Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38342e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e38342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          fGZVcxl1yUvZU5rWbuA7fOKChOUn14c0Wa4wnvRIi/M=
Subject key identifier:   F0:13:7C:F6:73:08:9C:53:A5:A5:DF:F4:AF:C9:DD:E0:06:25:6E:16
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       0DEB3C6AEF758A30C2FC167C5352EDFFE0CA5F27
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38342e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 22 Jul 2025 19:55:00 +0000
ROA not before:           Tue 22 Jul 2025 19:50:00 +0000
ROA not after:            Tue 21 Jul 2026 19:55:00 +0000
asID:                     18678
IP address blocks:        190.108.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 02:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:eb:3c:6a:ef:75:8a:30:c2:fc:16:7c:53:52:ed:ff:e0:ca:5f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 22 19:50:00 2025 GMT
            Not After : Jul 21 19:55:00 2026 GMT
        Subject: CN=F0137CF673089C53A5A5DFF4AFC9DDE006256E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:18:26:01:34:95:07:50:3b:a1:43:57:85:
                    0d:a9:68:71:3b:0c:fd:82:99:c7:b6:02:4e:24:29:
                    31:08:90:66:be:11:b1:24:ef:d4:d1:40:37:d5:13:
                    39:b6:00:06:c1:4e:63:dd:50:10:6c:c3:ac:8b:81:
                    ec:cc:23:34:17:03:84:f9:1c:61:d7:a3:df:e1:7d:
                    92:58:05:91:99:96:73:ff:87:62:63:8d:af:94:2f:
                    16:96:8d:44:e4:6e:fb:99:79:6e:c3:d8:3d:dd:4e:
                    9a:c9:ba:9f:6e:3b:5d:6b:c4:5e:51:af:8c:32:10:
                    7f:ce:e5:31:01:6b:eb:9d:2a:bf:c5:8b:94:29:11:
                    23:3d:94:52:06:3c:ff:97:9f:15:c8:09:b4:57:84:
                    34:36:67:67:b0:69:c1:db:68:6d:1e:db:4f:bf:db:
                    21:60:08:52:b9:03:e7:05:a7:24:dc:d9:6b:c2:21:
                    19:79:ac:93:3f:e5:83:0b:b5:49:fe:80:49:86:94:
                    96:e6:cb:a3:92:5e:ef:33:7d:eb:eb:00:9a:98:53:
                    41:1f:d4:19:29:e6:26:e7:ac:87:28:bb:03:b6:a4:
                    81:21:8e:47:01:c4:86:55:56:5d:43:b9:2a:93:33:
                    76:42:cd:a9:88:3e:41:03:58:41:fa:1f:09:05:ac:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:13:7C:F6:73:08:9C:53:A5:A5:DF:F4:AF:C9:DD:E0:06:25:6E:16
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:8c:53:01:fd:38:50:ef:a1:87:0d:a9:6f:76:c6:73:91:
         27:1c:30:c1:7f:52:ee:38:8a:01:da:c3:58:93:86:c6:55:d8:
         31:3f:ff:0b:33:a6:5c:44:63:a5:43:0e:0b:a7:57:0a:6a:f0:
         fc:8f:4c:c8:84:53:65:dd:f6:ae:15:d0:d0:78:fe:b4:f5:db:
         f7:ba:39:50:30:f4:31:89:71:3d:c1:cf:27:e2:fe:2b:b9:c7:
         53:32:6c:89:4f:fb:c0:8d:8e:8b:bc:d5:24:42:73:0f:6f:d0:
         71:64:82:a9:19:47:5e:10:c1:65:b3:7a:cf:0a:fc:ab:81:be:
         8a:24:e5:d8:cb:1a:d7:58:26:2d:5a:0c:2c:47:72:53:68:65:
         07:d7:55:7d:86:4e:f9:4c:80:f1:54:9b:15:88:b5:5e:fe:c6:
         da:d8:ac:b8:e6:ed:00:08:fc:88:a2:3f:b5:b4:67:73:d6:a8:
         27:af:40:d5:d5:4f:cc:85:10:3f:90:f3:0b:74:ca:5d:ac:fe:
         55:a6:a9:61:bf:26:fb:70:c1:7c:dd:d1:38:67:b0:00:1a:48:
         47:b9:a0:da:29:c8:38:98:3d:44:f4:ee:6f:f7:a8:9d:99:0b:
         87:20:23:c3:40:97:61:4c:60:fd:91:b2:71:82:e2:1a:8f:cd:
         96:9a:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:44:27 2025 by rpki-client