Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3234203d3e20383334.roa
File:                     3139302e39332e3131362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          oiGJnu2iXjSero9US2YjPjeIo8f+HH003YMCA5jJ9Bg=
Subject key identifier:   5F:E7:8B:86:23:9D:AE:59:03:66:4A:66:04:94:AB:31:72:B0:A3:D0
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       270A3BE525EE616B14E88F7A6DB651BB359DB352
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3234203d3e20383334.roa
Signing time:             Tue 01 Apr 2025 14:35:00 +0000
ROA not before:           Tue 01 Apr 2025 14:30:00 +0000
ROA not after:            Tue 31 Mar 2026 14:35:00 +0000
asID:                     834
IP address blocks:        190.93.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:3b:e5:25:ee:61:6b:14:e8:8f:7a:6d:b6:51:bb:35:9d:b3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Apr  1 14:30:00 2025 GMT
            Not After : Mar 31 14:35:00 2026 GMT
        Subject: CN=5FE78B86239DAE5903664A660494AB3172B0A3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:ac:ec:51:58:0e:e3:cd:ab:63:29:dc:97:
                    87:58:9c:63:96:69:97:00:42:57:a4:71:0c:ba:32:
                    c7:75:f4:4f:06:ac:a5:06:78:2f:0d:4c:63:78:4d:
                    70:fc:4f:5d:f3:8d:ee:37:42:11:ef:ab:af:f6:ac:
                    89:ae:c3:d1:89:ef:0c:1e:a6:68:fa:c7:43:95:f8:
                    cc:b7:cb:80:b4:7b:66:3b:9a:6c:41:13:cf:d0:36:
                    60:2d:96:ad:44:b1:00:68:ad:06:2c:63:ba:db:29:
                    47:bc:31:58:56:9b:22:ed:c0:81:da:06:c4:4e:0b:
                    c3:51:a1:3b:4d:f9:0e:53:44:50:7a:58:0d:27:ce:
                    af:e2:67:b7:04:80:b1:fa:a4:0f:be:2f:48:29:df:
                    50:43:24:03:da:88:17:c1:b1:83:39:ec:88:7a:2c:
                    24:6a:03:fb:fa:8f:63:40:a4:35:a3:2a:91:76:23:
                    36:80:20:16:7b:c8:d5:44:12:45:35:12:cd:1f:8a:
                    7c:a2:a7:42:67:e9:42:ed:4d:e2:84:e7:c3:01:49:
                    8f:06:2e:ca:3b:06:e8:be:6f:1c:65:b4:20:76:9f:
                    78:f4:ed:60:09:7e:f4:8c:9e:3d:21:c8:9c:68:dd:
                    8c:e8:79:a6:d8:06:0e:24:5e:e6:c9:f2:05:6f:19:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:8B:86:23:9D:AE:59:03:66:4A:66:04:94:AB:31:72:B0:A3:D0
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:c5:1d:12:5c:91:ed:06:4d:b7:c0:18:cc:12:7b:82:1b:
         4c:66:08:87:f0:5a:c9:fa:14:3e:fe:77:31:73:44:7e:66:05:
         41:e1:1b:22:d6:fe:69:b1:6b:80:5c:41:5c:66:b2:3e:ea:2b:
         fe:f5:1b:30:eb:cb:93:43:16:2b:e1:a3:f3:a3:80:7e:89:f3:
         a8:e4:9f:6e:e9:e7:06:3c:af:05:f9:6b:58:e2:d4:78:fe:20:
         07:79:54:01:38:cb:95:6c:4b:e7:d6:8c:c8:d4:a6:79:07:61:
         16:57:33:d6:ee:bc:82:81:fb:18:e1:32:2d:6d:cd:0b:1d:c9:
         db:4f:b9:25:4a:5c:4f:31:d4:82:9b:d2:0d:3d:c1:4f:34:3d:
         38:57:90:52:7f:81:fc:bc:ec:a1:80:0d:e8:84:11:99:dd:59:
         ac:9d:4d:36:4d:69:7b:26:42:1d:d8:c7:67:9d:53:d7:84:ec:
         ed:d7:5a:b6:f3:12:7a:e3:8b:e6:87:47:5b:c5:cf:b8:d7:c9:
         99:e7:6a:30:08:27:5b:37:da:22:7b:c0:f3:ee:32:bf:e4:ac:
         23:ee:09:cd:8c:ce:82:0b:f3:79:0c:64:e7:6b:08:76:fa:c1:
         df:cf:74:5a:20:a1:d1:8a:41:68:1d:8d:5d:e1:fd:aa:73:56:
         c8:e7:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:15 2025 by rpki-client