Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131302e302f32342d3234203d3e20323733383234.roa
File:                     3139302e39332e3131302e302f32342d3234203d3e20323733383234.roa (raw, json)
Hash identifier:          NSzKU1hL9a+3CSWjWeYycn02ftqS18LiutUWQFo8zQc=
Subject key identifier:   AC:B0:50:23:7F:CD:E8:A6:79:9D:BB:CF:DF:19:07:D8:76:CB:E2:7B
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3ECEDCFE13C6BD9FED719134C44024E14E108BCB
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131302e302f32342d3234203d3e20323733383234.roa
Signing time:             Wed 23 Jul 2025 10:45:00 +0000
ROA not before:           Wed 23 Jul 2025 10:40:00 +0000
ROA not after:            Wed 22 Jul 2026 10:45:00 +0000
asID:                     273824
IP address blocks:        190.93.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 08:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ce:dc:fe:13:c6:bd:9f:ed:71:91:34:c4:40:24:e1:4e:10:8b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 23 10:40:00 2025 GMT
            Not After : Jul 22 10:45:00 2026 GMT
        Subject: CN=ACB050237FCDE8A6799DBBCFDF1907D876CBE27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:e6:3a:9b:0f:80:ac:c6:4a:3e:9b:fa:02:
                    cf:28:40:34:2f:ae:17:6b:d6:9f:5b:34:a5:58:08:
                    cf:71:8d:ff:16:a9:59:49:09:ef:3b:9a:a8:b8:ed:
                    a9:b8:ae:ce:04:f6:5d:94:37:99:bd:e5:75:27:59:
                    b5:7b:a4:25:dc:47:96:84:f3:8a:90:6e:e6:4f:37:
                    49:c2:8c:8b:48:f5:6e:5a:8d:32:17:1d:b0:49:9d:
                    ea:98:d6:b2:32:b0:a4:9b:71:30:0a:a8:38:35:f6:
                    52:c1:5b:c6:8b:c3:90:ef:bd:17:2b:34:39:9c:c8:
                    be:0c:ea:52:e1:82:42:27:b7:38:55:aa:16:74:8e:
                    de:35:61:58:45:f8:48:5b:e1:7c:6e:c2:cc:ff:1a:
                    53:6d:b9:89:91:86:6c:13:79:ce:8d:b2:f4:1c:d9:
                    2a:e5:4f:ab:02:92:24:ec:76:ee:f9:f1:66:4a:7d:
                    82:c0:c8:02:3f:7a:b6:83:09:ff:7c:0a:6c:7c:b5:
                    2b:a0:72:88:c2:c8:6d:7b:1c:c1:05:94:03:39:f2:
                    ce:b0:b5:42:bb:73:74:8e:5e:66:87:84:db:cc:1b:
                    92:66:50:af:7e:b2:94:b0:62:2c:91:29:b2:64:d0:
                    d5:bd:11:c3:1b:87:92:73:28:89:8b:62:06:9e:d7:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B0:50:23:7F:CD:E8:A6:79:9D:BB:CF:DF:19:07:D8:76:CB:E2:7B
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131302e302f32342d3234203d3e20323733383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:df:d8:77:5e:c9:a1:a9:4e:91:32:35:50:23:2c:98:7a:
         56:80:ad:7e:90:7f:d9:5f:ef:e2:6a:74:ee:20:d1:56:3a:0a:
         a5:6d:e6:e4:5d:d5:46:ef:21:bb:bf:65:46:35:a3:99:84:4f:
         74:8a:55:82:ac:10:0b:d6:81:e7:71:3a:bc:76:0d:e1:25:1b:
         73:f8:59:40:e0:7c:1d:89:ee:fc:40:10:d8:c3:c2:44:b3:4a:
         d8:9d:c0:6a:aa:31:9c:39:fb:d4:7f:88:98:86:15:01:3f:5b:
         47:ea:16:41:48:a8:07:37:2b:58:c3:20:7c:b8:91:88:f8:a9:
         6a:f2:55:d4:94:f2:e9:01:2f:01:94:17:0f:5f:02:43:ab:05:
         e7:2a:e4:33:3f:dc:4b:e8:de:77:3e:51:8c:0a:79:af:dc:88:
         9b:7d:80:a4:15:88:c2:cd:34:78:1f:a6:53:47:0c:c1:48:a8:
         74:30:6a:35:ea:5c:82:32:5e:7a:c2:af:04:70:fd:35:98:a1:
         98:ca:2d:0d:ec:3a:f6:6f:58:80:30:14:2f:50:f8:99:56:9e:
         6c:7a:ed:37:54:b6:b4:ad:61:b1:43:af:c4:bc:0b:c3:d8:90:
         2d:4c:88:9e:09:14:1f:05:19:fc:de:88:38:69:b7:81:34:c8:
         e9:75:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:50 2025 by rpki-client