Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343733.roa
File:                     3139302e3131322e3139342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          dPnwAN115rUo2QY17vTfFxMo13CtgUc19lYvDaIurFE=
Subject key identifier:   2D:4D:33:34:1C:F7:F0:C1:02:B9:58:E0:48:66:7C:03:14:EB:EF:E2
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2EEE75F058DB750C5B65FE20132FE8846685C32B
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 09 May 2025 10:50:00 +0000
ROA not before:           Fri 09 May 2025 10:45:00 +0000
ROA not after:            Fri 08 May 2026 10:50:00 +0000
asID:                     20473
IP address blocks:        190.112.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:75:f0:58:db:75:0c:5b:65:fe:20:13:2f:e8:84:66:85:c3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 10:45:00 2025 GMT
            Not After : May  8 10:50:00 2026 GMT
        Subject: CN=2D4D33341CF7F0C102B958E048667C0314EBEFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:5e:9f:0d:78:af:6b:91:9c:ce:0b:9a:83:
                    7c:63:3b:dd:de:53:66:d4:8c:f5:fc:83:4f:03:70:
                    c9:6a:0b:58:c8:e1:9d:f5:d3:73:07:49:0e:7c:6f:
                    5d:d2:65:80:ba:de:33:e7:33:bd:77:b9:e7:0a:0e:
                    88:46:d3:5f:af:fa:55:10:ae:5e:b6:a4:44:8b:94:
                    f7:af:88:82:aa:aa:00:ac:cc:d4:2b:d4:dc:a1:18:
                    2c:b1:ca:d1:d6:1a:e0:1f:6b:b4:11:01:95:d5:4d:
                    98:e9:c7:4a:f5:2a:2b:05:b3:69:d0:9c:c7:ba:f1:
                    41:de:46:a3:ea:4f:42:7a:49:57:53:d9:0f:9a:05:
                    32:2b:3b:b3:01:d4:05:db:8a:55:34:e7:de:8a:cf:
                    00:dc:46:a0:17:dc:8c:15:2a:08:49:c7:c4:56:3b:
                    10:bd:eb:df:b2:25:8d:9a:dd:6c:2a:64:48:6e:80:
                    f8:c4:28:25:be:cc:c7:a6:5f:2f:10:32:44:31:48:
                    c0:21:87:a2:ce:01:c9:ab:1c:78:51:21:4c:67:f2:
                    b0:68:09:67:bf:06:cd:ed:13:80:ad:36:30:e7:48:
                    af:0f:61:2d:93:f5:44:1b:43:d3:93:b3:a9:ba:0f:
                    95:9f:06:ef:a9:b0:d9:30:2c:87:57:40:8e:7d:81:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:33:34:1C:F7:F0:C1:02:B9:58:E0:48:66:7C:03:14:EB:EF:E2
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:c6:26:67:2c:2c:8e:fa:80:40:f6:c4:5c:72:70:92:59:
         00:b7:df:f0:da:2d:3e:b5:7c:8e:2d:29:e5:36:3f:87:37:f3:
         ec:aa:e8:1a:5f:af:c9:89:77:db:51:a1:ce:f8:3a:b9:e5:1e:
         b1:8a:6f:91:5d:f4:75:61:0d:c6:ca:8f:b2:c2:58:6f:70:62:
         f5:39:f8:0e:85:a7:81:2d:c9:75:37:f8:bf:a9:8b:57:56:de:
         5d:27:9f:b3:4a:2d:db:e9:b6:e7:1e:a1:9c:21:8f:f1:a6:6b:
         c9:8c:ff:46:69:44:e5:ca:b7:89:9b:5d:18:18:2e:7e:8a:1a:
         b9:9c:c1:a5:35:09:bd:1b:66:31:1f:f5:07:a5:0f:30:0a:08:
         28:30:b4:28:96:1b:f6:fb:c9:15:cb:34:1d:c2:f5:92:a9:ed:
         bc:44:69:ec:86:d2:79:c2:93:b1:d8:ba:2f:6d:c1:94:f1:62:
         bf:d0:44:7a:c9:c5:c1:f2:79:84:d5:5e:a0:68:95:d0:8a:5e:
         d8:86:06:32:3f:13:73:eb:90:20:ff:b1:af:2b:6c:26:ab:98:
         a0:53:05:45:9d:01:a8:fd:88:49:23:60:ca:eb:15:a5:f2:eb:
         00:7c:9a:33:c2:10:17:28:7b:8d:81:fa:c5:c3:0d:42:2c:13:
         fb:4f:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:14:13 2025 by rpki-client