Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131332e302f32342d3234203d3e20323732303237.roa
File:                     3139302e39332e3131332e302f32342d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          T5y3gkgP+exw8Jr2EZ9CNEeSqICjGd8kBQR6xKLSgN8=
Subject key identifier:   86:EF:75:14:B7:6A:20:7F:42:1C:91:7B:BF:68:5F:D5:4A:F9:2B:F4
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       6624AB5986A4DF7B074D9BAAC5EE5629EF128094
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131332e302f32342d3234203d3e20323732303237.roa
Signing time:             Thu 24 Jul 2025 11:35:00 +0000
ROA not before:           Thu 24 Jul 2025 11:30:00 +0000
ROA not after:            Thu 23 Jul 2026 11:35:00 +0000
asID:                     272027
IP address blocks:        190.93.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:24:ab:59:86:a4:df:7b:07:4d:9b:aa:c5:ee:56:29:ef:12:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 24 11:30:00 2025 GMT
            Not After : Jul 23 11:35:00 2026 GMT
        Subject: CN=86EF7514B76A207F421C917BBF685FD54AF92BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:b5:90:2c:87:5d:2b:b3:cf:be:a7:be:3f:
                    4b:53:2e:cc:9c:f1:6f:98:e3:d0:ad:72:65:9f:ba:
                    ee:de:fd:eb:bc:10:0f:e9:6d:77:22:fc:19:13:c9:
                    56:21:d9:be:4f:ab:b7:11:3b:ea:d0:44:4b:b2:4c:
                    1d:02:25:2c:4f:41:6b:6a:6d:45:d7:f6:fc:c9:75:
                    c5:3f:37:5c:6f:05:8e:c5:85:54:0a:dc:d1:0e:89:
                    06:41:b8:09:e1:43:79:29:35:aa:3f:e4:5b:6f:43:
                    ca:1d:01:3a:4a:fb:93:eb:93:e2:51:a0:d9:6e:c1:
                    8a:9c:45:d3:8d:bb:53:c0:d4:e0:c8:f4:1a:a5:23:
                    85:f8:f8:1e:5c:90:a8:e8:ad:42:e4:fc:89:29:c6:
                    d0:32:7b:f5:3e:81:52:eb:b9:d9:0f:50:a3:5c:7a:
                    b8:2a:f3:25:08:9e:98:66:89:4f:fb:f7:aa:44:ab:
                    19:2e:ee:b9:26:8c:8b:8d:13:6e:29:41:fe:61:b4:
                    e6:6a:10:fb:b4:86:a5:00:d5:5a:4b:00:4d:13:b9:
                    20:d3:f4:3e:10:a0:2c:03:b3:dc:3c:3e:07:7b:66:
                    8e:70:35:5a:07:5a:90:20:da:7b:cc:a9:49:28:08:
                    66:7a:c0:52:f2:5e:26:fa:c3:d3:8c:1f:7c:27:dc:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:75:14:B7:6A:20:7F:42:1C:91:7B:BF:68:5F:D5:4A:F9:2B:F4
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131332e302f32342d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:67:30:51:cf:0d:a9:9d:a2:8d:ec:dd:0d:fb:ea:f6:b5:
         4f:d9:e1:3a:64:68:9f:19:6a:80:dd:a3:ca:3f:fa:f6:e1:5f:
         88:c1:20:70:c8:47:a5:4c:56:54:9a:74:d6:9b:31:2c:b2:34:
         fd:f3:40:e4:c3:9c:96:84:8a:f6:81:23:63:d1:0e:64:43:f6:
         c3:87:1e:19:fd:22:7c:32:36:c4:f3:97:be:a4:2a:78:5a:47:
         af:a8:74:53:91:5b:be:bc:a5:cf:c2:87:c3:fa:6a:34:a7:f3:
         74:10:8e:34:90:ea:e3:1d:4a:84:71:98:15:ee:42:08:d5:6b:
         0c:38:33:02:da:8d:4b:3f:9c:c3:f0:b5:80:53:85:ea:bd:a2:
         00:8c:c8:22:b3:37:90:86:be:cd:86:da:52:de:1b:cd:6d:12:
         6d:5f:f5:b2:ab:6b:af:60:97:dd:83:b9:da:aa:b1:16:56:6f:
         d7:78:2c:c9:f6:ac:c0:9b:4f:3e:b5:7b:d9:ca:c6:fa:c8:51:
         e3:81:d4:6a:45:c5:dc:ea:a6:7f:5f:6a:83:66:6e:f5:d6:dd:
         a5:aa:0f:b0:d1:87:e8:67:9a:ed:6a:ed:67:21:fd:dd:41:60:
         08:cd:8f:18:04:de:fd:4f:46:88:db:80:af:04:e6:15:60:97:
         21:18:bd:5e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZiSrWYak33sHTZuqxe5WKe8SgJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTA3MjQxMTMwMDBaFw0yNjA3MjMxMTM1MDBaMDMxMTAvBgNV
BAMTKDg2RUY3NTE0Qjc2QTIwN0Y0MjFDOTE3QkJGNjg1RkQ1NEFGOTJCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiLWQLIddK7PPvqe+P0tTLsyc
8W+Y49CtcmWfuu7e/eu8EA/pbXci/BkTyVYh2b5Pq7cRO+rQREuyTB0CJSxPQWtq
bUXX9vzJdcU/N1xvBY7FhVQK3NEOiQZBuAnhQ3kpNao/5FtvQ8odATpK+5Prk+JR
oNluwYqcRdONu1PA1ODI9BqlI4X4+B5ckKjorULk/IkpxtAye/U+gVLrudkPUKNc
ergq8yUInphmiU/796pEqxku7rkmjIuNE24pQf5htOZqEPu0hqUA1VpLAE0TuSDT
9D4QoCwDs9w8Pgd7Zo5wNVoHWpAg2nvMqUkoCGZ6wFLyXib6w9OMH3wn3BZDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhu91FLdqIH9CHJF7v2hf1Ur5K/QwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl1x
MA0GCSqGSIb3DQEBCwUAA4IBAQB4imcwUc8NqZ2ijezdDfvq9rVP2eE6ZGifGWqA
3aPKP/r24V+IwSBwyEelTFZUmnTWmzEssjT980Dkw5yWhIr2gSNj0Q5kQ/bDhx4Z
/SJ8MjbE85e+pCp4WkevqHRTkVu+vKXPwofD+mo0p/N0EI40kOrjHUqEcZgV7kII
1WsMODMC2o1LP5zD8LWAU4XqvaIAjMgiszeQhr7NhtpS3hvNbRJtX/Wyq2uvYJfd
g7naqrEWVm/XeCzJ9qzAm08+tXvZysb6yFHjgdRqRcXc6qZ/X2qDZm711t2lqg+w
0YfoZ5rtau1nIf3dQWAIzY8YBN79T0aI24CvBOYVYJchGL1e
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:46:03 2025 by rpki-client