Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e203230343733.roa
File:                     3139302e3131322e3139332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          AXHJX2WtbohbbfHUK1jwB72UTOtF2yShW1tpcwbFDsM=
Subject key identifier:   5A:E5:D6:00:2D:9F:E4:45:A6:C3:7F:47:A0:93:04:BA:D0:3F:9B:4B
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2BE0307C34F328346B521F64DAF690CCA7CA8AF4
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 09 May 2025 10:50:02 +0000
ROA not before:           Fri 09 May 2025 10:45:02 +0000
ROA not after:            Fri 08 May 2026 10:50:02 +0000
asID:                     20473
IP address blocks:        190.112.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e0:30:7c:34:f3:28:34:6b:52:1f:64:da:f6:90:cc:a7:ca:8a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 10:45:02 2025 GMT
            Not After : May  8 10:50:02 2026 GMT
        Subject: CN=5AE5D6002D9FE445A6C37F47A09304BAD03F9B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:81:ce:b0:a4:f6:ac:29:12:2b:74:7b:58:
                    27:47:42:cd:78:a1:c1:45:40:7f:bd:d6:c5:2e:18:
                    16:ee:fd:9c:61:9e:1b:bf:36:76:ac:56:5a:51:0f:
                    e4:f1:90:1f:c5:d6:fc:38:dd:26:ff:1b:f0:86:5a:
                    55:aa:52:c6:0a:2d:a2:00:17:1f:2b:63:15:9e:66:
                    fa:a4:86:a6:28:ee:21:00:e8:3f:bb:58:82:4b:16:
                    31:7a:f9:4a:e9:74:d1:5f:e9:51:2e:cd:3e:f8:c5:
                    b3:78:58:06:41:5a:8b:6d:92:84:e3:19:56:f2:14:
                    ba:38:26:15:9d:09:6f:5b:d4:51:f2:ea:ba:e3:4a:
                    1b:42:38:67:85:d7:2c:95:0f:b1:7c:d8:57:ad:a5:
                    0e:86:b3:1c:96:86:3e:89:ef:71:4a:30:eb:a3:8e:
                    94:d6:bc:79:67:57:1b:01:6c:5f:3e:84:5e:6b:f4:
                    be:01:c6:81:1c:06:82:19:3f:bb:b3:d3:a7:6d:16:
                    68:4a:36:92:09:88:c0:d0:f6:0d:91:34:ff:8b:c6:
                    d4:dd:5c:e1:c7:05:37:e4:de:89:05:0e:27:d0:35:
                    4f:44:f5:3e:fb:d9:47:9c:96:cc:c3:db:4a:dd:9f:
                    25:70:75:aa:2b:68:2e:23:06:01:4b:fb:88:95:dd:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:D6:00:2D:9F:E4:45:A6:C3:7F:47:A0:93:04:BA:D0:3F:9B:4B
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:66:41:72:40:c2:d8:89:c9:cb:6d:9b:74:fe:ec:8d:89:
         1d:69:9d:6d:d9:7d:bb:74:a1:14:aa:45:9b:26:14:94:4e:b1:
         42:42:a2:58:43:0d:9f:ef:23:26:74:a4:3b:c5:2f:6b:3a:82:
         08:7c:b9:30:54:04:d0:4e:58:48:fb:b5:7c:aa:c0:99:7b:16:
         45:21:62:d3:3b:0e:2d:3c:a4:68:d6:fb:8d:e9:ac:cb:58:3f:
         aa:a1:42:90:07:14:19:04:64:1a:f6:21:6f:5a:a2:9f:e9:ae:
         56:c8:ad:22:fb:1e:be:0b:bb:a3:ab:e7:68:92:cf:05:25:26:
         24:c3:8f:3b:10:ee:46:35:3c:6c:cc:81:f5:de:cd:cf:91:74:
         ca:d2:e5:c3:47:02:8c:45:3c:02:63:6e:c5:e5:f9:82:b2:bd:
         e9:95:2b:1f:27:db:7a:ee:35:f2:aa:55:ce:ca:66:d2:58:8d:
         8b:1f:cf:05:6e:34:55:8d:08:95:02:21:82:f7:a2:47:79:da:
         bd:ff:ed:3f:92:45:d4:78:15:75:37:c9:b7:99:7e:bd:75:e9:
         aa:9e:e6:38:fb:62:d2:d5:00:dd:45:38:cc:f1:4e:b8:ad:26:
         f0:71:5d:64:fa:2d:3d:02:43:4c:31:96:5a:de:15:2a:72:fb:
         3b:69:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:11:39 2025 by rpki-client