Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e352e302f32342d3234203d3e20323734303038.roa
File:                     3139302e39332e352e302f32342d3234203d3e20323734303038.roa (raw, json)
Hash identifier:          MMesoWNxYAtDA9d/JWILrVYbW1sGkEltfA/TIq0dwGc=
Subject key identifier:   71:9D:85:BD:57:C0:1E:C0:7E:00:90:A9:21:98:6A:CD:FA:02:16:2C
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       32003AC8697F29F1FD0A9A64144554658C3D16F2
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e352e302f32342d3234203d3e20323734303038.roa
Signing time:             Thu 06 Feb 2025 19:55:00 +0000
ROA not before:           Thu 06 Feb 2025 19:50:00 +0000
ROA not after:            Thu 05 Feb 2026 19:55:00 +0000
asID:                     274008
IP address blocks:        190.93.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:3a:c8:69:7f:29:f1:fd:0a:9a:64:14:45:54:65:8c:3d:16:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  6 19:50:00 2025 GMT
            Not After : Feb  5 19:55:00 2026 GMT
        Subject: CN=719D85BD57C01EC07E0090A921986ACDFA02162C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:14:f3:a8:e8:ee:cf:bc:b6:ad:a5:68:cd:
                    79:52:24:a8:8e:56:28:02:43:e5:f6:3a:08:44:93:
                    47:28:0c:55:89:29:cb:70:e5:9c:ed:86:18:9e:b0:
                    6d:34:85:bb:4f:b8:e1:a9:a9:4f:a5:41:84:a5:c6:
                    76:10:38:6c:10:01:53:23:fc:55:ca:c8:6c:8f:ab:
                    b5:84:f2:5a:dc:6a:3c:0a:30:1c:69:3a:9d:1c:7f:
                    20:61:d5:c1:6a:db:0d:0f:d6:d5:f6:a4:41:fb:ec:
                    51:a8:45:3a:be:c4:03:8e:99:fa:d6:c6:c7:cd:a8:
                    1f:e0:ff:67:fb:ce:50:dc:a5:d1:f8:e7:52:30:8d:
                    81:ed:41:d6:65:5f:40:bd:97:70:88:7b:48:5a:db:
                    ca:57:22:1e:22:99:9e:9e:fb:f9:95:12:c3:ae:40:
                    e2:f6:26:1d:55:65:08:e7:87:1d:18:8d:67:2f:0f:
                    b6:db:c6:95:d8:75:e0:92:7b:9c:4e:1c:13:05:55:
                    3b:8a:ae:aa:ab:b9:16:ae:17:30:a3:82:f4:48:ed:
                    be:a5:ab:52:56:43:d0:b1:a7:1a:68:07:cf:39:5a:
                    98:69:7e:22:05:a9:4e:6d:0d:11:61:e1:a3:5b:1f:
                    74:3a:c0:d7:6e:eb:09:93:29:e3:6f:99:65:38:a0:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9D:85:BD:57:C0:1E:C0:7E:00:90:A9:21:98:6A:CD:FA:02:16:2C
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e352e302f32342d3234203d3e20323734303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:16:7e:00:6a:5a:7b:e8:db:47:d8:bf:3f:69:9a:77:dd:
         1a:fa:ba:27:08:70:f0:ae:45:fd:6b:b6:85:4a:b0:21:e3:26:
         df:bb:fd:31:96:ad:c3:c6:70:c4:f6:ce:3a:d4:b5:70:ba:14:
         e8:93:ce:66:45:d3:25:78:98:3b:e3:21:67:8f:48:89:21:b1:
         0d:70:e9:71:47:6e:ea:d8:a0:e4:4f:0f:9a:31:63:d8:a2:56:
         2a:3e:20:70:24:49:49:63:a7:9e:4f:a7:02:f6:81:43:69:3e:
         6e:ec:5a:4c:61:8a:db:c8:a4:88:14:9c:62:6f:15:15:a3:b7:
         9c:2a:74:32:96:96:92:82:c7:16:70:18:f0:22:98:49:57:53:
         b3:b9:26:d4:72:90:e3:c2:12:18:50:00:30:91:03:f3:de:f6:
         40:24:ca:fa:b5:c9:83:5e:4e:c6:07:f7:de:27:51:52:9c:58:
         d4:38:5e:df:26:75:8f:0d:f9:46:e0:46:de:ac:3b:82:dd:08:
         86:13:dc:80:2f:b6:6d:8a:e7:72:52:2a:33:c2:00:91:54:f3:
         91:79:d1:24:d8:88:82:95:00:31:a7:fd:c9:20:5e:6d:77:a0:
         6a:6b:47:35:28:46:94:03:2f:fa:1a:b0:c9:bf:b7:20:b9:ae:
         36:08:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:17 2025 by rpki-client