Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3139322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          6ZUQJojWPBqoDNG6OXa3D3PguISMzkBVvq6hptYcnbM=
Subject key identifier:   58:D5:A1:42:DD:5E:1B:3B:E2:98:1E:33:04:D5:60:EC:31:D2:8A:02
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       3D4FF3A2A4718DE6C258570BF3FA9AFAE7E8D930
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 09 May 2025 11:35:01 +0000
ROA not before:           Fri 09 May 2025 11:30:01 +0000
ROA not after:            Fri 08 May 2026 11:35:01 +0000
asID:                     16509
IP address blocks:        190.112.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4f:f3:a2:a4:71:8d:e6:c2:58:57:0b:f3:fa:9a:fa:e7:e8:d9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 11:30:01 2025 GMT
            Not After : May  8 11:35:01 2026 GMT
        Subject: CN=58D5A142DD5E1B3BE2981E3304D560EC31D28A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:b9:e5:b1:1f:d0:97:59:61:b1:3e:1b:d2:
                    9b:cf:f7:7d:75:72:56:2c:9c:1a:0a:8a:43:76:06:
                    7b:23:92:3d:90:29:ad:bf:59:4a:ac:98:d9:52:c1:
                    e0:ea:ba:f5:fa:6d:e2:10:bc:a0:c0:2a:07:b3:c0:
                    29:68:40:d3:2e:f8:e9:01:36:2a:b3:0f:75:87:9f:
                    22:58:a1:71:e8:d7:15:23:a6:f0:17:0f:39:ff:13:
                    39:62:52:72:dc:32:4f:aa:70:25:29:80:7e:1d:8c:
                    23:d3:0b:3b:21:78:de:f2:1c:59:2e:3e:a6:aa:e1:
                    68:f7:ef:b6:43:ad:d0:4a:f0:02:b5:41:8a:9f:25:
                    a3:9a:8a:cf:bd:d5:d5:60:ee:38:b4:96:8c:52:f9:
                    68:6b:92:52:46:81:9d:0f:f8:d9:a7:38:f5:e5:b4:
                    d1:08:40:75:20:ec:6c:6d:06:05:76:64:f4:af:9d:
                    0a:9d:f1:b9:22:0a:21:f0:ea:1b:39:5e:7a:25:f3:
                    d8:d4:7c:61:f1:46:16:bd:fd:63:1d:f7:f5:1e:9b:
                    c6:e4:97:df:71:df:9e:29:24:b5:0f:5a:87:95:da:
                    02:58:c9:5c:c9:b3:2b:35:d5:b7:17:64:7e:37:3e:
                    45:34:ed:11:9e:74:d5:b2:e5:2c:1e:d1:ea:9d:d6:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D5:A1:42:DD:5E:1B:3B:E2:98:1E:33:04:D5:60:EC:31:D2:8A:02
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:6d:e0:c6:c0:bd:e6:b5:3f:a6:72:cd:3c:dd:c4:74:35:
         c5:8f:2d:02:3b:7c:93:8f:5b:b9:2d:3d:21:b5:17:4b:34:0e:
         7f:3a:63:28:79:9b:fb:e7:7c:b0:72:db:73:dc:e7:be:c8:33:
         1f:1b:7d:69:72:7e:86:1f:6c:3d:9b:ef:f8:a9:5b:ec:69:36:
         5a:90:ec:d9:c9:3e:bc:31:78:9f:74:00:39:ca:ea:48:cf:92:
         54:c1:32:fb:65:95:41:7d:a2:a6:bc:6e:a5:fd:e3:93:32:be:
         6c:da:7c:12:92:f8:63:da:bd:0a:22:5f:9c:5b:dc:30:a7:34:
         8e:41:8f:eb:3d:8a:08:dc:e4:65:f6:f8:13:45:b1:97:2a:7a:
         41:f3:af:50:a1:02:85:56:9b:11:af:02:f5:8c:78:fb:cf:29:
         f9:94:4a:ec:9d:de:21:3f:d3:6f:f2:57:fc:a2:9c:fc:8f:3e:
         27:19:4e:41:ff:46:15:f2:39:42:3b:28:a1:ce:91:39:8a:2d:
         43:3a:60:71:ee:c1:63:36:a1:d5:67:ba:b4:12:41:a1:b7:e5:
         f7:57:a6:50:32:fc:40:95:35:bb:24:9d:1d:0a:d8:1f:ff:44:
         69:29:ba:b3:bc:94:d3:f2:03:ea:b4:26:0c:34:c2:c7:37:42:
         fd:de:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:06:04 2025 by rpki-client