Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa
File:                     3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          ZiVjW0CyYT1TGKrlzboczo2WM/U6WP5ipDiprXqRiDM=
Subject key identifier:   90:56:36:DF:0E:FE:E2:02:84:CF:0B:23:4F:70:54:6A:77:EC:A2:4F
Certificate issuer:       /CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
Certificate serial:       24302817334AFB867D935A9937AEE4F70BCCE2BD
Authority key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa
Signing time:             Tue 12 Aug 2025 08:15:01 +0000
ROA not before:           Tue 12 Aug 2025 08:10:01 +0000
ROA not after:            Tue 11 Aug 2026 08:15:01 +0000
asID:                     272027
IP address blocks:        190.112.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:30:28:17:33:4a:fb:86:7d:93:5a:99:37:ae:e4:f7:0b:cc:e2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
        Validity
            Not Before: Aug 12 08:10:01 2025 GMT
            Not After : Aug 11 08:15:01 2026 GMT
        Subject: CN=905636DF0EFEE20284CF0B234F70546A77ECA24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:c1:02:5a:03:44:01:41:63:80:f1:2d:a6:
                    25:13:e0:f3:82:46:e1:d5:ee:9f:19:9e:6f:1b:01:
                    59:b3:49:01:e8:51:91:eb:7f:0d:b7:6a:da:31:31:
                    2a:b9:6f:d5:0a:35:44:f7:ab:28:c9:00:b6:92:7f:
                    25:e5:2e:99:05:20:0b:04:1d:4f:90:05:29:c0:97:
                    cd:0b:b8:d3:b6:29:7a:5e:d7:bb:55:52:ab:15:e7:
                    17:64:72:c9:86:c9:c1:34:5d:f3:c3:dd:7b:57:16:
                    6a:00:8e:8b:2c:2e:60:3b:e0:df:ba:fe:37:67:69:
                    dd:f6:68:1b:ce:8c:5f:17:89:5f:f6:61:ee:30:48:
                    32:fc:7a:a3:66:da:91:94:43:df:10:31:f6:70:ee:
                    fe:dc:a3:4d:3d:83:f3:15:ed:f9:02:de:72:78:da:
                    31:05:ca:e7:e8:dc:60:77:2b:99:e1:14:08:f5:28:
                    41:c7:b8:39:86:48:bc:8d:15:4f:24:b5:a6:dc:9d:
                    ee:50:54:65:a2:c2:66:ca:9d:76:32:bf:5d:80:6e:
                    02:84:ca:05:d2:11:53:63:39:1b:e1:23:ed:bc:1f:
                    c8:40:f9:30:79:65:01:0f:ca:68:94:8d:7d:37:3f:
                    ae:37:46:10:8b:61:23:3d:c5:ae:73:68:e7:6e:53:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:56:36:DF:0E:FE:E2:02:84:CF:0B:23:4F:70:54:6A:77:EC:A2:4F
            X509v3 Authority Key Identifier:
                keyid:97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:28:0d:e6:67:b8:cb:89:e2:8d:97:bb:ff:70:72:e7:e7:8f:
         7d:db:67:93:43:d1:02:8b:57:d5:60:e7:97:83:24:66:34:10:
         13:15:1c:de:58:f9:70:a3:bd:e8:02:da:80:e7:82:54:6e:6d:
         b6:6e:68:f6:86:10:ed:30:82:26:39:fe:72:fc:b4:bf:8f:f8:
         20:ab:78:03:c6:46:e2:65:f3:a6:48:75:7f:c9:31:3c:64:8f:
         cb:15:5e:90:f3:aa:0c:8a:b4:67:19:59:f8:89:de:33:75:99:
         6a:99:d8:87:b4:61:49:7c:51:a5:83:02:e1:93:f9:b8:b9:ff:
         fb:9d:9a:c9:4b:0e:6b:65:a2:69:e2:56:12:9e:36:c4:9f:c6:
         da:7e:63:d7:87:bb:e7:79:09:0c:f6:0a:c6:02:86:40:f3:06:
         ae:d5:3f:eb:f3:87:69:2f:21:ad:c8:85:90:08:3f:fe:ed:96:
         65:01:2f:12:ff:51:06:10:0e:ba:d1:ee:3d:e6:bb:5e:be:d5:
         af:37:6c:91:b2:f9:e7:89:83:5a:ff:55:95:b8:c7:94:48:59:
         8a:20:93:d8:1d:02:a2:64:7b:81:3e:cf:90:38:cb:fe:bf:47:
         bf:86:34:fa:7d:1d:aa:cb:5a:f0:20:e8:be:88:d4:9b:33:4e:
         3e:bf:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:40:06 2025 by rpki-client