Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131302e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3131302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tTUr8/WgYTC/Z9XTPaB3YcT26vyV8QzbmU+lL8wPLc8=
Subject key identifier:   9D:87:42:3A:56:C1:E5:87:55:2E:52:51:6B:65:5B:13:33:71:B5:8D
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7D3467A16FEA4968BDAFF648DD55F78E7DA86E98
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 17 Jul 2025 14:25:00 +0000
ROA not before:           Thu 17 Jul 2025 14:20:00 +0000
ROA not after:            Thu 16 Jul 2026 14:25:00 +0000
asID:                     834
IP address blocks:        190.93.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:34:67:a1:6f:ea:49:68:bd:af:f6:48:dd:55:f7:8e:7d:a8:6e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 17 14:20:00 2025 GMT
            Not After : Jul 16 14:25:00 2026 GMT
        Subject: CN=9D87423A56C1E587552E52516B655B133371B58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:b5:ed:27:f3:df:de:6f:c0:2f:39:38:1e:
                    86:28:4c:8d:c7:d1:ec:bc:07:9b:a0:35:05:ee:17:
                    65:de:fc:fc:e7:e9:43:df:b0:bd:32:3c:03:d2:37:
                    2e:b7:d0:24:2f:1f:46:7c:eb:7a:be:8d:8e:ba:ab:
                    d5:be:68:b2:df:41:1f:06:c8:ea:1d:d4:60:29:0c:
                    a0:27:fe:50:de:6d:4c:36:96:ed:ff:2e:54:79:7e:
                    0b:3d:da:0f:2b:c6:32:f7:07:ac:42:42:d0:c8:40:
                    21:0d:33:fc:b4:da:d0:49:93:4c:e4:4c:eb:b8:ce:
                    c9:57:eb:5f:d1:49:30:5e:44:db:e1:a8:4f:23:0f:
                    07:e9:a3:61:b0:99:47:25:a5:a4:02:92:9f:57:46:
                    58:57:8f:ef:7d:0c:bc:2a:93:a0:fa:1a:33:07:5a:
                    35:5b:8c:a0:89:64:d5:00:d7:8a:b4:41:cc:2f:9a:
                    0f:7a:e6:86:d9:77:b6:94:84:a9:cc:92:46:8d:c9:
                    45:28:76:cf:15:ee:28:fa:a1:da:eb:cd:86:df:51:
                    e8:79:b7:8e:39:21:32:49:d9:67:b0:46:16:9c:dd:
                    16:72:50:d7:bd:2b:e9:ab:6f:b9:bb:7b:6d:91:c3:
                    d5:58:d8:4b:12:8b:01:4d:a9:af:cc:cb:34:a2:4a:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:42:3A:56:C1:E5:87:55:2E:52:51:6B:65:5B:13:33:71:B5:8D
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:3a:67:ef:06:a0:f3:50:e4:3a:65:c3:63:20:0d:23:fa:
         c9:65:c4:39:9d:10:bd:40:c8:7a:67:33:a5:a5:8c:be:ca:c9:
         54:0b:85:ca:1d:25:a5:3a:e5:c4:88:cf:69:76:b6:86:b4:06:
         ac:48:44:b0:af:ee:5a:3a:38:b6:3d:7f:c5:04:ef:e9:ec:e5:
         24:4d:d1:fb:52:7f:72:2e:3d:8a:ec:5f:2f:5d:38:e2:9a:f8:
         00:4c:a6:0a:8a:2b:b6:e9:49:d7:8f:22:98:f2:17:ee:6f:e7:
         41:1b:66:db:82:a8:82:77:3b:db:dc:4b:49:8a:99:6a:6a:d6:
         bb:fb:3e:d0:7d:5a:de:2e:56:85:22:33:f9:b2:36:78:90:49:
         ec:d5:78:68:27:af:db:e5:19:6f:90:c7:39:6c:48:5b:35:cd:
         ea:be:d6:dd:fe:9b:93:0a:9e:4c:35:08:2a:39:35:36:e7:a3:
         8b:3e:ef:89:5f:e7:b1:f9:b7:ae:ca:fc:8c:b4:36:1c:b1:26:
         1d:75:56:1a:32:1d:04:ab:f4:37:34:b9:9b:d0:f2:dc:e6:e4:
         0f:7b:b3:ac:a2:f7:0a:a1:15:13:25:ee:d6:03:13:d6:9c:f1:
         01:2a:76:42:a3:ca:39:ab:d1:52:28:ec:71:35:5c:ee:fb:09:
         9c:82:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:46:32 2025 by rpki-client