Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131392e302f32342d3234203d3e20323132323338.roa
File:                     3139302e39332e3131392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          7aqReogXOT5JfR9lfivzo3KHv9wOwRhzTtLRFHOCqqw=
Subject key identifier:   1D:E5:14:28:6B:37:09:79:F9:2A:47:ED:82:C3:AD:B3:C8:AB:F6:11
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7FC5C0B6AA290F8DBF4D5DDF79404C9D89D9E92A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131392e302f32342d3234203d3e20323132323338.roa
Signing time:             Thu 03 Apr 2025 15:35:00 +0000
ROA not before:           Thu 03 Apr 2025 15:30:00 +0000
ROA not after:            Thu 02 Apr 2026 15:35:00 +0000
asID:                     212238
IP address blocks:        190.93.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c5:c0:b6:aa:29:0f:8d:bf:4d:5d:df:79:40:4c:9d:89:d9:e9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Apr  3 15:30:00 2025 GMT
            Not After : Apr  2 15:35:00 2026 GMT
        Subject: CN=1DE514286B370979F92A47ED82C3ADB3C8ABF611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:71:7f:39:51:2d:d7:dc:c8:d7:f9:89:5e:
                    c8:0f:42:eb:c9:8b:88:21:5a:ab:43:c7:ba:89:4f:
                    f3:16:92:04:77:3f:2d:ce:27:43:f4:87:70:91:89:
                    87:4d:3b:42:12:e5:29:4d:09:91:13:70:04:64:21:
                    80:d9:de:c1:35:af:f4:71:bb:68:a0:3c:ce:d4:7f:
                    c8:8a:0e:75:4b:9b:20:c3:f4:9f:a8:e3:98:6c:15:
                    d7:b5:dd:7f:ea:cb:b6:a9:35:45:6b:82:1e:9c:0c:
                    07:78:fe:f2:c6:de:47:61:e1:d0:39:6c:8f:8f:3b:
                    bb:41:2d:65:8d:be:99:10:1d:30:79:1c:27:7c:cc:
                    c5:05:fa:ba:69:d9:9d:32:c9:9e:63:4c:5c:bd:17:
                    12:be:c0:1c:90:38:db:cb:8c:52:b2:69:82:8e:7f:
                    98:58:83:3a:e4:94:97:de:24:57:fb:91:75:d5:1f:
                    91:ac:74:d3:0d:82:ed:23:08:c3:3b:94:be:9f:63:
                    b2:07:7f:cf:31:e6:18:cf:3f:1d:e2:a5:0a:64:7b:
                    58:6e:69:2d:37:71:c7:32:e3:f0:55:85:a6:2f:f5:
                    f2:c4:dd:0c:ac:3a:7c:a5:1b:d4:9d:46:57:4b:e5:
                    3b:c3:2c:de:8d:37:9b:cc:98:ad:60:30:36:c9:ca:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:14:28:6B:37:09:79:F9:2A:47:ED:82:C3:AD:B3:C8:AB:F6:11
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:24:61:41:4e:0d:d1:e6:75:4b:68:2b:dd:41:23:a2:10:
         b6:ac:7a:83:b7:dd:d9:24:ad:20:57:ff:8d:bb:14:d1:6b:c9:
         31:ac:a5:16:9b:31:fc:47:0a:17:a2:b2:c7:b1:42:32:26:7b:
         f7:5f:26:e2:22:8d:18:6e:53:27:b2:50:a8:dc:9a:d1:6f:75:
         87:5e:c1:4d:b2:78:2c:4d:a4:86:87:aa:2a:f6:17:f9:48:e7:
         71:73:37:b1:66:b2:6d:b7:2f:d5:e9:be:a6:b0:6b:6a:c6:9b:
         df:22:79:a5:5b:ba:4a:20:ec:7f:d8:0f:9c:37:2b:55:5a:c8:
         3a:d9:02:22:13:af:61:17:a9:a6:f9:1a:6c:31:32:e0:13:38:
         b0:f3:aa:4d:1e:44:7b:9f:ee:35:17:5f:13:22:a6:7e:76:02:
         ec:62:9e:eb:b1:7d:0f:12:6f:cb:ac:76:8f:ff:6f:48:30:b2:
         56:6b:dd:3f:df:59:21:4d:b8:8b:71:0f:14:4c:62:43:cc:75:
         94:a9:92:e3:e7:1c:45:ac:bd:94:33:de:53:cb:69:50:89:41:
         c4:0a:47:e4:ed:a0:93:5b:52:4f:1c:34:fa:ad:72:67:19:16:
         5c:9d:c8:49:12:37:67:be:38:46:31:16:cd:4f:bc:81:f4:75:
         b0:a7:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:05:26 2025 by rpki-client