Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38392e302f32342d3234203d3e20323635363232.roa
File:                     3139302e39332e38392e302f32342d3234203d3e20323635363232.roa (raw, json)
Hash identifier:          ZR1Ll/OO58TOd8sf9wUJlONBWOenjpVdf1SzAium+N0=
Subject key identifier:   78:D9:5A:C1:CC:1A:8E:E4:BA:6A:B5:61:37:08:BA:66:AA:59:1B:1E
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       23D49359FC289B35C57837CB7DC0DA8B62B01C4C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38392e302f32342d3234203d3e20323635363232.roa
Signing time:             Wed 26 Mar 2025 13:12:55 +0000
ROA not before:           Wed 26 Mar 2025 13:07:55 +0000
ROA not after:            Wed 25 Mar 2026 13:12:55 +0000
asID:                     265622
IP address blocks:        190.93.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d4:93:59:fc:28:9b:35:c5:78:37:cb:7d:c0:da:8b:62:b0:1c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar 26 13:07:55 2025 GMT
            Not After : Mar 25 13:12:55 2026 GMT
        Subject: CN=78D95AC1CC1A8EE4BA6AB5613708BA66AA591B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1f:e2:d8:88:45:04:9e:21:68:a6:56:de:1a:
                    d4:55:ab:fe:5d:c9:27:de:0e:2d:05:d1:81:65:49:
                    1d:b9:c1:98:15:ea:18:5e:4e:f0:b3:09:4b:16:a1:
                    44:0d:82:f6:a7:46:c2:43:af:e8:87:c8:bc:d4:97:
                    66:61:38:0a:ae:d5:29:83:71:a1:c5:07:8b:22:4e:
                    07:87:4d:7c:14:99:56:9e:ca:49:22:88:aa:a5:4a:
                    fe:32:a8:83:87:f4:eb:9d:77:e7:4a:8d:45:fc:30:
                    5e:0f:fd:9f:b4:8b:a6:87:f3:95:a2:4e:ce:46:d8:
                    13:9c:08:32:de:ab:5d:e4:d9:aa:61:65:d4:2a:b0:
                    24:4b:38:12:1f:6f:7a:fe:a9:f0:d3:9d:c0:6d:10:
                    9e:a8:ee:cb:19:41:4c:44:75:00:4d:7c:d4:65:cb:
                    0b:12:c1:a7:f4:2a:fa:f2:1f:0f:85:2e:27:5f:fe:
                    2a:c4:a5:8b:3b:e4:48:f1:77:fb:c3:4e:2b:b5:72:
                    bb:f2:2e:55:a6:0c:e3:a5:80:be:95:cd:8c:ff:70:
                    2b:c6:09:00:72:09:e8:db:2b:64:9c:fd:95:6d:2a:
                    cf:e4:12:8b:bb:83:6c:2b:3a:ac:4e:48:fb:e3:f8:
                    1b:bb:31:06:f1:31:e5:34:2d:f9:b7:86:e0:b1:33:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D9:5A:C1:CC:1A:8E:E4:BA:6A:B5:61:37:08:BA:66:AA:59:1B:1E
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38392e302f32342d3234203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:81:c8:84:0f:e1:b0:b8:cf:51:cc:89:ed:7f:cc:0e:8e:60:
         94:c4:40:07:ec:42:7f:03:e4:bc:a5:78:cf:e8:4b:8e:c9:46:
         e6:77:be:cb:a1:1f:e6:cd:bf:65:58:ab:62:ad:3e:9c:6b:22:
         d7:80:d2:38:3f:67:ab:63:ba:46:5e:fc:6a:cc:39:7e:3a:0f:
         c4:aa:32:cb:8c:fc:67:f2:d7:d8:3e:a5:6d:d1:4a:db:27:72:
         93:e5:ad:15:5d:49:5e:9e:38:d2:4a:35:30:80:58:7b:a6:cf:
         be:03:93:64:59:55:6e:ca:2d:73:6f:66:d5:b0:28:0c:05:ad:
         ee:bd:36:dd:90:e4:9d:70:e9:61:e6:37:5f:fd:15:52:ee:d0:
         6b:e0:9c:25:48:cb:f7:e9:4f:03:95:73:3e:f5:98:64:fb:11:
         a1:9d:ff:24:1c:79:cf:9d:df:b6:1b:70:ba:e7:42:67:23:68:
         65:bb:71:07:57:5e:e3:e1:c9:fd:12:ee:6b:90:c8:56:8e:4a:
         ed:42:1f:5c:46:05:74:85:70:f9:fa:10:00:07:63:ff:db:a6:
         3f:fd:7b:2e:fd:b7:9a:5a:e7:b8:22:82:61:4b:d5:d0:ab:9f:
         cc:88:f4:c4:97:7b:8d:bf:c4:dd:79:7a:53:5f:fc:0f:4d:02:
         81:81:5e:f0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI9STWfwomzXFeDfLfcDai2KwHEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAzMjYxMzA3NTVaFw0yNjAzMjUxMzEyNTVaMDMxMTAvBgNV
BAMTKDc4RDk1QUMxQ0MxQThFRTRCQTZBQjU2MTM3MDhCQTY2QUE1OTFCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxH+LYiEUEniFoplbeGtRVq/5d
ySfeDi0F0YFlSR25wZgV6hheTvCzCUsWoUQNgvanRsJDr+iHyLzUl2ZhOAqu1SmD
caHFB4siTgeHTXwUmVaeykkiiKqlSv4yqIOH9Oudd+dKjUX8MF4P/Z+0i6aH85Wi
Ts5G2BOcCDLeq13k2aphZdQqsCRLOBIfb3r+qfDTncBtEJ6o7ssZQUxEdQBNfNRl
ywsSwaf0KvryHw+FLidf/irEpYs75Ejxd/vDTiu1crvyLlWmDOOlgL6VzYz/cCvG
CQByCejbK2Sc/ZVtKs/kEou7g2wrOqxOSPvj+Bu7MQbxMeU0Lfm3huCxM1jLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUeNlawcwajuS6arVhNwi6ZqpZGx4wHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzgzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM2MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dWTAN
BgkqhkiG9w0BAQsFAAOCAQEAiIHIhA/hsLjPUcyJ7X/MDo5glMRAB+xCfwPkvKV4
z+hLjslG5ne+y6Ef5s2/ZVirYq0+nGsi14DSOD9nq2O6Rl78asw5fjoPxKoyy4z8
Z/LX2D6lbdFK2ydyk+WtFV1JXp440ko1MIBYe6bPvgOTZFlVbsotc29m1bAoDAWt
7r023ZDknXDpYeY3X/0VUu7Qa+CcJUjL9+lPA5VzPvWYZPsRoZ3/JBx5z53fthtw
uudCZyNoZbtxB1de4+HJ/RLua5DIVo5K7UIfXEYFdIVw+foQAAdj/9umP/17Lv23
mlrnuCKCYUvV0KufzIj0xJd7jb/E3Xl6U1/8D00CgYFe8A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:46 2025 by rpki-client