Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323636393839.roa
File:                     3139302e39332e3130382e302f32332d3233203d3e20323636393839.roa (raw, json)
Hash identifier:          G+8oVteSvzTPg9AYU5E9BNxA2f6CyS20LjwwJLfe4gA=
Subject key identifier:   0E:CB:88:3F:EB:BD:B5:1C:98:61:D5:EA:D1:DB:CF:E0:83:31:44:D4
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       515E778247DA6D502F5DC59FABCA093161BBDF4A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323636393839.roa
Signing time:             Tue 02 Sep 2025 15:42:39 +0000
ROA not before:           Tue 02 Sep 2025 15:37:39 +0000
ROA not after:            Tue 01 Sep 2026 15:42:39 +0000
asID:                     266989
IP address blocks:        190.93.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:77:82:47:da:6d:50:2f:5d:c5:9f:ab:ca:09:31:61:bb:df:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep  2 15:37:39 2025 GMT
            Not After : Sep  1 15:42:39 2026 GMT
        Subject: CN=0ECB883FEBBDB51C9861D5EAD1DBCFE0833144D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:b1:b5:b4:7d:5e:43:d4:7c:44:b6:fc:09:
                    3e:52:59:59:06:52:95:52:e2:a9:d2:17:b9:51:5a:
                    28:11:57:ab:b4:28:d7:37:95:96:bb:61:d3:bc:a2:
                    34:18:87:59:f1:2f:b9:9b:b7:d7:71:89:c1:24:9b:
                    db:bf:9e:f5:9e:0d:ff:e3:9a:73:d8:2a:ba:05:ae:
                    a8:e1:56:6a:2b:ba:53:04:7f:2d:22:b0:20:10:20:
                    40:c6:49:55:3e:1b:8d:25:dd:93:2d:bb:07:b1:d8:
                    4f:10:bd:10:11:1b:db:6c:9d:00:0f:b1:20:df:96:
                    40:05:09:75:c5:2b:3c:1a:ce:64:1c:30:91:0b:38:
                    e7:94:d6:e5:c0:e2:1d:b0:02:1f:9c:4a:96:9c:a8:
                    e1:7b:d3:f3:e4:96:84:2a:0f:25:78:2e:4d:0a:6a:
                    01:4a:2f:73:d3:9b:43:56:f6:9d:ec:38:55:a1:b2:
                    37:36:f4:6f:ff:c3:36:ba:5f:f6:49:31:3b:ca:3f:
                    09:0f:af:cd:ef:ab:c9:75:cf:62:43:53:05:65:6d:
                    1d:2f:15:5f:3a:7b:f7:01:d7:ae:6e:83:b2:bc:3b:
                    0d:17:54:49:45:1c:b5:0e:52:47:f2:89:70:5f:a5:
                    ad:ca:4a:22:13:34:06:bb:22:f6:28:43:36:c5:dd:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CB:88:3F:EB:BD:B5:1C:98:61:D5:EA:D1:DB:CF:E0:83:31:44:D4
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323636393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:0c:23:e1:0a:e0:77:49:ae:d3:bf:1f:33:d0:16:cb:55:33:
         38:16:fe:cc:8b:76:62:7c:93:3c:aa:4b:ef:a0:27:a4:da:08:
         5c:28:c6:c4:59:bf:2d:f6:f2:c7:86:85:b8:ee:47:04:a9:e8:
         74:ec:ac:ea:35:d7:0a:19:e2:d7:c6:28:b1:0d:ce:f0:12:86:
         13:3c:2f:6f:fa:54:fc:80:87:81:5d:6f:ca:b9:29:9b:c3:b4:
         5e:80:0f:50:f9:80:d8:03:2b:95:77:07:a4:5c:32:88:12:fb:
         33:2c:17:10:5a:22:86:d7:7f:d9:20:c4:e0:87:9b:82:13:6a:
         b7:7b:4b:04:16:e5:f5:2e:af:b4:d1:66:ba:e1:d1:63:5d:70:
         0e:77:73:28:a6:c6:65:69:11:00:f1:46:15:fa:b0:94:be:7d:
         0e:cb:4d:9f:c0:18:e6:6f:62:37:42:56:de:7c:09:17:d0:0e:
         26:b4:e0:c2:84:a2:79:d3:cc:67:16:ee:ae:0d:f0:81:3c:b0:
         88:3d:dc:56:56:1c:8a:29:f6:c1:85:0b:10:af:f0:19:b3:bb:
         15:51:fc:df:f3:5e:fd:7a:a7:c6:ca:05:eb:29:db:3a:a9:84:
         ab:73:6a:15:5c:78:0b:62:76:a0:8d:56:38:63:2c:c9:78:d3:
         09:88:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 20:33:01 2025 by rpki-client