Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37302e302f32342d3234203d3e20313939343837.roa
File:                     3139302e39332e37302e302f32342d3234203d3e20313939343837.roa (raw, json)
Hash identifier:          DziK8T1+L//TCx4vizNwkh+GoeV5DC2d9voTHCpQXxo=
Subject key identifier:   BC:94:49:BC:36:29:F2:EE:16:65:75:66:F1:29:43:37:DE:7C:A2:92
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       5729E13CDECCB8878DA272130899737800C8EF05
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37302e302f32342d3234203d3e20313939343837.roa
Signing time:             Tue 11 Feb 2025 11:20:00 +0000
ROA not before:           Tue 11 Feb 2025 11:15:00 +0000
ROA not after:            Tue 10 Feb 2026 11:20:00 +0000
asID:                     199487
IP address blocks:        190.93.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:e1:3c:de:cc:b8:87:8d:a2:72:13:08:99:73:78:00:c8:ef:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb 11 11:15:00 2025 GMT
            Not After : Feb 10 11:20:00 2026 GMT
        Subject: CN=BC9449BC3629F2EE16657566F1294337DE7CA292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:24:dd:a6:3d:c6:47:47:40:e7:f8:b4:29:
                    04:d6:30:1c:5e:0b:89:b8:a9:b3:84:86:f3:8f:c0:
                    f2:92:f8:a0:40:72:b2:f1:08:73:64:6a:0a:ae:9c:
                    c2:d9:1d:35:b4:fa:d6:d1:73:16:1c:38:88:9d:e6:
                    42:45:09:1f:9b:98:24:93:e8:c9:90:81:43:e9:a3:
                    7e:f9:59:ab:d1:15:15:d0:6b:c8:73:8b:6d:99:64:
                    16:ce:b4:4e:15:5a:07:71:e9:94:8a:0a:b8:85:78:
                    f8:5c:d4:c3:1f:d7:c2:4e:74:dc:a1:5b:c7:f9:b4:
                    84:fd:1f:d0:0e:65:c2:2d:30:db:72:62:21:4d:5c:
                    1e:26:dd:a8:2e:2f:c2:31:ea:a5:57:d9:31:c0:a1:
                    7e:e2:51:42:5f:35:25:cc:be:1f:b3:64:cc:2a:95:
                    fd:a3:b2:f9:a3:4d:6e:5a:1d:d2:82:26:2d:86:ca:
                    a5:95:27:14:3d:5b:0d:9d:e9:4e:e8:e0:35:ab:f8:
                    c2:c8:55:52:7a:5e:c3:75:38:23:a8:58:f3:38:95:
                    a5:72:5c:00:41:80:7b:a9:48:0d:36:0b:3d:c4:53:
                    d9:18:a3:6a:10:88:ad:5f:5b:dc:02:38:2a:28:0f:
                    3b:f0:e9:b4:5f:0d:f3:ab:0e:aa:0e:3b:1a:6a:70:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:94:49:BC:36:29:F2:EE:16:65:75:66:F1:29:43:37:DE:7C:A2:92
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37302e302f32342d3234203d3e20313939343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:47:64:f8:f5:73:1b:8d:d9:bc:45:52:40:8d:2a:07:48:
         d1:10:03:3c:bf:58:9b:31:81:69:ad:55:73:d3:98:6b:78:ca:
         61:83:6b:19:bc:5c:12:06:ae:59:3b:b2:85:0c:2e:e7:ae:b4:
         64:15:24:30:6a:bb:22:f5:1a:e9:45:93:01:f8:01:ca:c7:35:
         6b:47:25:3d:f7:47:ca:60:51:7d:f8:86:db:07:25:c1:dd:37:
         1a:ed:56:00:ca:eb:3c:12:c1:f4:41:0b:11:0f:cc:3b:c9:83:
         e8:3c:6e:fe:a6:11:1b:e3:d6:2d:4a:4e:4b:1d:cf:6e:67:be:
         ae:1c:c2:3f:7a:d8:0e:9e:bb:5f:0f:b2:0b:b9:79:da:53:d6:
         84:51:08:fa:5a:ae:85:74:71:de:d9:90:68:1e:be:ce:31:a6:
         5a:fb:f0:2f:92:1d:b1:73:ba:6f:c5:f4:f4:36:ed:79:45:58:
         5f:4d:73:f1:40:0d:98:72:4f:35:5b:c5:a8:a3:bb:47:0a:83:
         b5:3b:fe:ff:a0:37:d7:23:3d:f3:6d:b7:25:0c:a4:41:af:3b:
         ce:c1:b2:89:2f:8b:e6:1a:25:2a:16:d2:82:d2:69:d5:0f:ee:
         d4:fe:b7:56:2c:f8:4d:40:a3:cc:1e:a7:3c:03:19:27:c9:6c:
         8a:2a:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:41 2025 by rpki-client