Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20323732313439.roa
File:                     3139302e39332e3132352e302f32342d3234203d3e20323732313439.roa (raw, json)
Hash identifier:          l0wXowhIBEPHrltshefq8FoB3ecFOaKqdntTupSKdv8=
Subject key identifier:   A8:50:A7:6B:08:EC:CD:95:86:9B:04:EC:44:68:69:9F:5C:C2:3D:5F
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       486EEE6117E0B89CC01A98848646DFB7A423B3E1
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20323732313439.roa
Signing time:             Fri 18 Jul 2025 11:10:00 +0000
ROA not before:           Fri 18 Jul 2025 11:05:00 +0000
ROA not after:            Fri 17 Jul 2026 11:10:00 +0000
asID:                     272149
IP address blocks:        190.93.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6e:ee:61:17:e0:b8:9c:c0:1a:98:84:86:46:df:b7:a4:23:b3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 18 11:05:00 2025 GMT
            Not After : Jul 17 11:10:00 2026 GMT
        Subject: CN=A850A76B08ECCD95869B04EC4468699F5CC23D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:de:47:0a:94:b0:4d:b5:68:f9:7d:ac:c4:74:
                    1b:6f:14:92:df:7a:48:71:99:46:ba:8b:43:ed:84:
                    b2:53:9c:8c:92:b1:62:41:70:36:b4:3c:f1:40:4a:
                    45:85:e7:25:8a:85:e5:81:6c:d7:57:ba:bc:76:f6:
                    90:bd:bf:fa:76:85:69:98:e7:9b:6b:bb:c3:6d:9e:
                    52:9e:a5:81:04:4d:70:5a:89:21:a5:0f:4c:e4:d0:
                    45:99:6d:15:6f:9f:2f:d3:d5:e6:23:20:8a:40:31:
                    35:f8:d9:ae:e1:08:d4:98:8a:fc:cc:51:99:df:bb:
                    d1:3b:fa:dd:4c:ec:2c:b5:a3:0d:0d:c6:f7:80:a4:
                    29:48:1c:cd:4d:16:4a:12:46:80:11:a6:99:43:be:
                    db:4d:dd:a6:8e:12:10:8d:1d:19:b2:40:7a:c1:2b:
                    67:9f:a4:c3:0c:2e:78:3c:66:d2:86:33:31:fb:4d:
                    04:ef:f2:f1:28:96:b8:62:7a:f7:4d:e5:b9:79:51:
                    a0:04:3f:06:bd:18:8b:e5:e9:21:c6:8a:f9:8c:3f:
                    f4:26:ac:33:44:35:c9:59:dd:92:88:41:7b:cf:6e:
                    58:a3:cd:44:5f:a7:16:39:5a:ae:11:86:75:d6:fb:
                    c5:68:43:10:6e:36:72:84:92:3d:d4:3b:98:d6:ef:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:50:A7:6B:08:EC:CD:95:86:9B:04:EC:44:68:69:9F:5C:C2:3D:5F
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20323732313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:42:63:01:7f:ac:d3:64:79:fb:a7:bc:9f:e5:8f:4b:0f:94:
         08:34:64:58:5b:6a:9a:15:6c:36:33:47:fd:24:08:8b:2a:18:
         7f:00:2a:00:54:aa:6b:d4:37:db:ad:7c:1e:74:55:51:7c:64:
         83:65:d7:5c:32:d9:d6:51:7c:f6:12:77:dc:84:52:c6:e9:c6:
         16:1b:12:65:0c:61:0f:85:5b:14:bc:55:c1:a9:9b:94:d3:df:
         b2:c5:b2:6c:a4:09:e5:0f:35:fc:d6:75:6a:d0:b2:27:bb:15:
         cd:e3:63:13:1d:bb:1d:1d:10:b8:2e:c2:9b:09:aa:be:a6:89:
         57:ec:be:9f:75:59:c2:94:22:f9:77:c8:9c:86:7f:07:91:40:
         e8:7f:fd:57:e5:c8:13:4b:32:d1:20:fb:52:aa:4d:ca:1c:5e:
         b6:fb:eb:46:15:2b:03:1e:22:19:23:79:c9:15:37:5e:20:00:
         dd:b6:79:e2:86:ec:98:c6:1f:cc:b5:ca:a4:fe:11:7f:ba:cd:
         12:a4:dd:49:d8:e9:73:1f:51:8f:a5:2b:e0:ee:f3:83:1d:68:
         63:59:db:65:ad:0e:45:14:be:51:55:e5:df:8f:f5:b3:cc:e6:
         be:2c:3e:6a:1b:52:75:9e:d0:07:92:29:94:13:4b:f4:cd:f0:
         75:cb:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:48:37 2025 by rpki-client