Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          /P0+4AMLocAZi8fs/y2KzlUQfWYY3YUvgnG4XWzBses=
Subject key identifier:   4F:61:73:C0:90:5A:AD:15:56:AE:4B:98:E7:8F:1E:F3:52:AE:68:01
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       7745545018F051561FAE892E5374B66868052300
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa
Signing time:             Thu 14 Aug 2025 17:35:40 +0000
ROA not before:           Thu 14 Aug 2025 17:30:40 +0000
ROA not after:            Thu 13 Aug 2026 17:35:40 +0000
asID:                     262182
IP address blocks:        190.52.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:45:54:50:18:f0:51:56:1f:ae:89:2e:53:74:b6:68:68:05:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Aug 14 17:30:40 2025 GMT
            Not After : Aug 13 17:35:40 2026 GMT
        Subject: CN=4F6173C0905AAD1556AE4B98E78F1EF352AE6801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:8e:b9:45:d1:1f:20:e8:b7:b2:74:bc:57:
                    1b:e5:50:dd:51:10:04:2a:cb:55:04:28:97:09:ae:
                    ce:5c:99:67:88:68:ea:ef:37:cc:3b:5f:ae:eb:26:
                    6b:85:48:16:d9:9b:fa:71:62:c2:b9:14:68:70:25:
                    59:99:e0:4a:ea:13:a6:43:ad:6c:90:0a:87:b2:b5:
                    94:ba:17:d5:5d:1a:6c:23:67:f4:9f:97:20:ee:e1:
                    d9:7b:4e:2a:ba:14:1d:29:1c:ac:89:42:d9:c8:37:
                    6e:44:5a:a0:c0:b8:49:5c:81:0b:39:37:96:87:fe:
                    bf:d1:00:5c:8f:1b:52:67:77:fb:cd:9e:40:75:a0:
                    7d:8d:27:67:c4:0a:58:53:3d:30:4a:9a:79:c5:98:
                    0c:2e:1a:d5:3e:7e:f3:fc:92:75:42:5c:34:8b:dd:
                    d7:d0:2e:c6:c6:6a:d8:d6:68:89:07:64:cc:50:e3:
                    b1:58:70:2a:2d:f1:a1:4b:20:4f:ed:37:0d:07:4d:
                    4f:a0:be:7a:8b:79:4a:dc:4d:d8:b2:00:60:80:ad:
                    c2:05:04:19:a6:e1:b0:e9:59:53:52:29:b4:e3:ee:
                    a1:ab:49:8f:92:83:1b:6f:95:08:12:42:af:b2:d5:
                    2d:aa:58:b3:26:e5:7c:e4:9a:6a:6f:6a:da:ea:f7:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:73:C0:90:5A:AD:15:56:AE:4B:98:E7:8F:1E:F3:52:AE:68:01
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132322e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:aa:7a:4e:82:a3:6d:ae:b8:c1:b2:68:37:c5:c8:ea:1c:
         3e:2a:45:72:40:c5:37:b9:1a:6d:69:0e:13:6c:9f:54:12:73:
         28:0f:70:48:9c:d2:85:d8:60:55:79:40:a4:66:9d:c5:76:0a:
         8f:ea:73:b0:a7:fd:1c:fe:66:3f:cd:bb:a5:15:03:ee:74:fd:
         53:76:84:b4:7f:43:bc:d0:4f:b8:c6:30:6c:e7:4f:27:c0:ae:
         01:94:60:5c:d7:c7:c4:aa:b5:93:7c:fa:ea:10:b3:e8:42:a6:
         dd:9f:fc:78:a1:5f:a2:5d:a0:7f:79:dc:93:ff:51:93:09:1a:
         0f:b0:03:c4:75:46:a9:57:9e:00:12:77:c0:5b:7f:71:5f:48:
         d4:e0:aa:3e:c8:4d:4d:69:e2:6b:94:1f:79:b6:f3:0a:1b:f4:
         56:3e:8c:86:f1:eb:c7:75:c4:8e:32:7b:98:b7:45:03:70:0c:
         9b:4b:20:46:5f:2f:7e:06:b1:2d:31:49:82:ed:31:99:79:c3:
         aa:ac:2e:e2:2a:ca:78:04:f5:ab:48:92:8e:90:84:a9:d7:cf:
         37:e1:9b:6f:38:74:8f:a2:5a:16:0f:01:e6:0e:3a:3e:85:2a:
         d2:04:b6:3c:9c:20:bd:d4:6b:ba:13:70:93:d1:6a:9d:90:7a:
         7c:b8:d6:3b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd0VUUBjwUVYfrokuU3S2aGgFIwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNTA4MTQxNzMwNDBaFw0yNjA4MTMxNzM1NDBaMDMxMTAvBgNV
BAMTKDRGNjE3M0MwOTA1QUFEMTU1NkFFNEI5OEU3OEYxRUYzNTJBRTY4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYl465RdEfIOi3snS8VxvlUN1R
EAQqy1UEKJcJrs5cmWeIaOrvN8w7X67rJmuFSBbZm/pxYsK5FGhwJVmZ4ErqE6ZD
rWyQCoeytZS6F9VdGmwjZ/SflyDu4dl7Tiq6FB0pHKyJQtnIN25EWqDAuElcgQs5
N5aH/r/RAFyPG1Jnd/vNnkB1oH2NJ2fEClhTPTBKmnnFmAwuGtU+fvP8knVCXDSL
3dfQLsbGatjWaIkHZMxQ47FYcCot8aFLIE/tNw0HTU+gvnqLeUrcTdiyAGCArcIF
BBmm4bDpWVNSKbTj7qGrSY+SgxtvlQgSQq+y1S2qWLMm5Xzkmmpvatrq937pAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUT2FzwJBarRVWrkuY548e81KuaAEwHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzkzMDJlMzUzMjJlMzEzMjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvjR6
MA0GCSqGSIb3DQEBCwUAA4IBAQBN26p6ToKjba64wbJoN8XI6hw+KkVyQMU3uRpt
aQ4TbJ9UEnMoD3BInNKF2GBVeUCkZp3FdgqP6nOwp/0c/mY/zbulFQPudP1TdoS0
f0O80E+4xjBs508nwK4BlGBc18fEqrWTfPrqELPoQqbdn/x4oV+iXaB/edyT/1GT
CRoPsAPEdUapV54AEnfAW39xX0jU4Ko+yE1NaeJrlB95tvMKG/RWPoyG8evHdcSO
MnuYt0UDcAybSyBGXy9+BrEtMUmC7TGZecOqrC7iKsp4BPWrSJKOkISp18834Ztv
OHSPoloWDwHmDjo+hSrSBLY8nCC91Gu6E3CT0WqdkHp8uNY7
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:56:20 2025 by rpki-client