Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e203331373135.roa
File:                     3139302e39332e39342e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier:          UwHfHAc6L3DwsiXI2mqLoXcNDy4rHe082mioXNB/36M=
Subject key identifier:   97:39:13:24:04:CC:A6:9E:16:06:F2:1D:D0:76:C8:96:DF:C0:53:4B
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       69C17AE38115E3CC74519A6A25B96833C5F55873
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e203331373135.roa
Signing time:             Thu 17 Jul 2025 14:25:45 +0000
ROA not before:           Thu 17 Jul 2025 14:20:45 +0000
ROA not after:            Thu 16 Jul 2026 14:25:45 +0000
asID:                     31715
IP address blocks:        190.93.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 08:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c1:7a:e3:81:15:e3:cc:74:51:9a:6a:25:b9:68:33:c5:f5:58:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 17 14:20:45 2025 GMT
            Not After : Jul 16 14:25:45 2026 GMT
        Subject: CN=9739132404CCA69E1606F21DD076C896DFC0534B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:7c:f2:fc:69:74:f3:8b:b8:62:b9:c3:92:
                    63:25:e4:c3:71:69:c9:07:11:da:0a:d2:d3:c1:ee:
                    82:75:f2:f5:de:64:01:bf:49:f8:c5:2d:c0:16:28:
                    53:87:5c:02:81:46:6e:52:36:d3:fe:5d:3f:13:d4:
                    26:c2:0b:01:28:61:8e:cc:7b:d0:db:31:09:ed:6e:
                    8b:b8:52:2c:92:2b:d2:d3:b9:48:39:1a:46:bf:64:
                    d4:c6:2e:c2:3f:cb:88:de:9b:ae:25:44:46:d2:fd:
                    bf:f0:68:77:c7:f6:70:64:6e:84:58:be:46:1e:43:
                    da:82:00:70:e2:c1:5f:b5:10:a7:e9:64:da:46:3f:
                    f2:4e:0c:ec:63:9d:f8:9f:31:06:01:4c:6a:05:dc:
                    a5:82:f7:82:1b:11:85:a6:f9:bd:da:f8:ac:09:10:
                    ec:af:c6:52:b3:da:37:39:1c:78:42:a3:20:69:14:
                    94:59:71:5f:d9:60:e5:91:69:94:e3:fd:db:a4:1e:
                    39:9d:3b:18:10:d0:88:e9:eb:e4:69:39:92:2d:2c:
                    c0:5d:af:4b:b4:5a:4b:69:00:3d:f0:97:6c:1f:b5:
                    41:92:b6:5a:fd:1c:05:bd:95:5d:d6:c2:d5:3f:3b:
                    75:1a:09:1f:e9:07:db:f2:40:18:f5:a0:0f:b3:3b:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:13:24:04:CC:A6:9E:16:06:F2:1D:D0:76:C8:96:DF:C0:53:4B
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e203331373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:07:89:f4:8f:1c:d2:06:98:67:02:e6:a5:95:43:61:e2:ce:
         fd:f5:0d:57:c7:88:9c:fe:20:a6:6d:fe:9b:57:35:d7:64:b7:
         fa:72:d2:c6:09:09:a8:53:af:2f:b2:51:4e:dc:cd:ff:84:92:
         b5:33:d5:38:1c:c4:24:15:6d:2f:59:20:e9:7c:4a:91:e6:09:
         d0:01:68:be:91:ae:5f:53:8f:20:c3:cd:02:9f:92:5c:db:f4:
         1e:7a:ee:0f:1b:b2:6f:0b:1a:4a:21:43:b0:f3:a4:0c:01:70:
         f0:75:36:ab:bd:96:21:73:c7:ae:98:d2:68:7b:40:b4:91:15:
         bf:54:bf:3b:61:7c:68:4a:7e:ad:47:e2:a8:51:64:5d:5c:5a:
         8a:64:c3:fd:54:3c:a1:f7:53:c2:c0:c8:b3:77:74:cb:86:32:
         2b:b4:18:ee:4b:d2:97:bc:50:74:40:ea:d7:50:08:9a:78:76:
         ad:bb:54:82:0a:40:ef:23:6f:f3:d6:10:93:49:11:40:20:b4:
         67:82:f8:52:51:bd:d2:43:5c:f4:88:76:c8:61:bc:fe:5e:52:
         f9:bc:45:d6:cf:fb:b2:00:77:d2:16:96:0c:ac:57:9f:d2:9b:
         02:10:fb:b1:44:44:b3:bb:1d:dc:f3:b6:4b:3d:de:a2:36:5d:
         a5:13:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:33:53 2025 by rpki-client