Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa
File:                     3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          3dJUa7OTP0q9mOvs2JsamRkYVxtAPTJOujhTQG01Kno=
Subject key identifier:   6E:64:1F:4F:EA:B7:2B:28:F9:E0:0F:2E:64:AD:40:41:21:6F:43:06
Certificate issuer:       /CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
Certificate serial:       0E7102DDA0A204EE86614D7DF811BC2CA267D014
Authority key identifier: A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa
Signing time:             Wed 13 Aug 2025 13:25:00 +0000
ROA not before:           Wed 13 Aug 2025 13:20:00 +0000
ROA not after:            Wed 12 Aug 2026 13:25:00 +0000
asID:                     265554
IP address blocks:        190.103.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:71:02:dd:a0:a2:04:ee:86:61:4d:7d:f8:11:bc:2c:a2:67:d0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
        Validity
            Not Before: Aug 13 13:20:00 2025 GMT
            Not After : Aug 12 13:25:00 2026 GMT
        Subject: CN=6E641F4FEAB72B28F9E00F2E64AD4041216F4306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:8f:46:73:1f:c5:0f:99:ab:ec:9e:77:98:
                    9f:a1:7b:9a:4b:41:7f:38:3e:56:6a:07:51:d9:3b:
                    29:86:88:fc:50:d8:b9:af:bd:5b:a1:58:51:dd:63:
                    d8:ae:a1:e0:14:d5:29:e5:37:db:92:16:5d:f9:a3:
                    e4:1e:b1:5f:6e:20:4c:cb:46:fb:5f:4b:26:33:fe:
                    1b:44:84:59:61:d9:5e:a0:16:31:dc:3f:08:12:ac:
                    49:a2:98:2c:96:ba:f8:1c:78:2a:73:21:2e:25:f2:
                    52:24:d8:b3:54:4a:9a:30:d3:d5:ab:fc:37:14:38:
                    77:1c:85:67:01:bb:41:7a:9d:c6:b9:80:ee:8a:71:
                    c7:a6:4c:f5:44:39:40:c3:8d:5b:e2:8c:83:5a:c7:
                    0c:e5:cc:cf:44:53:c6:0e:37:22:c7:21:13:f0:98:
                    00:10:dd:d7:12:ca:0f:7f:75:28:c9:1f:83:0e:26:
                    23:69:b7:99:d5:da:5b:eb:ba:14:87:55:a0:e5:b2:
                    0a:6f:c7:fc:12:7d:3d:d4:92:57:c9:3b:20:a5:17:
                    89:63:8e:a6:c3:2a:b4:21:28:fa:7b:dc:49:bf:5b:
                    be:5e:9d:7c:7d:c9:f9:e6:a7:4b:34:a2:26:1f:22:
                    41:fa:cd:f5:1d:65:2b:ae:f9:72:01:0b:1c:46:cc:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:1F:4F:EA:B7:2B:28:F9:E0:0F:2E:64:AD:40:41:21:6F:43:06
            X509v3 Authority Key Identifier:
                keyid:A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131352e302f32342d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:06:67:e3:f0:b1:f2:99:39:6c:16:d0:15:e4:e7:0b:52:25:
         00:1f:84:1c:ae:c9:c2:d3:14:ab:fd:73:7f:fd:7d:11:62:72:
         25:b1:02:50:15:a4:7f:7c:8c:e1:62:25:37:78:db:89:55:53:
         8d:af:22:50:9d:86:65:1d:81:ce:92:e5:22:e1:0c:bc:74:6c:
         90:94:74:6e:c5:93:8d:02:0f:2b:39:7a:dc:85:66:9f:20:15:
         f2:f3:04:4f:e8:7e:db:8e:25:1a:69:21:66:9e:40:cc:24:f0:
         56:72:82:52:25:8c:4e:cd:d0:91:ff:24:ca:0e:6c:9a:33:2f:
         42:7c:75:6e:3f:a9:f5:99:88:fe:30:01:00:4c:f4:b6:74:63:
         52:9e:17:d4:5b:ae:6d:bd:14:c6:8a:b1:fe:83:27:d4:2c:cb:
         12:77:bb:61:9f:a1:26:0e:6a:72:f2:9e:21:b4:4d:89:3e:39:
         e9:1a:a5:21:ce:43:c0:47:6a:ef:e0:a3:db:ec:b0:ca:7e:1a:
         f7:b4:97:db:6b:81:7b:2e:06:a6:50:ca:46:f5:50:42:37:48:
         df:3b:83:76:36:36:b5:b2:e9:16:39:84:17:b5:44:a8:08:42:
         8d:b7:19:e7:17:b2:02:65:46:d7:61:92:80:b6:20:26:9c:b0:
         70:c3:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:38:36 2025 by rpki-client