Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20323732313439.roa
File:                     3139302e39332e3130352e302f32342d3234203d3e20323732313439.roa (raw, json)
Hash identifier:          Rn1mqkkCtSJqHBb3X/psaCU1YK+300KpFeClSWaLZcM=
Subject key identifier:   77:06:DC:4C:21:3F:BA:3D:5F:BC:F5:77:EA:3D:38:92:1D:4C:1E:88
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2306B67A24F847E7C5DBE906017F3EAECB70DE09
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20323732313439.roa
Signing time:             Thu 12 Jun 2025 21:20:00 +0000
ROA not before:           Thu 12 Jun 2025 21:15:00 +0000
ROA not after:            Thu 11 Jun 2026 21:20:00 +0000
asID:                     272149
IP address blocks:        190.93.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:06:b6:7a:24:f8:47:e7:c5:db:e9:06:01:7f:3e:ae:cb:70:de:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 12 21:15:00 2025 GMT
            Not After : Jun 11 21:20:00 2026 GMT
        Subject: CN=7706DC4C213FBA3D5FBCF577EA3D38921D4C1E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:18:8d:43:7f:ee:a3:f1:ad:d3:c0:95:14:
                    3a:20:af:ee:dc:a1:c8:6f:c1:8a:0d:78:88:47:a6:
                    f8:00:fa:7c:52:24:35:68:6c:cf:cb:cc:04:37:22:
                    36:d9:12:a8:9c:83:4b:a0:bd:cb:5c:01:ac:fd:45:
                    9c:a3:c9:73:64:e3:cc:a2:eb:0a:a0:ca:e3:80:cf:
                    22:ce:16:cb:c5:6f:d9:fc:a7:5e:41:be:14:28:9a:
                    fb:2f:b3:81:31:82:95:cf:1c:e5:35:27:d9:6a:61:
                    07:aa:6f:84:ab:d0:42:c2:c1:4f:d2:78:fd:a5:9b:
                    8c:9e:b6:7c:1d:ee:65:0c:0e:1e:e3:37:04:a4:ec:
                    81:d8:ab:f1:b7:ea:28:b3:9d:0c:cb:f6:42:69:4d:
                    ed:36:b2:c3:2e:8b:0d:70:02:72:d7:4c:a8:50:7d:
                    be:ea:76:5e:21:41:73:8a:61:c2:54:62:56:16:8e:
                    34:bb:3e:83:b1:7a:ea:2e:c8:12:e8:ac:65:96:fc:
                    94:da:3e:37:47:54:99:ea:46:73:ac:a9:88:1b:77:
                    cd:a4:97:2a:1f:6f:36:6f:83:9a:40:4d:0d:ff:ed:
                    7b:d5:c5:e2:68:e8:25:be:9f:45:44:60:fd:44:6a:
                    c9:6d:8b:de:9a:74:84:0b:31:5e:3b:ef:93:d1:6b:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:DC:4C:21:3F:BA:3D:5F:BC:F5:77:EA:3D:38:92:1D:4C:1E:88
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20323732313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:66:1a:d9:a8:c8:0a:25:9d:22:0f:d6:d3:60:47:b6:4b:
         e7:7f:2c:05:b6:61:0a:56:65:a1:f4:84:45:c5:fa:32:20:25:
         b8:95:65:a7:9e:24:8f:e3:2a:26:4d:6f:e8:d9:62:f6:71:95:
         ce:a4:69:2b:b7:fd:f8:35:47:ce:3b:52:85:45:eb:0b:fd:28:
         93:03:6d:68:27:5a:9c:d9:ac:ee:38:b8:e3:e3:03:ad:d1:9f:
         12:05:11:3f:fa:3c:a7:0d:95:89:13:6b:16:9b:92:7f:13:06:
         ee:0d:63:ab:95:5a:9a:c8:b0:47:0e:7c:75:0d:fa:9f:16:98:
         8d:24:44:6e:0c:c3:5e:49:90:71:58:83:22:ad:5e:31:e4:4c:
         7e:53:58:b6:01:2e:29:f1:bb:fc:1e:64:6d:7a:ff:85:3c:4e:
         0e:c8:95:58:b7:cc:a2:e2:8c:94:4d:b9:66:c5:19:bb:63:2b:
         16:61:f1:3a:cf:a3:0e:4e:a5:f2:4f:76:5a:8a:92:4f:9e:2e:
         d6:0e:31:21:74:ff:63:a4:48:cc:45:d3:e7:c1:6b:5c:10:c3:
         c9:39:45:4f:23:95:56:86:9d:5e:d8:69:c6:36:09:74:22:fb:
         2f:c6:c2:cb:35:ef:15:48:93:78:09:fa:08:6c:73:12:3d:0d:
         87:4c:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:30:58 2025 by rpki-client