Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3230322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          8mxAuc3disfgIYRELKYj0tuCLQMx0LD+CGdrcbQR1Bo=
Subject key identifier:   84:34:B8:0E:A3:80:95:A6:F4:9C:93:B3:57:0E:97:4E:A5:88:AD:76
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       5B493F31C5EB16A857A323AECAB05AFB87F072BA
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 09 May 2025 11:35:03 +0000
ROA not before:           Fri 09 May 2025 11:30:03 +0000
ROA not after:            Fri 08 May 2026 11:35:03 +0000
asID:                     16509
IP address blocks:        190.112.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:49:3f:31:c5:eb:16:a8:57:a3:23:ae:ca:b0:5a:fb:87:f0:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 11:30:03 2025 GMT
            Not After : May  8 11:35:03 2026 GMT
        Subject: CN=8434B80EA38095A6F49C93B3570E974EA588AD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:3d:47:df:83:8c:29:b3:df:3e:23:db:bc:
                    61:35:10:f7:25:12:14:1e:eb:fa:e4:5c:7a:29:a1:
                    9e:7e:70:fb:d8:7c:44:a6:c2:cf:3a:37:ac:18:5b:
                    dd:e3:a1:04:31:1d:9b:0f:24:ea:19:3d:ab:c4:ce:
                    30:14:e4:8c:20:ca:12:7b:eb:f5:3b:cb:8f:59:cc:
                    36:da:f6:ee:45:08:09:fc:6e:5f:a7:72:96:45:97:
                    f4:4d:38:75:ad:47:2c:d0:a2:96:28:8e:0f:1a:20:
                    21:56:41:25:7f:50:95:86:bf:5c:47:65:c9:61:a6:
                    0e:97:d9:ef:b5:b9:65:8b:ea:75:90:d7:b9:be:fd:
                    23:28:11:8d:53:50:44:34:55:22:cc:0b:50:23:d0:
                    59:18:83:a2:37:8c:34:11:af:43:69:ca:fc:bf:f5:
                    ba:a3:f7:ff:e8:35:53:9a:cd:e9:5a:86:e0:13:66:
                    09:86:cf:a9:3a:f0:6a:6d:d0:33:d4:9f:8c:89:5b:
                    03:d0:e0:31:3f:40:ed:48:ea:b9:96:db:2d:48:c8:
                    7c:66:ad:4a:f7:6c:d5:7d:b0:39:25:a7:4f:93:db:
                    5b:12:69:14:57:a1:9d:db:f0:b6:71:1b:eb:6a:29:
                    e0:75:8d:f9:55:ac:4a:9a:1a:26:bc:04:3c:b3:28:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:B8:0E:A3:80:95:A6:F4:9C:93:B3:57:0E:97:4E:A5:88:AD:76
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:f3:2e:92:b1:0e:55:1b:fe:c3:ab:f0:c6:b2:74:da:9a:
         aa:5e:b4:d7:04:a6:e5:22:60:f6:64:4d:2f:c1:b8:9f:47:86:
         9a:d7:05:0a:75:69:0b:d4:ed:35:77:4e:71:c3:ce:d7:d1:ef:
         8e:97:48:91:83:93:7d:a7:0a:e3:1f:37:00:22:5e:95:52:68:
         e9:2a:e1:2f:f3:0d:5f:2d:4f:6d:f3:05:66:f5:0d:f9:81:a9:
         b7:33:bd:1b:40:db:41:d5:39:6f:7a:0e:b4:2f:36:00:b5:f6:
         88:5d:50:8d:88:be:66:25:88:cd:4e:ed:c2:95:ff:0c:50:7a:
         04:fc:a9:c7:c0:9b:02:54:9d:c2:1e:ce:30:7e:0a:2a:13:4e:
         86:09:42:e9:e2:a9:91:ad:19:8b:f1:6d:fb:28:c2:64:fd:56:
         90:dd:55:72:fe:aa:ca:05:5b:d5:83:7e:bf:41:40:5f:c8:3e:
         b5:7e:46:a7:25:71:23:b7:34:dc:73:12:68:52:62:b0:10:80:
         ec:b2:81:8f:5b:44:7c:9b:c0:8d:07:80:06:03:78:0a:6b:60:
         1d:e4:98:3c:6b:4e:83:e5:cd:ea:28:67:cf:c7:f1:4c:a3:87:
         6f:b0:37:74:ea:be:c7:87:b4:5f:89:c9:e8:72:93:94:50:cc:
         0b:eb:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:56:36 2025 by rpki-client