Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132302e302f32322d3232203d3e20323732303237.roa
File:                     3139302e39332e3132302e302f32322d3232203d3e20323732303237.roa (raw, json)
Hash identifier:          pYSOZmpz30Lyq1QC4GxjI9xoOnwkKOXc1AFXdBBqP2E=
Subject key identifier:   5F:8E:E3:1F:DD:EC:29:9E:66:50:B2:4D:A6:1F:7B:E7:9B:D9:05:54
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       20EE18744790297B28911BB833322A2FE88FE0EF
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132302e302f32322d3232203d3e20323732303237.roa
Signing time:             Mon 26 May 2025 10:55:00 +0000
ROA not before:           Mon 26 May 2025 10:50:00 +0000
ROA not after:            Mon 25 May 2026 10:55:00 +0000
asID:                     272027
IP address blocks:        190.93.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:18:74:47:90:29:7b:28:91:1b:b8:33:32:2a:2f:e8:8f:e0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: May 26 10:50:00 2025 GMT
            Not After : May 25 10:55:00 2026 GMT
        Subject: CN=5F8EE31FDDEC299E6650B24DA61F7BE79BD90554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:c2:93:ed:b1:71:c7:4e:bc:4f:c2:05:20:
                    40:7a:35:79:08:5c:1a:19:35:95:f3:16:4d:3f:60:
                    62:b7:7f:dc:df:c9:aa:6c:51:cc:f4:54:5f:c1:07:
                    88:3c:ce:31:a0:4f:d1:23:49:fd:a7:d2:47:dd:4e:
                    9a:a9:a7:cb:1f:a2:62:14:30:3a:71:74:c3:96:bc:
                    91:c3:21:90:d6:99:1d:41:7b:53:e3:93:fd:d7:bb:
                    47:fd:4f:18:42:3e:e2:5c:15:8c:77:83:95:ca:6c:
                    24:e0:11:70:61:24:10:d5:00:1a:74:8e:17:36:8b:
                    52:e7:54:1b:11:93:36:fd:1e:f8:a0:71:82:fa:f4:
                    e3:7f:5c:e6:ce:86:8e:49:87:85:d9:03:bd:74:a7:
                    c0:b5:f9:f7:02:ff:73:68:52:b8:62:6d:28:40:7e:
                    a3:ab:87:1c:25:41:d0:ad:24:3d:2f:5e:b3:d0:a8:
                    02:0d:f5:38:13:8d:01:8b:cd:59:0a:da:b0:ea:0a:
                    c1:3e:d1:d8:a2:ba:47:7a:c1:9b:cd:9c:b2:c4:bf:
                    94:b2:01:1c:ae:2d:67:d3:ff:fd:77:45:74:63:64:
                    43:9d:9d:3e:77:aa:6a:4e:20:bd:d6:bc:bb:b1:eb:
                    11:15:c8:6b:97:de:db:bb:72:49:ea:bf:12:e0:6c:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:E3:1F:DD:EC:29:9E:66:50:B2:4D:A6:1F:7B:E7:9B:D9:05:54
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132302e302f32322d3232203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:df:f5:ab:1a:f3:01:46:d8:54:9d:a9:69:a4:29:b7:ce:35:
         22:74:ee:27:cb:fb:b7:f0:2e:5f:83:26:57:20:52:8f:75:0f:
         dd:0e:3f:6c:7b:3d:15:fe:0a:1f:d3:00:f9:35:da:5a:21:e9:
         3b:4a:a5:3a:29:28:50:c7:6b:8f:b9:cb:c4:67:63:eb:b0:a1:
         9f:36:25:57:19:24:02:b1:63:8f:17:c6:d3:ef:ec:76:a5:47:
         cd:32:40:42:14:7f:3c:3a:cf:87:c3:85:67:a9:64:bb:84:2e:
         05:54:79:44:c2:27:47:61:31:fb:95:a5:31:71:45:61:0d:3f:
         75:7b:00:13:3c:3c:c8:10:11:1e:1d:35:8e:dc:9b:b0:46:9b:
         7e:d0:0b:c5:db:c6:ca:6d:82:32:ed:68:a4:24:73:85:cb:93:
         21:2e:59:76:14:bc:a4:c3:30:34:43:f4:c8:42:da:6a:3a:5a:
         3c:c9:be:13:fb:a2:11:d5:87:1c:17:6d:b3:98:aa:0e:88:4c:
         32:f1:15:dd:9e:db:96:7b:63:d6:be:3c:81:fd:fd:ab:71:26:
         4f:50:fb:a1:49:33:54:cb:4b:3a:af:f2:d0:20:5f:17:2f:2c:
         5a:59:ed:42:1a:10:e6:5b:1b:2a:2d:2a:3b:b8:a7:c1:51:5f:
         8e:4e:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:24:20 2025 by rpki-client