f:fa:bf:4e:74:70:d3:3f:28:d0:d2:20:91:
         34:3e:c5:07:e7:b5:7d:9a:94:a3:27:32:7f:be:10:d7:c1:2c:
         b0:03:8b:06:7b:63:ff:17:3a:4e:79:a0:4f:7f:8e:ce:01:10:
         ed:f7:b5:d3:40:87:32:4d:70:cf:7b:98:ed:aa:1c:ff:f8:89:
         45:ce:47:24:41:a6:03:2f:27:6c:43:65:1a:32:13:eb:2f:61:
         eb:91:d8:43:f0:ec:b2:3a:2e:48:c0:64:c1:78:6a:a3:ab:3a:
         c7:7b:eb:e4:08:37:8d:d7:a6:dc:93:5d:af:cd:5e:97:45:89:
         b7:fe:1b:56:ed:03:9f:37:25:a4:06:fa:03:8a:ac:2e:2a:f0:
         11:e7:68:64:1f:d4:3d:2a:54:66:ae:46:a7:5e:c9:bb:fe:9a:
         55:5b:35:ad:f9:3d:9c:eb:40:2d:c1:b7:78:01:a4:3f:45:56:
         ed:9c:e3:31:f4:2b:97:7b:05:b7:ae:dd:e9:61:4c:ca:4a:f4:
         9c:43:b9:44:a2:3c:65:6a:ba:6f:ce:5d:4a:5c:e2:0e:b5:67:
         e3:1b:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:44 2025 by rpki-client