Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa
File:                     3139302e36332e3231362e302f32332d3234203d3e203237373338.roa (raw, json)
Hash identifier:          RPFgDpJ6qC944ZrpZVNtdYilnppfs+PWUnfTtALUVcU=
Subject key identifier:   AB:E0:CA:CE:0A:FE:B3:7F:78:F2:59:20:07:95:C5:10:7D:AF:CC:12
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       32B32280F58BA5AF5483CCED791364B453080EE9
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa
Signing time:             Mon 28 Jul 2025 15:34:11 +0000
ROA not before:           Mon 28 Jul 2025 15:29:11 +0000
ROA not after:            Mon 27 Jul 2026 15:34:11 +0000
asID:                     27738
IP address blocks:        190.63.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b3:22:80:f5:8b:a5:af:54:83:cc:ed:79:13:64:b4:53:08:0e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Jul 28 15:29:11 2025 GMT
            Not After : Jul 27 15:34:11 2026 GMT
        Subject: CN=ABE0CACE0AFEB37F78F259200795C5107DAFCC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:67:78:c3:55:3a:a0:ac:43:61:31:67:15:
                    9d:71:ee:eb:fb:59:a8:6c:cf:3e:3f:74:b7:5b:fb:
                    77:2e:95:b1:d4:af:d3:36:26:2a:49:11:e4:cd:e6:
                    57:b0:fc:ff:ba:dd:06:4b:ac:1f:7c:dd:34:e2:7b:
                    0d:da:4f:e3:40:c0:b8:20:8a:a1:c5:22:c0:b2:47:
                    07:94:3b:db:ed:ff:5c:54:06:22:35:06:52:ea:81:
                    e6:d7:98:53:a2:8d:bc:02:a2:ed:25:6d:0d:1e:40:
                    38:be:60:41:4e:4f:58:08:29:26:77:89:40:e3:1b:
                    e9:d5:34:38:24:3b:8f:0e:f3:15:4c:98:98:25:56:
                    60:76:95:95:0b:f4:58:d3:79:a2:5d:66:b2:2b:fa:
                    6c:71:50:17:db:cc:bb:62:3e:c8:53:9f:4c:d7:5b:
                    2d:3b:e1:ab:fc:03:9d:6e:94:89:8a:fc:e7:95:79:
                    6a:9b:7d:a7:84:88:9b:51:10:f2:1e:b1:7a:8f:98:
                    5d:bc:fd:24:05:68:bc:09:e3:de:ab:cf:cf:b3:57:
                    ea:28:eb:ab:32:b2:ee:6a:6b:92:49:09:41:be:b1:
                    35:08:8b:58:f9:c5:7c:0c:1b:f9:49:9f:e5:f5:4e:
                    ec:d9:00:d2:06:22:b0:2c:6a:8a:b5:37:d9:9b:85:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E0:CA:CE:0A:FE:B3:7F:78:F2:59:20:07:95:C5:10:7D:AF:CC:12
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:10:28:c1:9c:7e:51:db:07:51:9a:0e:38:d6:c0:da:6b:
         a0:63:32:92:62:3e:c5:f9:47:61:d0:78:e2:3b:08:14:63:b4:
         0f:c8:11:7a:a6:6f:fc:56:da:18:a0:e7:0f:09:99:d2:7d:8a:
         e6:b2:a8:bc:0e:b8:bd:c0:e6:59:ed:69:5e:43:25:3b:82:55:
         16:9d:ca:19:90:e2:46:9d:7d:b1:bb:59:54:8d:f3:c1:b3:a3:
         a2:e5:f2:47:cc:ed:d3:dc:17:d9:93:71:4c:2c:7d:ab:94:f3:
         b9:07:cf:d4:4a:ad:5c:bd:be:36:c0:c0:67:99:12:bb:49:9a:
         2a:82:cc:2e:98:1c:00:62:8f:91:fd:4e:a5:6f:6e:8c:7e:7a:
         3e:4c:03:8f:a6:b8:14:ea:6e:ac:78:21:56:1b:00:fe:a8:ac:
         48:2e:8e:8c:5a:8d:4d:53:f4:bf:07:12:2d:b2:48:4f:11:2b:
         33:6c:30:92:03:c3:17:a7:2f:f3:71:fe:d9:85:b5:a9:b7:1e:
         4d:88:1b:7a:e0:cc:ec:f2:c6:ab:38:c6:0e:e6:63:22:74:98:
         6c:29:15:e7:25:50:93:d8:0e:25:10:1d:58:1d:8f:d0:3d:27:
         21:d1:44:76:b5:b2:b8:2b:ca:41:fd:2c:16:0c:7b:60:f6:31:
         e0:0e:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:35:18 2025 by rpki-client