Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3139332e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          J+K87Eq5yo3f4ZrAXUi9f21pywc12S7WIVsjpFkA+qo=
Subject key identifier:   A8:FE:BE:A1:89:F3:94:09:59:5D:A1:7E:E1:6D:33:E1:9E:99:F3:9E
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       41EA5D66E27C22BB8E26FE45DB021C00E37F7E48
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 02 Apr 2025 18:50:05 +0000
ROA not before:           Wed 02 Apr 2025 18:45:05 +0000
ROA not after:            Wed 01 Apr 2026 18:50:05 +0000
asID:                     20454
IP address blocks:        190.112.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ea:5d:66:e2:7c:22:bb:8e:26:fe:45:db:02:1c:00:e3:7f:7e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:05 2025 GMT
            Not After : Apr  1 18:50:05 2026 GMT
        Subject: CN=A8FEBEA189F39409595DA17EE16D33E19E99F39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:6e:82:82:3b:b1:68:82:de:32:e5:f9:a3:
                    02:7a:4b:48:62:9a:be:04:f8:9a:e5:f0:c3:07:c8:
                    13:e8:0f:e5:5a:ad:23:2e:5d:e9:4f:28:53:ae:ea:
                    ef:3f:0c:8e:f8:57:23:d3:8a:86:a7:0b:db:89:a9:
                    ff:3f:cb:f8:c9:47:7c:88:79:72:51:f2:01:48:14:
                    60:db:d2:23:ec:55:4c:dd:73:af:07:a1:01:92:00:
                    95:58:00:83:1d:46:f0:53:c9:36:eb:3e:76:65:77:
                    d0:5a:e6:b3:26:d5:b5:a5:5e:be:38:5f:20:f1:c5:
                    58:e4:51:47:e0:fc:04:26:d6:13:22:f4:50:ed:e9:
                    47:29:60:fb:d3:68:09:89:f7:aa:1c:67:0a:1d:40:
                    e1:86:25:b3:44:7f:74:e8:aa:28:33:6b:35:64:f8:
                    dd:da:fa:9b:49:fe:69:0b:81:9c:ca:43:bf:af:16:
                    3c:e4:92:75:06:94:bf:e8:1f:12:f7:ba:eb:3b:49:
                    77:98:58:ba:92:0e:19:f6:2b:1b:2a:ab:f9:95:e0:
                    7a:47:b0:f0:58:14:ce:d1:4f:93:7d:2c:2c:a6:0a:
                    1b:31:07:1b:d1:07:e2:12:77:18:b7:15:7c:b2:f5:
                    44:04:ba:8b:f1:e2:21:16:a4:8b:e9:22:ef:d7:71:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FE:BE:A1:89:F3:94:09:59:5D:A1:7E:E1:6D:33:E1:9E:99:F3:9E
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:38:f9:32:9f:e2:45:ce:13:62:c0:12:ec:6f:ca:ca:65:a0:
         6d:1f:67:65:64:2f:d8:48:8c:dd:1b:ee:a3:38:54:72:18:a8:
         bf:3d:ea:3b:16:fb:9e:ef:54:a2:07:b1:08:c3:42:c2:16:69:
         21:b6:03:14:45:58:68:15:2e:fe:5c:64:f7:10:2f:2d:89:0a:
         23:39:0a:ff:09:89:97:83:fc:96:25:9b:0c:ab:ab:5e:d0:af:
         92:d7:37:5d:29:d1:40:61:7c:af:4c:88:e9:9e:59:85:d5:d2:
         a0:84:7c:fe:ef:a3:f6:ce:6e:37:63:7d:95:ff:d5:68:81:2f:
         80:c6:41:6b:7b:9a:ed:fb:59:90:e3:58:4e:b0:96:2e:26:88:
         ba:bf:22:0a:cb:f4:b5:4c:41:9d:df:d7:fa:44:7b:cf:ca:e9:
         01:60:63:cb:78:33:2c:fa:9f:e4:bd:5f:c1:83:b6:f3:8d:76:
         b7:54:77:40:e4:37:01:2e:b8:9a:e6:46:c3:41:ae:c0:cc:ee:
         2d:98:2f:f3:d5:19:cd:6f:27:b7:5d:09:3c:b2:6e:b6:cb:43:
         d5:e9:78:e9:81:0b:cd:cf:af:7b:30:19:27:45:7e:6a:02:93:
         26:7f:8a:da:1d:2b:2b:b7:c4:bc:10:11:ac:02:46:43:b8:f7:
         c8:f3:79:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQepdZuJ8IruOJv5F2wIcAON/fkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA0MDIxODQ1MDVaFw0yNjA0MDExODUwMDVaMDMxMTAvBgNV
BAMTKEE4RkVCRUExODlGMzk0MDk1OTVEQTE3RUUxNkQzM0UxOUU5OUYzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGa26CgjuxaILeMuX5owJ6S0hi
mr4E+Jrl8MMHyBPoD+VarSMuXelPKFOu6u8/DI74VyPTioanC9uJqf8/y/jJR3yI
eXJR8gFIFGDb0iPsVUzdc68HoQGSAJVYAIMdRvBTyTbrPnZld9Ba5rMm1bWlXr44
XyDxxVjkUUfg/AQm1hMi9FDt6UcpYPvTaAmJ96ocZwodQOGGJbNEf3ToqigzazVk
+N3a+ptJ/mkLgZzKQ7+vFjzkknUGlL/oHxL3uus7SXeYWLqSDhn2Kxsqq/mV4HpH
sPBYFM7RT5N9LCymChsxBxvRB+ISdxi3FXyy9UQEuovx4iEWpIvpIu/XccvRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqP6+oYnzlAlZXaF+4W0z4Z6Z854wHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnDB
MA0GCSqGSIb3DQEBCwUAA4IBAQAlOPkyn+JFzhNiwBLsb8rKZaBtH2dlZC/YSIzd
G+6jOFRyGKi/Peo7Fvue71SiB7EIw0LCFmkhtgMURVhoFS7+XGT3EC8tiQojOQr/
CYmXg/yWJZsMq6te0K+S1zddKdFAYXyvTIjpnlmF1dKghHz+76P2zm43Y32V/9Vo
gS+AxkFre5rt+1mQ41hOsJYuJoi6vyIKy/S1TEGd39f6RHvPyukBYGPLeDMs+p/k
vV/Bg7bzjXa3VHdA5DcBLria5kbDQa7AzO4tmC/z1RnNbye3XQk8sm62y0PV6Xjp
gQvNz697MBknRX5qApMmf4raHSsrt8S8EBGsAkZDuPfI83nx
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:57 2025 by rpki-client