Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38372e302f32342d3234203d3e20323638313939.roa
File:                     3139302e39332e38372e302f32342d3234203d3e20323638313939.roa (raw, json)
Hash identifier:          nH8apej4qNKGKOArPAoPy8k21C91CoW67HS8hVAQvls=
Subject key identifier:   19:29:58:B4:8B:18:0F:35:9B:64:44:5D:34:89:3F:5D:5A:D0:40:D5
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2ADD2711873811733ACACC476A9D81DFFA987C94
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38372e302f32342d3234203d3e20323638313939.roa
Signing time:             Tue 04 Feb 2025 20:08:35 +0000
ROA not before:           Tue 04 Feb 2025 20:03:35 +0000
ROA not after:            Tue 03 Feb 2026 20:08:35 +0000
asID:                     268199
IP address blocks:        190.93.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dd:27:11:87:38:11:73:3a:ca:cc:47:6a:9d:81:df:fa:98:7c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:35 2025 GMT
            Not After : Feb  3 20:08:35 2026 GMT
        Subject: CN=192958B48B180F359B64445D34893F5D5AD040D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:b8:03:30:3c:b9:f5:7b:ee:38:c4:90:30:
                    8b:5b:6b:00:c3:fc:ea:9c:bc:9f:2d:b6:77:10:7a:
                    78:5a:f6:03:da:f3:b1:55:e4:33:1a:ff:b9:1f:74:
                    da:60:29:65:f8:38:b2:4a:56:0c:ea:0d:ae:d6:1e:
                    14:d8:77:b1:f2:10:2d:62:90:1d:6c:09:52:fa:fd:
                    1d:bd:2b:c7:7b:fe:1b:a5:05:8c:fd:19:b1:87:da:
                    5f:37:54:66:62:73:2c:2d:f0:4b:a4:1c:fa:70:8a:
                    a5:2f:1e:fa:a0:31:0c:24:c7:e3:b6:01:9e:5e:d6:
                    0c:44:6a:5a:46:c2:09:40:34:b1:b6:42:93:44:a0:
                    86:4c:6f:77:fb:f7:16:69:b5:10:a0:a5:ec:ad:bb:
                    7c:bc:a3:59:ca:ba:67:07:1e:5b:49:25:92:dc:51:
                    c9:7b:4c:2c:77:d1:f8:5f:02:69:8c:23:ac:50:57:
                    72:eb:0e:e2:bd:77:76:7d:80:22:79:39:73:60:a8:
                    c4:7e:3f:f0:0a:12:fd:e2:97:04:cd:1b:f0:0a:e7:
                    c2:28:40:04:d7:7b:df:7c:93:c5:c4:22:cf:07:9c:
                    18:c4:7d:5f:8a:c7:cc:69:cc:05:c8:69:01:79:cb:
                    0e:d0:e1:c7:3a:aa:7b:f8:97:21:2a:e0:da:90:a6:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:58:B4:8B:18:0F:35:9B:64:44:5D:34:89:3F:5D:5A:D0:40:D5
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38372e302f32342d3234203d3e20323638313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:f6:da:ed:ef:fe:e6:10:1b:6f:7e:8a:31:4a:7c:f9:cb:
         b0:54:87:f6:df:83:dd:76:39:10:6c:5f:62:b0:ef:65:b6:77:
         d9:6f:e2:7b:9a:33:e0:53:ec:34:59:f9:83:84:03:24:4d:b9:
         ac:31:4a:bb:7f:77:89:a1:88:7c:f5:43:25:14:46:56:ab:1f:
         a4:b2:cc:52:4f:cf:a7:c9:b5:5b:07:d5:f2:58:04:79:c9:24:
         50:43:96:14:3d:4d:35:d1:4a:a7:c1:db:0f:20:f7:d0:e1:aa:
         60:0e:5d:d9:38:c9:45:81:d9:9e:3f:4b:fc:5d:b4:39:79:f0:
         91:82:1c:f4:25:8d:0f:2e:1b:d2:0b:67:d7:ec:cb:f4:86:18:
         48:b6:6f:ee:cf:1f:5d:35:59:03:9d:97:36:ee:2c:b5:c6:0b:
         de:37:e7:d9:59:01:43:14:86:74:19:f9:f9:9a:6b:4e:6d:fe:
         ec:7a:38:86:b0:d7:84:88:31:80:b8:f8:45:64:08:dc:c3:11:
         b1:7d:06:10:6a:d3:a4:05:27:99:93:a5:b1:de:35:bb:36:8d:
         fd:bd:e5:af:86:aa:35:10:9e:04:95:20:a6:62:c2:6e:96:9f:
         ad:27:14:b6:9f:bc:e5:3f:a2:92:67:60:d9:90:25:9d:50:7c:
         bd:94:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:35:26 2025 by rpki-client