Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e322e302f32332d3234203d3e20323639393334.roa
File:                     3139302e38332e322e302f32332d3234203d3e20323639393334.roa (raw, json)
Hash identifier:          K/V1hkTirrgJDCSsTqUKOKgHzBHij5lay4Lqrr5HEqI=
Subject key identifier:   8E:A2:AE:F5:98:C2:47:7F:74:EB:96:2F:CC:5D:B4:85:FA:C0:F0:1F
Certificate issuer:       /CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
Certificate serial:       4641CA91DF31651563330220C638ECCA8C18421B
Authority key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e322e302f32332d3234203d3e20323639393334.roa
Signing time:             Mon 08 Sep 2025 15:43:48 +0000
ROA not before:           Mon 08 Sep 2025 15:38:48 +0000
ROA not after:            Mon 07 Sep 2026 15:43:48 +0000
asID:                     269934
IP address blocks:        190.83.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:41:ca:91:df:31:65:15:63:33:02:20:c6:38:ec:ca:8c:18:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
        Validity
            Not Before: Sep  8 15:38:48 2025 GMT
            Not After : Sep  7 15:43:48 2026 GMT
        Subject: CN=8EA2AEF598C2477F74EB962FCC5DB485FAC0F01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:40:b0:3f:f3:e9:f0:42:45:4f:87:b3:be:
                    1f:74:3a:b7:13:35:cc:d0:7e:70:be:2f:8e:a4:0c:
                    58:1c:44:e8:e6:69:12:38:bc:cc:fd:2a:1e:3a:ec:
                    40:37:4d:3b:18:ed:cf:91:9f:1d:fa:e3:16:03:f3:
                    00:7f:6d:62:96:3c:6f:8b:4c:cc:9b:9d:cb:12:36:
                    bc:c3:d9:26:bb:4c:26:62:bf:a7:44:3c:b8:b6:ac:
                    ea:01:e8:76:28:bc:fd:dc:0f:3d:dc:a8:8b:f1:8c:
                    ce:7d:c8:dc:2e:1a:ba:1b:04:f7:3f:64:16:80:d7:
                    6f:ff:f7:d2:1d:80:af:29:a3:4d:bd:1a:8b:8a:bf:
                    8a:67:b1:8c:fc:af:b9:ba:28:ee:b0:2b:da:48:d9:
                    13:c5:61:23:48:0b:29:65:85:ea:ae:ad:eb:21:d6:
                    8f:3b:41:e8:14:ed:f9:14:1f:a3:fa:4a:d2:90:8d:
                    82:a6:84:8e:a5:fb:92:e2:19:03:91:ef:7b:a2:26:
                    a4:d4:b3:9f:9d:39:44:30:63:34:73:a3:51:40:60:
                    4d:68:a4:b1:cc:f3:14:3f:ce:23:21:5d:aa:1e:93:
                    b1:48:5f:77:91:15:2f:60:61:14:f2:29:ee:5b:1a:
                    c4:bb:ed:72:f2:08:65:22:6b:32:68:37:e7:5e:2c:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A2:AE:F5:98:C2:47:7F:74:EB:96:2F:CC:5D:B4:85:FA:C0:F0:1F
            X509v3 Authority Key Identifier:
                keyid:3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e322e302f32332d3234203d3e20323639393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:02:15:2c:ed:fb:ed:d3:c2:86:44:02:45:71:3d:85:44:d5:
         a6:6b:36:5e:67:1f:97:ef:91:ff:99:16:08:d9:b7:ee:00:80:
         38:ec:0c:d5:0c:47:9c:67:29:ba:20:79:a7:2e:58:95:54:7d:
         56:84:54:78:fc:2e:3a:0a:4f:f3:c0:c8:4d:56:13:7b:02:09:
         3f:f3:e9:cf:6c:52:19:ef:63:a9:a6:16:c7:a5:38:b8:7d:c6:
         36:0b:85:14:c2:8a:7b:6d:7c:e9:d5:56:a5:cb:34:46:73:0f:
         b6:57:54:c7:78:4f:1a:88:e2:cf:d9:f7:fc:cf:2a:f8:28:8d:
         21:47:2f:1b:d1:21:35:c9:40:77:39:01:be:85:02:f5:48:e1:
         ab:28:5e:27:f1:52:82:78:fe:b4:6d:93:fd:b1:fc:f9:fd:e1:
         53:a9:73:a7:b2:07:6e:4a:b1:dc:75:a9:46:9a:ba:e9:e7:97:
         f8:07:a9:c8:c8:03:a0:ae:ca:f8:9d:5b:45:dd:65:11:1a:ef:
         f9:f2:89:07:3b:43:d3:a7:28:2d:0e:04:cb:3e:7e:a0:bb:38:
         67:69:56:fd:a4:aa:89:2a:7e:ce:99:b3:92:e9:4a:5f:c2:2a:
         cd:fe:62:49:9d:28:9f:cc:f6:a7:1c:99:b5:55:4a:49:eb:26:
         4e:5f:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:36 2025 by rpki-client