Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343733.roa
File:                     3139302e3131322e3230312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          g6CZ9Hn6vhyIA7sMeNP7DJr1Dd/XUVhQM/uHxeQ2+q0=
Subject key identifier:   DA:62:F0:71:F6:95:58:BE:7F:D5:62:EA:26:AE:47:32:99:B5:67:C4
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       5F8B5F2BAF1E374FABE0021D83C9D83968457172
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 09 May 2025 10:50:02 +0000
ROA not before:           Fri 09 May 2025 10:45:02 +0000
ROA not after:            Fri 08 May 2026 10:50:02 +0000
asID:                     20473
IP address blocks:        190.112.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8b:5f:2b:af:1e:37:4f:ab:e0:02:1d:83:c9:d8:39:68:45:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 10:45:02 2025 GMT
            Not After : May  8 10:50:02 2026 GMT
        Subject: CN=DA62F071F69558BE7FD562EA26AE473299B567C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:bd:2f:55:7c:62:14:33:61:18:cf:c0:ca:
                    8d:00:a1:4f:09:d3:49:de:1d:f6:23:98:48:20:3a:
                    3b:ff:07:d5:46:13:12:32:68:9b:6c:d9:88:de:7f:
                    a8:10:de:4f:6f:97:e1:aa:5e:ab:63:e1:67:3d:11:
                    70:6f:9f:b1:11:19:af:0a:6b:d6:a8:71:7c:34:fd:
                    0e:ab:e8:9d:75:6b:32:45:90:dc:7a:d9:01:05:40:
                    0e:25:93:42:bd:69:ce:94:ad:b1:4a:d7:27:ed:4b:
                    a2:40:70:01:0a:16:f3:1d:05:82:ec:c2:dc:80:13:
                    21:d5:15:48:a2:3b:5c:5e:7d:5c:78:96:a9:3c:f0:
                    94:e8:84:4e:20:2e:d1:84:bb:8e:56:9f:14:47:f4:
                    6b:b3:e7:e0:e1:67:3b:bb:c6:04:bc:f9:ec:c4:97:
                    3e:dd:97:e5:8b:6c:3c:8d:c7:b6:1a:02:47:70:71:
                    ec:70:92:46:b7:2c:3a:3e:c6:19:ac:95:74:16:a3:
                    a1:cc:19:ce:2b:8d:dc:80:2a:84:47:f2:51:3a:2f:
                    76:3f:ae:3a:46:ed:87:06:cc:21:b4:71:0e:69:58:
                    15:78:fa:42:62:a8:b8:36:72:76:23:d7:77:1f:99:
                    61:26:90:1e:71:ff:3b:b8:89:46:4a:ec:90:e2:31:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:F0:71:F6:95:58:BE:7F:D5:62:EA:26:AE:47:32:99:B5:67:C4
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:89:8e:0a:03:80:07:bf:57:4d:d7:2d:05:e5:6f:19:2a:c8:
         0e:1e:21:3a:80:71:93:4d:24:d0:c9:9c:bf:2b:a2:2b:c9:b6:
         df:fa:af:17:38:5e:10:40:55:3c:0b:72:78:dc:85:bc:94:ea:
         54:2e:7e:0c:4d:3c:cb:42:06:06:3e:34:0d:34:f7:75:6c:31:
         ce:33:ea:05:73:9e:9c:d5:3c:d6:09:a4:31:33:3b:b2:09:f7:
         07:a2:5d:39:2f:d4:4a:a9:b1:db:63:1c:1f:e3:e6:d9:3f:34:
         c1:55:1e:1a:16:7e:be:64:0a:93:0a:6a:05:11:fe:ed:ca:e1:
         e3:4b:8b:7a:04:d5:26:2c:75:0b:14:cc:73:cc:36:8a:8a:69:
         1e:b2:04:f5:0f:85:66:56:90:14:4d:5d:77:7b:dd:1d:28:3d:
         ec:a4:92:ab:5e:62:72:c3:de:9e:4f:c6:95:cd:04:11:00:7c:
         95:57:cf:20:a9:aa:0b:ad:05:90:d8:ed:d6:0f:83:78:07:c9:
         8e:95:63:81:c8:2a:fb:d4:cb:90:4a:56:14:42:f8:44:53:73:
         14:30:32:a0:df:20:64:9c:58:d7:dd:99:1c:d1:63:82:c9:21:
         99:54:e5:ed:ea:c5:be:84:38:db:b0:de:f6:9e:d3:1e:f5:2a:
         60:69:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:11:32 2025 by rpki-client