Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e203434393437.roa
File:                     3139302e39332e39332e302f32342d3234203d3e203434393437.roa (raw, json)
Hash identifier:          d0Cwb/ASqUbZPFPXG202p9LDScKM8t/8BIKp1RJMII4=
Subject key identifier:   D0:59:1E:97:A6:CB:F9:1B:72:15:E0:50:10:5F:05:52:08:0E:E6:78
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       1056AF9796725C6C52DE84EE7208B37DB2FD1FC1
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e203434393437.roa
Signing time:             Mon 01 Sep 2025 15:42:26 +0000
ROA not before:           Mon 01 Sep 2025 15:37:26 +0000
ROA not after:            Mon 31 Aug 2026 15:42:26 +0000
asID:                     44947
IP address blocks:        190.93.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:56:af:97:96:72:5c:6c:52:de:84:ee:72:08:b3:7d:b2:fd:1f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep  1 15:37:26 2025 GMT
            Not After : Aug 31 15:42:26 2026 GMT
        Subject: CN=D0591E97A6CBF91B7215E050105F0552080EE678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:2d:e4:84:b2:f0:d3:b7:66:9b:c8:60:2a:
                    91:9d:70:69:e1:f4:83:bc:eb:a0:e1:41:b6:98:59:
                    1c:14:b7:ae:f2:60:fc:d3:10:55:68:f9:13:39:11:
                    e5:5a:4e:0f:05:ae:31:69:4d:6e:9f:3d:90:61:df:
                    e0:35:85:67:d1:ac:27:60:fe:3e:54:4a:8e:06:bd:
                    bd:b7:46:5b:35:6c:95:98:7a:ea:54:a9:87:10:f2:
                    f9:51:7a:6b:aa:a6:95:6d:38:11:8e:70:34:1d:b2:
                    a1:40:01:a1:8e:61:38:bd:36:22:29:1a:2e:89:37:
                    5b:f0:d2:48:40:6f:82:00:54:af:03:73:7a:4e:60:
                    53:46:4e:ec:e5:3d:3d:97:e8:1a:44:d4:52:03:9c:
                    ff:f2:c3:ca:64:7f:07:08:2d:29:99:c9:49:08:ce:
                    2e:a9:34:87:91:39:a3:50:31:72:00:16:d7:4a:1d:
                    e3:ac:51:06:a3:f9:0f:32:90:56:c9:5e:2c:fa:85:
                    74:29:73:be:75:36:8c:d6:43:2d:49:1c:95:d9:b8:
                    22:de:46:e7:79:e0:62:e1:fa:3e:2b:62:b2:72:3e:
                    ff:d4:c1:b2:29:a2:69:78:8f:78:95:61:8b:78:6a:
                    85:eb:a4:25:5f:7d:aa:02:58:14:de:79:f4:83:2d:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:1E:97:A6:CB:F9:1B:72:15:E0:50:10:5F:05:52:08:0E:E6:78
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e203434393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ce:b9:dc:88:f5:24:6c:84:ce:4a:a6:e0:03:5c:fd:63:8c:
         db:cd:c4:e8:35:dd:4a:c6:c5:05:77:38:f1:14:03:e4:08:31:
         23:65:6a:de:07:fb:d7:11:c8:7d:64:f6:b9:59:69:de:fd:5f:
         9f:f7:aa:6c:b0:22:7a:9a:ee:d8:45:0b:65:a1:e4:85:11:66:
         9f:e3:e2:dc:f2:61:eb:66:c9:50:a8:c9:0e:80:50:c7:04:db:
         8e:6d:f1:4b:91:45:44:1d:7d:69:71:7a:0b:f1:0b:b9:a9:1e:
         e3:ee:35:c6:ea:04:61:43:02:a0:1d:58:5a:b6:18:04:8b:29:
         88:2c:90:24:65:4b:05:6b:42:dd:da:36:5a:1d:cd:43:6c:bf:
         98:b0:24:61:17:0b:b9:fe:5f:eb:ff:5d:15:ed:08:76:6e:8e:
         5e:95:24:67:1e:79:ba:65:05:3f:c9:d3:c4:a4:5b:b9:07:40:
         c7:fd:7c:f1:f0:dc:7a:7a:99:a2:05:ba:16:6f:de:1c:41:92:
         3b:18:92:d8:6f:bc:34:cf:97:27:d3:a3:79:5a:b1:e9:80:42:
         42:6a:2b:3a:61:83:b8:3d:f2:4f:46:ea:e4:5e:35:26:b0:e3:
         f9:ea:35:87:76:1d:a0:96:9d:68:ee:d8:77:56:d9:8d:71:a9:
         81:89:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 20:27:07 2025 by rpki-client