Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38362e302f32342d3234203d3e20323732343630.roa
File:                     3139302e39332e38362e302f32342d3234203d3e20323732343630.roa (raw, json)
Hash identifier:          xTZ5AdJkeIcuMvrSG/kB00zYSuhEAbAGf8b44dG6hFM=
Subject key identifier:   33:AC:DF:7A:C5:90:26:77:5D:3E:B6:22:C2:37:56:33:9B:8E:84:B8
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       292773FC5B8ADF4B13FCC1499E0D1391E618E4E7
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38362e302f32342d3234203d3e20323732343630.roa
Signing time:             Wed 18 Dec 2024 17:00:00 +0000
ROA not before:           Wed 18 Dec 2024 16:55:00 +0000
ROA not after:            Wed 17 Dec 2025 17:00:00 +0000
asID:                     272460
IP address blocks:        190.93.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:73:fc:5b:8a:df:4b:13:fc:c1:49:9e:0d:13:91:e6:18:e4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Dec 18 16:55:00 2024 GMT
            Not After : Dec 17 17:00:00 2025 GMT
        Subject: CN=33ACDF7AC59026775D3EB622C23756339B8E84B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:5d:df:b1:6c:1a:95:6f:7b:a9:d6:87:65:
                    52:79:17:26:f0:60:c1:fb:eb:0c:ce:96:57:6d:03:
                    25:b3:31:07:50:6f:81:77:3c:ac:71:46:05:5e:ab:
                    b1:21:34:dd:5d:b6:dc:cc:b4:3c:29:86:23:2d:7d:
                    5d:49:c4:c2:99:23:81:7a:5a:1d:0f:4d:08:22:37:
                    08:a9:e8:8c:10:76:70:82:a7:e7:04:1b:74:e7:e9:
                    ea:52:ac:d0:17:e0:5f:45:19:7d:9a:d9:df:61:13:
                    24:0b:69:03:c4:97:03:58:bb:3a:87:97:e5:ed:99:
                    f2:07:6b:33:f0:66:24:ef:8b:e5:53:4a:96:c9:46:
                    2d:c1:46:58:8f:d6:a9:2e:61:10:b3:4b:63:f1:68:
                    4a:30:d8:2c:da:bf:55:a5:ae:c3:3e:a6:67:c5:25:
                    db:51:08:35:80:92:8b:a2:8e:f0:90:30:80:b6:72:
                    2d:3a:21:87:34:12:ec:1b:41:54:c8:ef:b2:74:c4:
                    54:8d:41:52:ef:27:19:a0:28:6a:59:b2:07:9b:00:
                    af:b9:05:42:ae:f4:cd:94:a1:e0:91:2c:cd:9b:27:
                    51:09:52:09:2a:5b:fd:72:50:b0:75:3b:f2:6d:b8:
                    8c:80:a7:5a:b8:19:6c:e6:18:9b:11:0c:dd:5b:2b:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AC:DF:7A:C5:90:26:77:5D:3E:B6:22:C2:37:56:33:9B:8E:84:B8
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38362e302f32342d3234203d3e20323732343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:5c:7d:93:55:20:4e:1c:b8:62:50:a7:db:59:3b:d4:ca:
         58:f9:a2:9b:fb:5f:ca:e3:1c:19:cf:3a:d7:b3:1a:7f:32:94:
         5c:2f:6c:e9:05:0d:a9:77:f9:c0:45:00:f1:6f:35:2d:d2:d6:
         05:6a:d4:ab:8e:4d:9d:2d:2f:42:43:89:ef:06:ff:4d:8d:5f:
         52:5a:61:53:a2:82:d8:c2:88:76:e4:36:ed:fc:cb:d5:5c:71:
         a9:31:ca:05:de:da:89:b7:74:c2:56:19:6c:14:c5:86:0f:a2:
         1b:63:79:32:66:ba:39:90:41:88:2c:fe:55:cf:9f:6a:e2:3f:
         b7:91:80:b4:97:bf:f8:b8:63:0e:04:78:29:c2:fa:31:67:71:
         d2:0a:86:69:86:0f:d7:2d:5a:31:b5:fc:88:68:8f:a7:8d:0f:
         ba:a9:43:c6:47:76:55:a7:fd:ae:90:f0:b3:27:aa:5a:b7:f2:
         fd:99:1e:91:43:b1:0b:bd:f2:6e:11:54:fd:89:8b:4b:ea:3b:
         27:25:32:0d:11:7d:d4:87:07:ca:ad:d5:ef:37:db:61:d7:a7:
         c8:01:5c:8d:3c:09:1c:ef:64:30:dd:b2:9f:a1:1a:7c:2a:8d:
         b1:06:76:eb:16:d0:ef:dc:77:ae:0d:8d:5f:5c:a2:1a:28:83:
         77:f0:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:36 2025 by rpki-client