Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          FEcx8raf4N24f7IopJ3ijIznNpw3T9PmF8x1YVQdWKw=
Subject key identifier:   C8:E2:63:80:AB:07:C2:45:44:1C:3D:CE:43:B4:63:78:4C:09:CC:7E
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       697A3459F758E6BC8FFBC288AA3B3B202030B2C5
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 02 Apr 2025 18:50:01 +0000
ROA not before:           Wed 02 Apr 2025 18:45:01 +0000
ROA not after:            Wed 01 Apr 2026 18:50:01 +0000
asID:                     20454
IP address blocks:        190.112.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:34:59:f7:58:e6:bc:8f:fb:c2:88:aa:3b:3b:20:20:30:b2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:01 2025 GMT
            Not After : Apr  1 18:50:01 2026 GMT
        Subject: CN=C8E26380AB07C245441C3DCE43B463784C09CC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:ae:ce:f5:1c:05:d1:4a:ba:39:ad:c3:d0:
                    55:c6:ef:1a:a9:3f:4f:ef:d9:bc:30:14:3d:40:37:
                    a8:06:65:86:a5:ce:c4:3e:c0:9c:f4:f5:b7:3c:8a:
                    24:2f:33:bf:ca:81:53:77:8a:5d:f7:1b:30:f1:ad:
                    d2:2a:b6:db:9f:70:89:b3:13:e3:e6:5f:de:90:14:
                    5d:fa:79:2d:13:43:df:43:79:60:74:3b:2c:39:9e:
                    76:fa:04:d7:7c:1e:5d:21:cf:b4:c0:4e:fa:3d:72:
                    26:4d:1e:fb:d3:4c:96:b5:40:75:f0:18:02:c4:ad:
                    17:49:72:b8:34:fd:8b:d0:2c:c7:7e:97:50:d9:e4:
                    6d:9a:44:89:81:d7:d7:35:2e:f0:50:9f:b1:82:45:
                    30:2f:14:a2:08:9f:c7:32:6b:9a:80:d3:3d:27:20:
                    e8:23:86:ff:4a:70:9e:b8:2d:83:34:84:87:62:8d:
                    d9:ba:99:17:6a:88:a9:47:94:70:52:36:38:72:4a:
                    df:00:ca:52:de:6c:88:56:e2:e4:8c:c1:00:a1:c6:
                    55:73:2f:64:11:0d:97:d5:1c:ce:2e:7a:15:3b:2b:
                    2e:98:b2:2a:df:d3:22:d5:a2:4b:41:6d:98:f1:b1:
                    e1:c4:bb:37:bb:ff:89:09:58:99:11:58:fd:26:f8:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E2:63:80:AB:07:C2:45:44:1C:3D:CE:43:B4:63:78:4C:09:CC:7E
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:59:e3:d7:55:b4:3f:c3:3a:fa:36:34:30:0a:ba:7c:93:
         0c:a2:73:68:55:72:e2:94:82:80:3e:32:bd:d3:e4:7e:21:9f:
         7e:6e:1b:30:eb:1b:8d:63:86:86:3a:e9:bf:f3:e8:64:cf:50:
         be:25:a8:9f:ad:91:98:e9:20:92:05:6e:a5:a3:85:e1:90:f3:
         23:3c:6e:52:48:68:d0:6e:bc:3c:b9:7d:ed:03:36:ab:b7:51:
         98:0e:43:a2:10:86:2b:54:dc:e1:46:fc:b9:67:84:dc:76:3a:
         f2:80:7b:4b:23:0b:11:41:b1:67:61:de:b1:e5:63:7f:eb:4c:
         2c:07:39:0a:fa:4b:d7:e7:83:94:c2:5c:aa:23:8e:d7:19:91:
         70:f0:2e:f2:3e:88:32:37:b1:8f:85:2f:57:02:58:e9:c2:9d:
         1f:40:a1:2b:a3:a9:e1:4f:33:ee:4a:fb:f0:b0:32:1a:26:3e:
         48:95:42:82:cd:1c:6b:6c:48:36:7b:a8:aa:9a:6d:54:28:66:
         52:d3:47:ce:e8:e1:50:c6:9d:7e:bb:5c:0d:8f:7e:97:64:ff:
         ed:5a:72:78:7a:3a:42:e7:87:3e:e5:a4:ce:11:58:48:2a:63:
         78:55:c4:14:94:c3:24:7c:ee:01:ca:5b:0e:80:bf:e0:72:6f:
         a6:8c:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:56 2025 by rpki-client