Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20323632333631.roa
File:                     3139302e39332e3130392e302f32342d3234203d3e20323632333631.roa (raw, json)
Hash identifier:          axuujfAfXIRJu/BINaDrGMbO1hEYBqXJkMeC7xkBQ8U=
Subject key identifier:   62:CC:4F:75:FC:BF:D4:87:A6:57:DF:1B:B3:5F:51:03:C3:A6:F9:59
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7B86B8CBC3ED453EB960BA412D1841767E505D0B
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20323632333631.roa
Signing time:             Tue 02 Sep 2025 15:42:40 +0000
ROA not before:           Tue 02 Sep 2025 15:37:40 +0000
ROA not after:            Tue 01 Sep 2026 15:42:40 +0000
asID:                     262361
IP address blocks:        190.93.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:86:b8:cb:c3:ed:45:3e:b9:60:ba:41:2d:18:41:76:7e:50:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep  2 15:37:40 2025 GMT
            Not After : Sep  1 15:42:40 2026 GMT
        Subject: CN=62CC4F75FCBFD487A657DF1BB35F5103C3A6F959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:a2:5c:dc:42:f5:ab:9d:f2:8f:16:fd:d4:
                    5f:31:da:14:e7:2d:78:29:1d:bd:b6:4c:11:6e:ea:
                    7e:29:1b:da:c8:54:16:6f:97:a0:07:2a:e8:4c:e6:
                    92:78:46:b4:bc:9e:cf:a7:a0:ac:a7:3a:31:d5:f5:
                    0f:9a:74:4c:e8:3f:f1:7b:cc:cc:e4:c3:d9:a0:f3:
                    1a:5b:4c:28:38:40:d8:a0:b1:c8:f3:fe:ba:41:aa:
                    6d:46:80:65:f3:05:ae:ba:3c:44:2a:cb:69:eb:2b:
                    06:cd:3f:20:91:7f:dd:77:63:5f:8d:a4:eb:f7:f4:
                    72:73:73:ad:e4:ed:5b:e2:64:2b:f6:51:0f:36:7b:
                    a0:be:dd:69:bc:14:e0:62:38:c0:ee:df:6c:94:71:
                    ab:0f:0e:00:c7:b5:68:73:45:22:30:5e:37:30:2b:
                    f1:55:83:00:e1:ef:cd:b4:69:a7:a3:2c:5c:83:99:
                    fe:8f:8f:2c:27:05:77:b0:4e:ac:17:57:25:99:bb:
                    f0:1d:97:83:d3:fa:19:05:87:f3:c3:b2:0e:44:45:
                    c0:82:05:6c:4d:d7:33:cb:58:1e:e4:27:b6:67:be:
                    01:39:f8:ce:63:c3:f4:7b:55:37:94:1a:7a:e9:db:
                    f7:c7:f6:ae:a0:fa:e5:b4:60:a6:6e:fb:f5:dc:12:
                    c6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CC:4F:75:FC:BF:D4:87:A6:57:DF:1B:B3:5F:51:03:C3:A6:F9:59
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20323632333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:44:09:7e:ed:59:f0:7d:2a:57:b1:14:2b:b7:19:03:b3:ae:
         3e:e9:54:07:c5:f1:ce:c7:b7:21:25:a8:f8:4a:2d:a3:c7:7b:
         b6:23:4e:a6:f5:76:27:20:ef:4c:d1:33:bb:7b:62:62:f7:e8:
         4d:4f:c3:6e:d9:c1:9a:96:22:85:18:00:eb:66:48:d5:2f:34:
         49:dc:5f:8a:d9:79:34:d3:d9:96:aa:2b:76:2a:95:4b:dc:a8:
         84:66:72:47:51:0f:20:6a:a1:64:71:84:f2:4c:c4:f3:ed:5c:
         ef:db:0d:df:6c:e5:02:f1:76:45:35:90:14:9b:73:45:5e:b1:
         bf:3c:92:5e:36:e0:2d:8c:c8:9b:45:5b:d7:ab:0b:81:0e:fe:
         97:6f:d1:a3:ff:c4:a5:41:a1:13:43:38:bc:ea:65:71:0a:a4:
         f2:50:43:94:9a:c5:4c:07:85:38:0b:79:bb:d1:2b:73:41:dd:
         ec:67:9b:52:c3:e7:00:db:e7:06:58:3f:40:fa:23:02:1d:f5:
         36:6d:ef:0c:03:bc:c4:bb:c8:d1:1e:6a:8a:b4:5e:99:57:af:
         a5:4c:f5:ea:06:df:6c:46:87:dc:ec:ee:75:1b:9a:9b:ef:87:
         56:23:53:2f:b8:b1:b2:53:96:17:6d:4c:71:32:76:96:25:5f:
         31:11:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 20:35:27 2025 by rpki-client