Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32342d3234203d3e20323731393335.roa
File:                     3139302e39332e3131322e302f32342d3234203d3e20323731393335.roa (raw, json)
Hash identifier:          7COK9AujcimgIch9HFlouDu1If+M+L3fU1xs65FU43s=
Subject key identifier:   1B:F3:45:84:EB:F3:0D:6F:78:55:78:44:8E:D8:26:09:B9:CA:26:31
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       5231245AE7E7503541A1EF80F554805AA463118B
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32342d3234203d3e20323731393335.roa
Signing time:             Mon 17 Mar 2025 14:15:00 +0000
ROA not before:           Mon 17 Mar 2025 14:10:00 +0000
ROA not after:            Mon 16 Mar 2026 14:15:00 +0000
asID:                     271935
IP address blocks:        190.93.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:31:24:5a:e7:e7:50:35:41:a1:ef:80:f5:54:80:5a:a4:63:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar 17 14:10:00 2025 GMT
            Not After : Mar 16 14:15:00 2026 GMT
        Subject: CN=1BF34584EBF30D6F785578448ED82609B9CA2631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:07:cc:7c:5b:4f:fc:ce:a5:d9:93:95:dd:
                    7a:a6:0a:83:d6:73:f0:33:70:44:b0:03:36:1b:6e:
                    ac:f8:0b:fa:c4:75:b7:39:45:0f:31:2a:9f:38:79:
                    8f:56:f9:34:66:2c:ed:f8:a3:9a:5e:af:a2:ff:74:
                    1f:95:21:d9:ed:72:fd:5e:67:6e:26:c2:04:49:63:
                    09:73:2b:b9:2a:df:eb:8f:f0:61:a7:de:c3:4f:d5:
                    8b:88:b3:e9:33:b0:58:6c:40:8e:5c:d3:81:3b:39:
                    b8:f7:5b:cc:0e:fe:3b:e7:40:de:b8:49:f2:80:e5:
                    9e:39:01:65:76:67:04:0a:37:a3:bd:00:de:96:6b:
                    c9:d3:38:a7:67:ce:dc:63:47:7e:59:5b:22:18:8d:
                    ee:a5:f8:55:f7:ab:41:69:7f:01:be:d4:b0:15:c1:
                    76:c8:f9:05:b3:56:f2:ae:ae:b4:1f:0d:43:7f:67:
                    24:21:9c:17:b3:9f:5d:cb:ae:76:f4:9b:0f:7a:26:
                    88:6a:6f:e2:c7:ec:28:58:88:8a:76:55:d0:10:fb:
                    ea:9e:52:74:e2:8b:a8:3c:d6:cc:26:4d:94:18:c6:
                    ba:cc:9f:ff:c6:1a:cc:05:0c:a4:21:70:d2:13:6d:
                    c0:b4:a0:0e:f3:05:b2:30:ee:d5:ad:d2:b4:f4:d1:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:45:84:EB:F3:0D:6F:78:55:78:44:8E:D8:26:09:B9:CA:26:31
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32342d3234203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:d7:5d:f0:64:cf:d0:56:d6:82:c0:57:c7:a3:fa:9b:97:
         bd:4c:be:3d:56:6c:71:7d:c4:b9:5b:7a:44:5e:52:b5:4e:94:
         7f:79:f7:30:46:39:93:0a:57:ee:ee:35:fe:2e:f5:db:bb:a5:
         61:d8:d3:8d:ec:48:50:29:9d:fa:e8:cc:8e:06:fd:1d:46:c9:
         d3:ed:95:df:54:be:07:53:6c:a2:05:60:af:6e:43:f3:fd:af:
         73:0f:00:b4:99:06:30:85:76:4f:c8:28:a7:7a:bf:07:12:aa:
         d7:27:06:32:a6:ba:a9:ce:ae:3c:44:78:34:e3:52:61:54:89:
         96:05:3e:b6:e0:ab:d6:f3:a0:34:90:96:0c:57:15:ff:64:ad:
         35:68:5e:86:18:2a:44:53:d9:0f:a8:7f:de:98:e2:d3:f4:e4:
         1a:e9:81:be:8c:ad:c6:6f:cb:80:00:83:fc:09:21:0e:9e:1b:
         7f:2f:93:2f:64:c7:22:29:3d:08:bc:ca:96:34:10:fa:d3:ad:
         38:b4:ea:76:a5:2e:22:62:44:fc:7e:d3:5d:07:66:db:8b:31:
         41:a2:75:a4:f9:20:54:c0:d4:08:b2:b0:a9:bf:31:c4:4f:cd:
         59:f2:b4:1d:00:ff:ba:f1:d6:23:fa:d2:0f:9c:f2:12:2e:e3:
         9f:12:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:02 2025 by rpki-client