Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3230302e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          hNbR4JhQKROEgfmuvgwagcivoV9ANU6yLXh0axmBFP8=
Subject key identifier:   42:80:35:1D:CE:95:7F:BB:C2:8A:E2:84:25:90:AD:FA:51:5B:49:D4
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       0BA3B0A557A91F32D782A0718427FEF918806E83
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 09 May 2025 11:35:02 +0000
ROA not before:           Fri 09 May 2025 11:30:02 +0000
ROA not after:            Fri 08 May 2026 11:35:02 +0000
asID:                     16509
IP address blocks:        190.112.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a3:b0:a5:57:a9:1f:32:d7:82:a0:71:84:27:fe:f9:18:80:6e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 11:30:02 2025 GMT
            Not After : May  8 11:35:02 2026 GMT
        Subject: CN=4280351DCE957FBBC28AE2842590ADFA515B49D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:75:8d:78:af:ab:a7:29:5e:ff:3f:5e:b5:
                    ea:15:0d:ef:ca:ce:24:d4:78:3d:3b:42:f0:48:05:
                    ab:3d:d0:d1:b0:46:56:80:7d:84:bf:fd:b7:d9:1d:
                    fd:4f:82:66:7e:53:e3:0b:bb:9a:40:90:35:a6:ef:
                    e5:b9:2b:1f:34:6b:a9:89:6a:c1:f1:39:f9:81:86:
                    a6:3a:76:01:04:f7:60:42:6a:62:12:ea:ba:0f:86:
                    76:11:03:92:7a:26:75:61:00:3a:03:de:48:84:78:
                    67:91:d3:ef:e6:2e:bd:a5:eb:6b:1b:6c:62:75:f4:
                    4f:28:b0:45:c6:ee:ee:65:a2:61:f6:e2:44:c8:95:
                    ac:b4:c8:33:af:3d:36:76:43:3c:4b:a4:1d:1b:ed:
                    57:fc:d6:f2:8b:10:0f:c9:33:5d:4f:8b:17:00:76:
                    d4:ff:9e:53:6a:a1:82:34:9d:1e:60:a6:6e:46:dc:
                    8a:45:89:9b:b4:46:08:af:27:7a:1d:75:1b:7e:c1:
                    01:b6:b9:0c:b1:c7:73:cd:8e:eb:ce:df:dd:02:11:
                    93:20:2c:af:da:11:b9:1c:83:ef:4a:8f:0d:cf:8d:
                    8c:c9:43:77:a6:4f:fd:ad:34:9f:4a:a5:b1:3c:7c:
                    6d:b6:29:ea:a4:a0:ca:33:6e:de:05:08:89:39:b0:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:35:1D:CE:95:7F:BB:C2:8A:E2:84:25:90:AD:FA:51:5B:49:D4
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:05:01:36:f1:87:7c:0f:2b:01:e6:74:dd:ae:47:1b:13:
         b5:03:10:3f:fb:16:16:7d:bd:85:72:78:90:b7:2a:8f:5f:8a:
         a2:20:cb:ee:c5:12:ec:ff:b4:68:a1:98:94:dd:9b:2f:e0:ea:
         88:d2:c3:1a:e2:b4:3b:fa:4d:33:2d:48:10:3d:13:4c:58:32:
         da:50:a3:90:94:c8:3c:f8:b5:f1:9f:48:96:24:cb:42:2a:0a:
         57:c6:95:be:6c:ac:0f:74:94:50:5f:48:0a:f4:c1:c3:39:d2:
         15:e5:b3:7c:e1:9b:aa:eb:a2:d9:c3:a3:28:bd:8b:b6:c9:dd:
         b1:e6:c1:7e:fa:ad:de:c9:29:51:cd:d5:a3:e7:ba:d8:38:4b:
         40:1d:0e:43:e7:9a:48:59:e0:2a:62:1f:9d:15:9d:c5:4e:d2:
         02:6b:66:f1:ce:19:79:68:ee:c0:d9:df:ea:ee:89:93:10:26:
         a4:2b:01:29:c3:8e:00:fa:f4:5c:22:53:b0:ff:2b:02:12:99:
         ff:4a:c5:3e:66:18:1f:0f:f8:43:b2:1b:9a:79:eb:b7:4a:06:
         2b:6d:f2:97:99:93:10:99:d4:5f:1d:7b:d4:6b:18:43:fa:46:
         4f:04:26:19:cb:3e:a9:7b:39:a1:86:b8:65:6b:95:dc:e0:15:
         fc:9b:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:11:35 2025 by rpki-client