Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39352e302f32342d3234203d3e20323634383535.roa
File:                     3139302e39392e39352e302f32342d3234203d3e20323634383535.roa (raw, json)
Hash identifier:          +s80xLpYMi9sdrR1L+UdXguLPnnbnAzwz7Nhg1OBYlI=
Subject key identifier:   E1:57:F1:75:C5:05:F0:76:B2:87:1F:97:E0:F6:15:47:87:48:DE:9A
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       2027E81CB3A346391DFA7D27A1F55609AA314CBC
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39352e302f32342d3234203d3e20323634383535.roa
Signing time:             Fri 25 Jul 2025 01:45:00 +0000
ROA not before:           Fri 25 Jul 2025 01:40:00 +0000
ROA not after:            Fri 24 Jul 2026 01:45:00 +0000
asID:                     264855
IP address blocks:        190.99.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:27:e8:1c:b3:a3:46:39:1d:fa:7d:27:a1:f5:56:09:aa:31:4c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Jul 25 01:40:00 2025 GMT
            Not After : Jul 24 01:45:00 2026 GMT
        Subject: CN=E157F175C505F076B2871F97E0F615478748DE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:a6:7b:d5:4a:1c:d2:a8:2e:6d:ac:81:59:
                    4a:51:ce:8a:ce:18:bd:7c:c7:e2:be:84:2f:66:1a:
                    f4:89:89:9d:30:7e:0e:f2:ee:ec:63:c1:f9:f4:5f:
                    30:52:2f:30:d1:34:c3:04:74:e7:dc:45:67:df:5d:
                    05:26:9f:47:87:89:85:4d:bf:da:57:ed:4b:b7:fa:
                    84:4f:83:47:af:1c:3f:5b:96:de:a9:8f:36:c2:13:
                    19:ad:8a:4a:16:a3:cd:b7:6a:99:f4:81:19:2a:54:
                    c4:01:d9:93:49:60:e8:0e:2c:f6:21:ef:75:df:b0:
                    33:16:f3:78:82:1d:f8:74:bd:68:8c:75:25:98:c4:
                    66:1f:18:97:0b:2a:17:f1:90:38:6b:e5:d5:e7:60:
                    a8:28:00:86:c0:e8:99:a6:4f:fc:15:d1:d2:f1:b0:
                    3f:c7:46:06:3b:39:8c:15:06:54:fe:04:60:a6:82:
                    2f:69:af:05:77:37:98:cb:c4:02:7b:3f:9d:11:2f:
                    74:0e:bd:17:a3:73:7b:19:c5:21:c7:46:6f:66:f8:
                    29:c7:af:bc:f9:b5:40:29:3b:31:d7:49:21:d2:f7:
                    c2:cc:76:7f:cd:40:2a:74:bd:b9:22:e5:57:0a:70:
                    66:a6:b9:d8:79:ec:9a:5d:e2:2b:18:cb:cc:5b:38:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:57:F1:75:C5:05:F0:76:B2:87:1F:97:E0:F6:15:47:87:48:DE:9A
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39352e302f32342d3234203d3e20323634383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:84:48:47:75:63:1b:eb:99:43:ad:54:ca:18:fe:1e:04:
         e4:6f:2f:28:86:aa:82:c2:94:b8:ea:64:f3:c4:7d:50:d9:88:
         61:61:1c:83:d4:1d:44:df:69:c4:47:a1:a7:eb:97:f6:2e:60:
         5b:89:7d:70:8f:af:1b:9a:fc:f9:8b:4c:7c:64:c7:ec:f2:ce:
         09:7a:cf:3e:9e:5d:9f:aa:bc:bf:6c:0e:49:b1:83:e0:a9:b9:
         81:92:b9:4d:cb:65:3e:9f:f3:18:ce:49:a8:42:9f:cb:17:08:
         fd:71:2c:34:61:db:4a:b6:56:dc:88:5e:d0:fa:5e:57:65:da:
         91:d5:b7:bd:e7:53:bb:ea:cf:28:2d:0c:81:cd:9e:9b:ea:4d:
         df:4c:4d:23:99:9c:12:5d:1d:7b:b4:a7:22:4d:66:7e:58:34:
         6c:c8:62:79:55:b5:a6:d3:6d:50:e9:73:6a:09:d7:c6:61:f8:
         6c:2d:36:cd:8f:64:e6:17:a9:0f:39:f2:42:b4:3e:f8:0e:01:
         36:2c:b1:96:2a:62:b5:e5:94:8e:a7:9d:70:05:7c:83:0f:31:
         84:59:02:86:2e:d3:87:94:d0:27:0f:d8:68:a2:74:f3:4d:d5:
         1a:5d:a9:3c:14:77:7a:1c:41:83:2e:a9:30:8b:7c:0a:51:47:
         0a:17:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 08:59:40 2025 by rpki-client