Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203132313839.roa
File:                     3139302e3131322e3139352e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          xRyZSDGFHFu/A2yiOfjXKc8MtMXOBER8a8FmrO0z8eU=
Subject key identifier:   28:92:2D:96:F6:16:77:D2:6A:C8:30:2F:76:EE:4E:22:6A:49:1C:72
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       60194E1ACBD7B4FFCD4AED11E9B41D9DD268F463
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203132313839.roa
Signing time:             Wed 02 Apr 2025 18:50:02 +0000
ROA not before:           Wed 02 Apr 2025 18:45:02 +0000
ROA not after:            Wed 01 Apr 2026 18:50:02 +0000
asID:                     12189
IP address blocks:        190.112.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:4e:1a:cb:d7:b4:ff:cd:4a:ed:11:e9:b4:1d:9d:d2:68:f4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:02 2025 GMT
            Not After : Apr  1 18:50:02 2026 GMT
        Subject: CN=28922D96F61677D26AC8302F76EE4E226A491C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:a4:cc:6f:23:ec:85:33:2d:73:0a:92:26:
                    f7:4e:89:2c:60:22:98:e8:bd:72:a5:dc:9f:c3:47:
                    69:05:01:6b:46:c4:8a:95:96:24:c9:20:57:6c:fd:
                    a4:c4:76:4d:73:1a:17:c3:94:a9:25:cc:65:30:94:
                    eb:e4:f4:5e:6f:f7:96:a9:61:af:22:6e:23:45:0f:
                    6c:93:2e:dd:34:90:ff:22:8e:cb:e9:47:fa:5f:4e:
                    8d:e4:6d:d8:37:1c:d8:7b:4b:fc:97:e4:7d:41:4d:
                    98:a6:fa:90:ef:41:21:c1:97:53:a9:bc:e1:a0:e5:
                    13:c3:f6:ee:23:5a:a1:10:f8:bd:71:50:d7:48:cc:
                    bf:42:da:c8:c4:37:5b:9a:fb:63:fb:fe:17:f8:b6:
                    6f:3d:98:11:bb:21:bc:03:91:ec:db:41:56:a4:74:
                    69:a0:98:f0:4b:27:39:d5:bd:3e:45:1d:ec:31:9f:
                    46:b9:1d:ab:4d:be:76:e9:21:b7:5e:e0:21:11:cd:
                    d3:6c:45:9e:3a:c1:39:71:d6:b4:02:6a:6d:ce:87:
                    d0:76:a1:b7:fb:9b:a7:a0:e0:71:28:68:9e:ee:ac:
                    1e:44:4c:83:72:b9:eb:75:43:3b:cf:2a:30:25:df:
                    0b:5d:2b:74:e0:e2:a1:fe:28:68:3d:4f:66:8d:72:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:92:2D:96:F6:16:77:D2:6A:C8:30:2F:76:EE:4E:22:6A:49:1C:72
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:3b:6d:a7:af:40:96:30:68:f8:99:18:9a:33:12:9f:e0:
         a8:9d:bb:94:b0:1e:3c:98:e1:34:2c:6e:26:bb:02:7b:c4:35:
         8e:df:9f:c9:63:c2:73:11:55:66:17:6b:88:dc:42:54:e2:fd:
         d0:db:56:6e:d4:9e:1c:ee:26:56:27:bf:d4:e8:00:f2:1c:e4:
         5f:7a:40:7b:3a:ed:5a:f0:a3:b5:86:2f:87:85:7e:e6:4b:ba:
         ea:8b:c0:eb:11:f5:d5:d2:2e:98:ba:32:5b:28:09:60:2c:ec:
         2f:eb:31:19:03:eb:19:92:3b:bd:19:93:43:42:70:5e:49:0a:
         a7:e9:63:2e:0c:65:79:9e:ed:45:7c:5a:d8:82:e7:2f:6f:0d:
         23:db:d6:05:ee:8b:92:b9:8f:d3:ef:8f:d0:12:86:9c:41:5b:
         4b:e0:8d:96:16:63:43:ed:5a:bf:64:02:49:10:d5:d0:78:b1:
         c1:68:eb:91:be:7b:46:18:e2:a4:59:b8:c8:fa:19:38:fe:00:
         18:82:81:fe:76:45:2b:6a:6e:d1:9f:a3:9d:65:48:90:20:39:
         22:c9:be:ad:5d:bf:e1:16:f4:3e:f3:4a:ea:1a:e4:f9:d9:67:
         83:f0:ac:7f:2a:99:f7:88:b2:77:80:fb:e0:0d:4c:69:4f:b7:
         1e:76:80:84
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYBlOGsvXtP/NSu0R6bQdndJo9GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA0MDIxODQ1MDJaFw0yNjA0MDExODUwMDJaMDMxMTAvBgNV
BAMTKDI4OTIyRDk2RjYxNjc3RDI2QUM4MzAyRjc2RUU0RTIyNkE0OTFDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sqTMbyPshTMtcwqSJvdOiSxg
IpjovXKl3J/DR2kFAWtGxIqVliTJIFds/aTEdk1zGhfDlKklzGUwlOvk9F5v95ap
Ya8ibiNFD2yTLt00kP8ijsvpR/pfTo3kbdg3HNh7S/yX5H1BTZim+pDvQSHBl1Op
vOGg5RPD9u4jWqEQ+L1xUNdIzL9C2sjEN1ua+2P7/hf4tm89mBG7IbwDkezbQVak
dGmgmPBLJznVvT5FHewxn0a5HatNvnbpIbde4CERzdNsRZ46wTlx1rQCam3Oh9B2
obf7m6eg4HEoaJ7urB5ETINyuet1QzvPKjAl3wtdK3Tg4qH+KGg9T2aNcjLTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKJItlvYWd9JqyDAvdu5OImpJHHIwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzEzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnDD
MA0GCSqGSIb3DQEBCwUAA4IBAQA6fTttp69AljBo+JkYmjMSn+ConbuUsB48mOE0
LG4muwJ7xDWO35/JY8JzEVVmF2uI3EJU4v3Q21Zu1J4c7iZWJ7/U6ADyHORfekB7
Ou1a8KO1hi+HhX7mS7rqi8DrEfXV0i6YujJbKAlgLOwv6zEZA+sZkju9GZNDQnBe
SQqn6WMuDGV5nu1FfFrYgucvbw0j29YF7ouSuY/T74/QEoacQVtL4I2WFmND7Vq/
ZAJJENXQeLHBaOuRvntGGOKkWbjI+hk4/gAYgoH+dkUram7Rn6OdZUiQIDkiyb6t
Xb/hFvQ+80rqGuT52WeD8Kx/Kpn3iLJ3gPvgDUxpT7cedoCE
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:35:48 2025 by rpki-client