Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323734373230.roa
File:                     3139302e39332e3130382e302f32332d3233203d3e20323734373230.roa (raw, json)
Hash identifier:          8pJ0IadN4gLuEV6/P8QK+BRQ0J2O/C1fGJnFIx7BFa8=
Subject key identifier:   68:F8:38:2C:44:A0:8B:5B:87:2F:57:08:FF:36:A0:D2:FE:AA:9D:5C
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7167DB1BA0CE3E89CCCF28CFE7A155A3EC9691AB
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323734373230.roa
Signing time:             Thu 12 Dec 2024 18:20:00 +0000
ROA not before:           Thu 12 Dec 2024 18:15:00 +0000
ROA not after:            Thu 11 Dec 2025 18:20:00 +0000
asID:                     274720
IP address blocks:        190.93.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 14:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:67:db:1b:a0:ce:3e:89:cc:cf:28:cf:e7:a1:55:a3:ec:96:91:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Dec 12 18:15:00 2024 GMT
            Not After : Dec 11 18:20:00 2025 GMT
        Subject: CN=68F8382C44A08B5B872F5708FF36A0D2FEAA9D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:f6:51:bf:8f:a4:a1:9e:97:86:7e:e1:0b:
                    31:6f:b3:22:e1:2d:c8:d4:e6:e8:af:85:13:5e:7f:
                    18:3a:1a:14:1d:2f:1f:ba:61:cf:53:cc:af:c9:91:
                    27:f3:06:12:ea:5a:fb:1c:79:36:41:b5:f6:b6:07:
                    6d:61:b0:d6:41:b0:3c:03:13:fc:05:30:93:e1:79:
                    2d:dd:e0:2d:47:5b:7d:a3:78:17:a5:64:6d:f4:45:
                    d2:57:77:49:1f:1c:1d:08:de:1f:e6:cf:62:8f:15:
                    ad:54:2a:fa:b4:f8:3d:18:0e:6e:be:42:9c:91:5a:
                    4a:79:5b:1f:a8:e1:f2:79:37:0f:95:d8:88:19:ea:
                    e2:df:28:8c:6d:5c:42:99:8f:0b:22:96:0c:99:db:
                    b9:a3:20:83:0a:f9:7e:6c:68:b0:1d:03:10:19:84:
                    93:2c:95:d5:87:27:1e:b8:ef:34:b0:03:79:6e:8b:
                    fe:9a:72:ad:68:b6:fc:29:e6:51:2b:90:08:c5:9c:
                    2f:55:1c:c8:74:2e:14:4f:6d:2e:3b:fc:4f:41:ec:
                    c8:33:ac:02:f2:88:3b:27:fe:2d:29:5a:b7:bc:7f:
                    49:68:ca:ba:ca:1a:7a:d7:72:fc:2d:91:2f:cd:70:
                    38:6f:f8:52:c7:34:33:52:1e:70:5d:b1:e2:80:05:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:38:2C:44:A0:8B:5B:87:2F:57:08:FF:36:A0:D2:FE:AA:9D:5C
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323734373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:80:72:47:bf:5a:7b:b4:19:96:22:71:42:93:0f:90:4b:19:
         48:c5:d0:64:70:ba:19:c1:fd:03:c5:07:14:01:29:c4:68:81:
         b9:40:c6:d8:4e:8e:10:da:f7:70:8f:af:2a:04:7c:87:6e:1a:
         7a:a7:35:88:25:55:e7:e0:37:9b:5e:80:73:80:3c:9a:b6:90:
         7a:68:b7:29:69:9e:6c:8b:f8:69:8e:8f:d2:d2:60:93:6d:b6:
         c2:ac:d6:30:18:02:1c:cf:f2:17:db:11:97:97:5e:61:8f:2c:
         99:c0:a0:6f:7f:dd:5f:b1:9d:75:f8:50:4d:bb:f0:09:b4:46:
         38:b2:37:8c:6c:45:26:78:71:01:43:24:b5:13:22:b5:82:d8:
         a0:52:16:ed:95:9b:bc:f0:5d:5d:2f:45:2d:fd:3d:29:d5:39:
         96:d6:a7:e5:3f:fc:41:5a:ae:98:7a:67:a0:8c:63:59:15:21:
         55:24:9c:9b:6c:d3:cb:90:7f:79:2a:72:73:bc:c6:6a:df:0c:
         8b:c0:5e:16:f3:f9:bf:9c:81:62:c7:9d:ea:40:55:15:50:54:
         00:ce:dc:ee:0f:d6:57:e0:e7:16:dd:41:c7:3a:79:80:5c:92:
         59:2b:02:72:d8:1f:65:a0:13:15:b0:ae:47:0d:c7:ca:65:b0:
         31:c5:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:09 2025 by rpki-client