Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa
File:                     3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa (raw, json)
Hash identifier:          Lui4KkcUjR9Kh+pE5EC9Fr9lQwnHs+RSkjeHmkfH/H4=
Subject key identifier:   BA:6C:87:48:64:C5:65:CD:1A:37:63:2C:03:F1:FF:A3:10:E7:A0:ED
Certificate issuer:       /CN=92D39AD5A5179131EF8621A62156503CF92DBABD
Certificate serial:       2A62314600440B6CAEE5771CF0B96FC4F109DED8
Authority key identifier: 92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa
Signing time:             Tue 02 Sep 2025 12:40:00 +0000
ROA not before:           Tue 02 Sep 2025 12:35:00 +0000
ROA not after:            Tue 01 Sep 2026 12:40:00 +0000
asID:                     274171
IP address blocks:        190.104.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:62:31:46:00:44:0b:6c:ae:e5:77:1c:f0:b9:6f:c4:f1:09:de:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D39AD5A5179131EF8621A62156503CF92DBABD
        Validity
            Not Before: Sep  2 12:35:00 2025 GMT
            Not After : Sep  1 12:40:00 2026 GMT
        Subject: CN=BA6C874864C565CD1A37632C03F1FFA310E7A0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:89:c9:94:8d:86:26:e9:89:54:cf:89:ed:
                    e8:e0:41:a5:48:ec:52:b1:86:a4:87:ca:e3:43:4b:
                    50:00:e8:42:9a:92:70:16:b7:a4:7c:2f:4b:eb:83:
                    60:f5:ed:ae:55:f7:92:67:ff:b2:9c:78:4c:4e:00:
                    09:47:c0:67:f3:64:72:64:f5:6c:66:ef:ac:19:5a:
                    58:fc:8f:ad:81:af:c9:e2:98:57:bd:59:46:9b:80:
                    42:0d:e2:b8:26:58:a3:6d:75:4a:47:9b:d6:84:1d:
                    63:d3:97:d4:d4:70:c3:86:e0:c1:e3:36:d7:53:d5:
                    72:bd:d4:61:88:0b:6e:e9:ea:da:28:a4:91:e5:3f:
                    a9:bb:b7:5e:c7:63:60:52:3d:0e:19:ae:c7:6c:1d:
                    0d:8d:c7:31:ac:72:4e:23:2e:b9:d0:ad:ad:3d:86:
                    ca:e1:fb:b6:8f:d2:e7:73:89:f4:70:08:4f:bb:fe:
                    bd:5f:ee:04:ed:38:15:e2:ea:24:2a:5d:34:71:2e:
                    56:f3:46:23:24:f3:e1:42:dc:45:5b:2c:34:22:fb:
                    f3:cd:b2:01:15:2a:fa:ba:05:9b:9b:37:1e:b4:1e:
                    81:db:34:80:61:d3:14:5d:1d:e1:6a:0e:1e:0f:9a:
                    0a:aa:75:fe:2d:88:aa:a4:68:fe:77:70:bc:d9:47:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6C:87:48:64:C5:65:CD:1A:37:63:2C:03:F1:FF:A3:10:E7:A0:ED
            X509v3 Authority Key Identifier:
                keyid:92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33342e302f32342d3234203d3e20323734313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:3b:e0:86:ae:b1:cd:ef:9c:7e:85:b7:99:a0:49:fa:66:
         3b:aa:04:33:5c:2e:b2:60:3e:ac:4f:91:8a:53:ba:6b:52:93:
         c5:fd:74:97:0d:4b:d4:3d:e3:8e:1e:f7:91:a6:29:36:0c:da:
         be:43:ac:e6:ad:b1:bc:9b:42:b1:7c:9e:79:25:fa:b6:5f:d9:
         3c:9a:d3:ed:84:9e:0a:fa:63:58:e8:94:aa:26:af:7c:df:de:
         ba:50:2a:76:b4:37:ed:7d:24:cb:fb:9c:55:10:f8:e3:84:1a:
         27:7b:e4:d8:30:e5:cf:95:3c:54:fd:d9:7b:2d:63:04:9c:f9:
         0e:dd:17:17:c0:ac:f1:71:ae:57:de:25:dd:24:a8:9d:b5:41:
         a9:ed:03:1d:d6:f6:04:8d:18:47:ed:b1:98:4d:50:1e:66:1e:
         49:8e:bb:c3:c4:7a:90:73:a6:12:54:1d:75:67:dc:00:f3:e7:
         a4:bf:81:f9:a4:ef:43:73:29:c7:a2:1c:ad:8b:50:f4:2a:ea:
         d9:a1:d3:78:46:75:c3:ad:10:f2:9d:5c:40:4a:0d:ff:42:e4:
         ad:e1:30:90:fa:27:ca:7d:15:7c:ce:50:4f:14:95:f1:75:a6:
         8d:ea:63:5f:f8:3d:90:0b:6f:bc:a5:6d:ea:44:c9:8a:cf:95:
         7c:ab:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:54:58 2025 by rpki-client