Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131332e302f32342d3234203d3e20323731393335.roa
File:                     3139302e39332e3131332e302f32342d3234203d3e20323731393335.roa (raw, json)
Hash identifier:          nYOhjoCtQHj/4NN/TxuJgkxbmNM8p34g1A4hfviab/g=
Subject key identifier:   2A:3B:58:6E:81:DB:90:22:02:D6:98:32:79:4E:DA:AA:AC:25:8D:5B
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       40262DFD48E0350AE284FA60FC26A888ED5E52A0
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131332e302f32342d3234203d3e20323731393335.roa
Signing time:             Mon 17 Mar 2025 14:10:00 +0000
ROA not before:           Mon 17 Mar 2025 14:05:00 +0000
ROA not after:            Mon 16 Mar 2026 14:10:00 +0000
asID:                     271935
IP address blocks:        190.93.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:26:2d:fd:48:e0:35:0a:e2:84:fa:60:fc:26:a8:88:ed:5e:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar 17 14:05:00 2025 GMT
            Not After : Mar 16 14:10:00 2026 GMT
        Subject: CN=2A3B586E81DB902202D69832794EDAAAAC258D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:84:5e:b0:cc:12:6c:86:de:0e:3b:bf:de:
                    06:d2:a4:2e:48:de:0c:f0:a4:3c:fd:f2:01:5b:1f:
                    9f:c5:c0:e4:5b:57:cc:23:4b:d2:f4:ad:86:90:b0:
                    89:bd:54:24:26:d0:bf:38:00:67:40:99:b7:c4:27:
                    34:66:5a:39:ff:5a:fd:b8:cc:70:e1:20:b0:a8:2e:
                    be:2c:5d:91:d3:20:62:0c:11:82:88:29:c0:af:39:
                    f0:97:d9:7b:f2:50:b8:49:99:83:1e:39:82:f9:9e:
                    4b:4f:c5:53:1a:1b:b4:96:d0:3a:f4:a2:5f:f0:c7:
                    7c:80:b4:fd:6f:1d:db:dd:58:68:9d:d3:21:90:74:
                    5f:c8:c5:96:7c:13:e4:23:61:f3:05:68:6e:56:f1:
                    10:ad:87:e7:40:43:1c:cd:40:2a:cc:f8:fb:19:dd:
                    00:b0:5f:3b:cd:85:af:8f:34:60:6d:e7:d6:80:ad:
                    4d:50:e0:01:a9:23:1b:eb:8a:fd:02:a4:c9:ee:73:
                    8d:7a:77:7e:d3:53:14:32:1c:ba:dc:80:7d:14:cf:
                    63:bd:04:a0:18:70:04:98:b0:c2:ef:c6:9d:85:52:
                    77:b4:2e:d1:50:3d:fa:f4:c4:0a:4e:f9:8d:80:ce:
                    34:22:51:23:57:4c:e5:02:da:36:75:eb:ca:d4:4b:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:58:6E:81:DB:90:22:02:D6:98:32:79:4E:DA:AA:AC:25:8D:5B
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131332e302f32342d3234203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:32:f7:84:e4:fd:1c:76:8f:e5:5e:e8:52:7f:95:76:ad:82:
         11:20:df:19:da:96:0e:ff:b8:ca:eb:6e:2e:1c:c6:98:76:03:
         50:19:03:f3:52:18:aa:8b:03:8f:26:92:ec:ad:b0:57:63:4f:
         ed:6a:4c:0e:57:00:21:48:6b:4e:c9:8c:47:e3:80:f0:c2:ae:
         58:b4:df:a0:9a:1c:55:c8:fe:21:00:c7:b8:df:80:2b:dc:59:
         f4:22:ed:86:86:06:3c:f0:d9:03:bb:76:2c:35:b7:44:90:6d:
         d5:7e:f4:84:f3:45:9b:6b:0f:dd:91:b8:24:c5:7f:f6:b3:76:
         9e:67:f5:db:00:11:73:6b:54:c8:bf:cb:88:9a:90:f2:76:18:
         a0:2a:31:3b:a6:d7:fb:e6:b1:40:75:2a:1e:00:b4:0e:fe:17:
         26:f1:09:22:2d:13:a9:16:24:1a:22:87:7c:8f:4f:34:0a:2b:
         16:dd:75:ed:ac:04:4a:c0:62:8d:6f:c9:35:22:77:37:68:1d:
         c4:97:07:7a:8c:fd:8f:ba:5e:90:19:5c:f7:bc:e6:eb:3e:59:
         62:a1:5a:18:14:47:c0:77:81:04:00:44:11:c0:e3:76:74:c6:
         d2:c9:8d:0c:fa:80:e3:ed:6a:fe:5f:59:e6:0b:6e:9b:c7:27:
         0b:33:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:35:04 2025 by rpki-client