Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131342e302f32342d3234203d3e20323635353534.roa
File:                     3139302e3130332e3131342e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          0Ebjodw4L+OV6GpZIKBS8C7s0fdPTio3ngUhNXaForo=
Subject key identifier:   A7:E0:FD:C1:A1:FB:A2:A1:50:78:D9:8E:2E:88:26:56:BE:98:95:3D
Certificate issuer:       /CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
Certificate serial:       59973BF5FF675A90D8E3D2DBD61A2DB05DA4E3ED
Authority key identifier: A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131342e302f32342d3234203d3e20323635353534.roa
Signing time:             Thu 17 Jul 2025 14:25:00 +0000
ROA not before:           Thu 17 Jul 2025 14:20:00 +0000
ROA not after:            Thu 16 Jul 2026 14:25:00 +0000
asID:                     265554
IP address blocks:        190.103.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 01:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:97:3b:f5:ff:67:5a:90:d8:e3:d2:db:d6:1a:2d:b0:5d:a4:e3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
        Validity
            Not Before: Jul 17 14:20:00 2025 GMT
            Not After : Jul 16 14:25:00 2026 GMT
        Subject: CN=A7E0FDC1A1FBA2A15078D98E2E882656BE98953D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:d6:71:9c:bd:8e:2e:95:90:c2:c2:e3:70:
                    b6:c3:c6:57:41:d6:1d:a5:74:a4:8a:86:5e:e2:99:
                    79:fe:13:07:20:e4:ec:9e:10:09:69:c2:e0:56:af:
                    34:1a:e0:d9:27:16:b2:e6:13:9e:70:ae:d3:35:75:
                    10:16:5e:d6:22:9f:c3:74:c1:67:3e:2a:ed:fc:33:
                    44:47:a9:08:fb:2d:d3:bb:53:09:e3:b7:22:83:b9:
                    97:5e:60:cb:eb:e3:94:0e:2d:f7:ff:d3:1d:93:07:
                    86:a1:0c:5c:f2:cc:13:ed:33:63:e7:4a:aa:41:e7:
                    56:c9:a6:db:29:52:e7:12:05:c2:18:1d:b3:dd:bf:
                    f0:cb:b2:b1:13:8b:2a:82:d5:8a:04:26:6a:5f:ae:
                    94:ae:0c:a4:eb:81:af:f1:9a:75:ab:94:13:de:fd:
                    bc:fd:bf:8f:fc:30:5d:30:66:be:e0:36:b7:aa:fb:
                    c5:9e:a1:2c:13:da:25:c3:49:e5:8a:5f:23:c2:ba:
                    ef:c8:c3:e1:4b:23:af:5f:43:57:0b:a4:ae:4d:f1:
                    0d:b9:14:d7:8b:38:18:39:bd:fc:9c:e5:4f:50:6c:
                    26:c7:f1:32:65:a1:b4:c4:4f:b7:64:86:05:9b:f0:
                    ac:3e:d0:51:af:6a:a1:67:29:71:55:3b:d1:47:2b:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:FD:C1:A1:FB:A2:A1:50:78:D9:8E:2E:88:26:56:BE:98:95:3D
            X509v3 Authority Key Identifier:
                keyid:A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e3130332e3131342e302f32342d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:ff:ea:64:64:ad:1f:63:b0:31:79:73:10:e7:35:b0:01:
         b3:2a:00:22:5f:0d:ca:09:52:5f:21:d2:87:33:b7:87:10:3c:
         18:17:a8:46:6b:cf:86:cd:5e:15:d1:88:56:cb:0b:fe:23:b8:
         f0:a0:f6:9e:e2:83:68:1d:e3:ce:e4:1b:6d:b7:16:d4:de:22:
         02:f0:ef:59:b3:9b:d8:10:e9:53:91:0f:e1:09:65:84:38:cc:
         3a:6c:66:79:cc:36:dc:9e:46:98:e9:b5:e1:dd:3a:55:3f:3e:
         d1:71:34:6d:c5:59:f6:9b:81:24:0c:93:c3:28:81:4b:46:ab:
         9b:d1:1e:a8:a6:01:7c:bb:ea:d7:8f:28:f7:d0:2d:fb:2a:0e:
         7b:55:73:84:0c:8c:df:81:b2:83:ea:e0:3d:56:83:43:20:a5:
         fc:ea:c3:af:9a:27:c4:30:d6:c0:24:da:73:30:16:b9:8d:39:
         5f:6d:9a:2c:f3:5a:ff:69:cf:0c:7e:e3:e3:4e:d3:ca:59:76:
         e0:a2:11:65:ae:70:6d:cb:c2:e0:49:25:35:7a:44:75:56:29:
         6b:61:1d:cc:e7:3b:c7:b7:d1:1c:b5:49:9e:2e:02:6c:84:82:
         d9:b1:1f:5d:32:8f:3e:f2:9e:57:84:7e:68:85:99:66:ef:55:
         68:b2:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:11:22 2025 by rpki-client