Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3230312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          xzQNqHBUI3MmeTVZE8SbOLOCytOATJtL2WJRo8kmLOw=
Subject key identifier:   CB:64:15:D8:B6:FC:64:52:F5:0E:DF:27:A8:08:F8:7B:BF:A8:28:5F
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       41BF230118062B312DEE15D43277FDCE65DABE11
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 09 May 2025 11:35:01 +0000
ROA not before:           Fri 09 May 2025 11:30:01 +0000
ROA not after:            Fri 08 May 2026 11:35:01 +0000
asID:                     16509
IP address blocks:        190.112.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bf:23:01:18:06:2b:31:2d:ee:15:d4:32:77:fd:ce:65:da:be:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 11:30:01 2025 GMT
            Not After : May  8 11:35:01 2026 GMT
        Subject: CN=CB6415D8B6FC6452F50EDF27A808F87BBFA8285F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:dd:40:bb:cd:dd:ed:b6:14:64:83:38:f5:
                    0b:eb:61:2d:e6:73:d8:07:41:13:04:3a:35:97:d7:
                    bd:c3:28:6f:6c:00:e4:1e:e7:19:6d:0b:84:c6:29:
                    f8:1d:f2:99:fb:c8:a3:78:2f:54:43:8a:7c:4f:1c:
                    26:84:38:38:00:90:66:2e:89:37:39:65:6b:4c:a9:
                    9c:4a:84:e5:17:45:45:dc:2f:45:a8:81:a0:55:33:
                    1f:60:b2:e5:99:56:ed:53:f4:a5:17:b8:8b:6e:cc:
                    20:c7:00:49:39:f1:fd:db:e6:c5:f4:37:b2:19:00:
                    20:86:b7:00:f6:ca:62:4a:8f:95:29:fd:d1:00:b1:
                    ce:70:eb:e6:e7:9f:f9:3c:a6:69:6b:51:1b:98:df:
                    39:bf:b7:12:00:37:0a:32:6f:9d:70:55:12:93:7d:
                    5b:3b:b4:78:b3:4c:0f:55:78:3b:19:c6:f7:b4:6d:
                    b0:2d:a1:19:c6:0f:76:b2:e1:35:a6:22:ca:e8:c9:
                    10:ae:0c:8f:8f:f4:07:b6:f1:ea:fa:eb:ed:7e:e8:
                    6d:73:16:f3:72:3a:48:15:41:84:67:48:62:87:cf:
                    93:83:53:83:dc:40:59:2d:53:f1:e2:c0:a9:11:43:
                    c5:1e:a0:b1:64:2b:af:a6:3d:4c:25:0e:75:97:f6:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:15:D8:B6:FC:64:52:F5:0E:DF:27:A8:08:F8:7B:BF:A8:28:5F
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:f9:48:61:b9:ef:f7:75:4c:d3:4b:31:fc:d1:b6:d2:3f:
         2a:fa:d3:eb:88:a4:7c:8a:40:c4:42:c0:1a:00:3d:72:26:f0:
         a8:51:1c:25:36:86:c1:bc:ab:5d:13:cb:dd:1c:9b:d6:70:7e:
         55:ba:bd:e7:ea:b5:17:c1:83:dd:aa:dc:27:7c:b4:0d:a9:73:
         21:2a:1a:ed:ee:bc:34:5f:c8:08:31:b0:54:e2:7d:83:60:e8:
         79:11:9b:9b:42:3a:71:4d:84:75:60:37:4c:fa:02:c5:e9:ed:
         b8:10:10:6c:d8:93:c1:82:09:08:63:b8:22:cb:dc:b7:05:7a:
         0c:57:24:7e:29:37:71:79:08:aa:36:77:26:bd:b2:29:7a:61:
         e9:fa:93:62:50:87:3e:91:6f:12:97:73:1f:d8:d1:58:06:72:
         8d:a5:4d:e3:27:21:2d:94:92:c0:ec:6e:be:4f:27:2e:92:7a:
         14:ef:2c:dd:97:1a:af:5d:b8:59:b0:73:29:3d:a1:07:53:76:
         9a:4c:67:91:0d:c7:0d:c1:27:52:ea:dc:e8:28:c6:ce:54:1f:
         a7:4e:a5:0c:60:b7:5a:42:20:c2:ce:78:a0:fe:73:3a:72:a5:
         50:db:aa:4c:06:49:5c:2e:7e:86:ef:64:9c:82:06:1c:9c:f4:
         10:be:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:31:41 2025 by rpki-client