Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132372e302f32342d3234203d3e2039333034.roa
File:                     3139302e39332e3132372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          lc47dL5dcMG4x2tlnAtlPOPmedCTwlxYnZC5L1baPDU=
Subject key identifier:   B3:D8:BE:2B:D4:B7:A2:53:DA:38:CF:DA:7F:BB:E4:28:48:A9:57:88
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       5E331E40403840F7BA9D3BF18BFDA67A5B3A6E84
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132372e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 01 Jun 2025 13:30:00 +0000
ROA not before:           Sun 01 Jun 2025 13:25:00 +0000
ROA not after:            Sun 31 May 2026 13:30:00 +0000
asID:                     9304
IP address blocks:        190.93.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:33:1e:40:40:38:40:f7:ba:9d:3b:f1:8b:fd:a6:7a:5b:3a:6e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun  1 13:25:00 2025 GMT
            Not After : May 31 13:30:00 2026 GMT
        Subject: CN=B3D8BE2BD4B7A253DA38CFDA7FBBE42848A95788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:40:7e:f5:3d:81:c7:6f:c5:40:f4:10:43:
                    d9:ae:8a:21:b3:3f:c6:22:75:5a:80:ec:d1:a2:a6:
                    ce:a3:35:de:f6:96:77:c4:ce:19:09:a3:27:17:c9:
                    7d:36:1d:32:3f:74:a4:1b:c9:4d:82:d3:7a:7c:b8:
                    47:50:22:71:c0:7d:c5:f0:0c:32:12:47:18:63:56:
                    13:35:de:f3:28:f3:76:49:86:a6:53:05:5b:96:7b:
                    52:97:7b:eb:57:5b:44:b8:f1:35:41:b7:0c:b1:f1:
                    c2:27:bf:d0:21:69:22:81:7b:1e:17:20:f7:e0:e5:
                    e1:01:39:69:b6:49:e7:18:b8:c3:5a:32:43:58:dc:
                    eb:99:de:f9:dd:ec:e1:76:67:7a:95:35:2f:31:6c:
                    a5:bd:33:3b:18:6b:f1:4c:0d:c5:a9:4c:b1:a3:6b:
                    63:e1:d8:97:b3:b6:a4:02:f3:10:7c:43:37:db:18:
                    2d:7c:02:e5:f2:4b:41:e8:e0:c5:dc:0e:14:2c:5b:
                    1f:62:c9:ab:71:f2:b1:3a:86:78:c5:d6:e6:eb:85:
                    0c:4b:55:b7:4b:be:c1:1f:ff:6d:c0:49:12:69:1c:
                    f9:1d:f6:b2:12:b8:77:8c:a9:2a:9c:55:8e:31:c7:
                    f2:ed:0d:42:bf:3f:2c:28:c4:15:5c:6b:e1:16:fa:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:BE:2B:D4:B7:A2:53:DA:38:CF:DA:7F:BB:E4:28:48:A9:57:88
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:03:a1:49:cf:1f:79:91:b4:6d:de:0b:98:0c:66:b3:cd:d4:
         8f:c6:1e:81:14:d8:4a:e2:7b:48:d2:83:91:9a:d2:2c:de:32:
         d9:2f:99:df:e8:2b:cd:e0:a3:f3:99:99:a1:11:ca:6d:e3:5f:
         e2:e2:d2:74:b4:2d:d0:05:24:9d:8e:e3:a8:28:cf:e8:0c:da:
         a5:7f:e6:84:f4:7f:08:bf:2c:94:02:a5:0d:da:6d:78:2e:c3:
         c2:e8:e9:31:1e:29:49:51:fe:56:06:d3:59:47:64:ad:2e:f1:
         22:1d:a7:40:36:4e:e7:ce:7e:3b:22:68:8f:dd:7b:e7:d9:f0:
         38:ba:fa:0c:07:a0:45:19:44:53:a6:cb:93:80:43:07:50:a5:
         fb:25:a9:31:f5:fa:6c:5a:39:b6:01:38:af:f4:df:80:d0:2e:
         bc:6b:5a:23:ef:ef:04:f3:4d:af:86:14:ac:b4:19:c6:c1:75:
         24:8e:1a:af:df:34:ee:5c:14:6b:84:39:7a:c0:f3:b7:ee:82:
         d5:71:63:87:c0:93:e0:bf:e6:44:04:3c:9f:6a:2b:01:15:c6:
         4c:46:81:46:85:d5:96:74:01:57:3a:77:dc:a9:78:4b:aa:b8:
         59:c9:c6:d9:d9:82:9b:57:55:1f:f0:6c:3d:39:62:33:98:7f:
         80:8a:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:34:18 2025 by rpki-client