Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3139302e39332e3138362e302f32342d3234203d3e20323732303236.roa
File:                     3139302e39332e3138362e302f32342d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          9+En0FNeR6b0uctKAJXhQzluTk4jncA1LS+L3z0bhHM=
Subject key identifier:   BC:CC:C9:FD:39:2B:4A:78:CD:6A:03:32:8F:67:BC:BB:54:84:2C:A0
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       5CB4D795306C595FF25EDEE4E35F887AD29CA30D
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3139302e39332e3138362e302f32342d3234203d3e20323732303236.roa
Signing time:             Tue 29 Jul 2025 18:55:00 +0000
ROA not before:           Tue 29 Jul 2025 18:50:00 +0000
ROA not after:            Tue 28 Jul 2026 18:55:00 +0000
asID:                     272026
IP address blocks:        190.93.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b4:d7:95:30:6c:59:5f:f2:5e:de:e4:e3:5f:88:7a:d2:9c:a3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Jul 29 18:50:00 2025 GMT
            Not After : Jul 28 18:55:00 2026 GMT
        Subject: CN=BCCCC9FD392B4A78CD6A03328F67BCBB54842CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:ca:e5:8b:f8:d5:4a:8e:3f:c8:81:29:b9:
                    cc:30:e7:bd:f5:d7:89:02:3c:72:8a:72:da:23:5a:
                    4b:64:47:ca:40:82:e7:5d:da:ea:9a:33:14:7e:bb:
                    fd:e9:ac:39:3d:41:bd:91:01:d5:fc:7e:c6:36:e1:
                    56:14:57:9b:04:cb:8e:aa:4b:c5:9d:7d:a2:f8:b3:
                    08:a9:c3:17:44:ef:fb:cb:d1:2d:74:b1:f2:63:53:
                    72:8d:0f:a1:95:b7:20:39:73:b7:f1:6b:f1:e6:0b:
                    32:ad:81:a3:29:b8:f5:04:41:85:38:27:95:9f:0c:
                    98:a8:dd:03:b0:ab:87:9e:b3:fc:b4:15:1c:5a:2b:
                    75:b4:26:8b:63:39:a9:c7:69:82:27:bc:b6:22:05:
                    f2:ef:fd:b1:6d:38:93:38:ab:12:ea:a6:6c:f6:a3:
                    f7:02:4f:28:7a:e7:3b:96:64:ec:5f:49:2e:6a:1e:
                    18:cd:9f:fe:9d:45:e9:71:db:af:08:b0:fc:cc:ac:
                    02:c8:53:86:fd:81:49:bc:b9:c3:2a:7e:b7:74:a2:
                    5e:ca:13:d6:c7:9f:d7:06:cb:56:fb:8a:7b:de:64:
                    fd:32:69:74:01:5e:c4:cb:85:bd:c2:31:24:00:c4:
                    3a:71:78:4c:1c:e7:6c:22:64:5b:f6:17:1f:53:4f:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:C9:FD:39:2B:4A:78:CD:6A:03:32:8F:67:BC:BB:54:84:2C:A0
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3139302e39332e3138362e302f32342d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:e7:f5:da:09:7c:85:c5:0e:89:2c:af:a4:ec:4b:63:81:
         25:95:c5:f5:13:7a:61:38:e7:ed:af:06:83:84:b4:69:ea:ff:
         71:1d:53:3e:df:41:63:97:07:c9:08:cf:b1:2d:0d:88:6c:3b:
         0d:a7:8c:7f:f4:5e:ac:74:93:22:84:3d:59:4d:bc:18:e0:4c:
         70:1f:fe:9a:60:ae:58:33:ef:45:3b:bf:f2:fd:0c:28:bb:26:
         7a:8f:ef:0a:3d:7f:10:32:e6:df:ab:da:18:3f:cf:b0:3e:61:
         02:fb:d4:b8:84:4e:a4:49:9d:55:7c:e8:7b:c9:88:a4:c1:e7:
         42:1b:db:1b:73:0d:a5:3f:2a:07:e4:22:a3:35:67:5d:50:88:
         a3:07:be:da:cc:26:d8:00:5a:58:cb:5a:4d:09:75:8f:1d:2a:
         d9:4f:28:54:80:05:e6:9c:08:f5:d0:bc:23:55:dd:ce:24:26:
         ab:29:fb:e7:b7:fc:2f:2b:2d:a5:fc:20:0f:78:75:f5:6e:54:
         81:97:4f:ad:59:de:fc:78:e7:86:ce:16:fc:ed:79:ff:fe:b0:
         c6:3b:34:fb:f1:64:3a:df:be:a3:86:58:b3:bc:b5:2c:b5:dd:
         44:b5:df:78:77:01:fa:73:58:8e:e3:91:e3:0b:b9:5a:08:84:
         37:a0:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:43:27 2025 by rpki-client