Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          4m74haSTFT1EJaIbtb3pbHkFlyAwzP3cpCIQRvFBrXU=
Subject key identifier:   34:42:6B:6B:CC:22:27:BF:1B:84:85:A6:BB:93:67:7B:91:B9:FA:04
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2FA6D4CC6FC91B58A654A358BB9D0A0A978207
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 09 May 2025 11:35:03 +0000
ROA not before:           Fri 09 May 2025 11:30:03 +0000
ROA not after:            Fri 08 May 2026 11:35:03 +0000
asID:                     16509
IP address blocks:        190.112.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 17:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a6:d4:cc:6f:c9:1b:58:a6:54:a3:58:bb:9d:0a:0a:97:82:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 11:30:03 2025 GMT
            Not After : May  8 11:35:03 2026 GMT
        Subject: CN=34426B6BCC2227BF1B8485A6BB93677B91B9FA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:14:f3:2e:97:31:ed:93:53:dd:23:77:9f:
                    54:f8:b6:ae:91:c5:f3:f3:a5:70:0a:9c:9f:a3:c6:
                    a8:0f:da:9f:b0:ab:a7:3a:c9:61:a2:6c:32:67:11:
                    e4:b5:8c:f0:74:36:7c:83:8d:c8:14:6d:8d:8c:f9:
                    cc:8b:57:e5:bf:81:70:cb:e5:13:45:df:9b:4b:c6:
                    ad:6d:ac:48:12:e5:93:33:ba:d5:39:48:90:3f:87:
                    1b:46:ec:2a:e4:cb:1a:5e:10:80:49:70:38:ee:3b:
                    d1:eb:e3:4b:c1:88:d0:d7:97:bc:f6:90:73:8a:62:
                    53:de:da:2f:c3:80:f1:06:15:92:42:40:0f:be:30:
                    b0:61:a3:47:54:9c:32:8a:14:99:50:bb:bb:20:ff:
                    ed:b2:7b:b3:7e:4c:5c:7d:92:fd:e3:f3:10:b1:e9:
                    39:57:e0:23:1e:82:78:20:19:85:a5:89:7c:46:83:
                    af:f9:8a:d6:89:c5:82:92:23:9e:df:32:63:88:52:
                    59:6e:ab:37:c8:f0:85:d2:8c:9d:62:b6:02:ba:3d:
                    02:b9:5c:0d:b1:8b:47:22:a4:41:f7:e6:d6:4f:25:
                    f2:52:a2:01:55:f5:a3:4a:f1:ae:2e:ea:0b:18:1c:
                    60:2b:0d:75:a6:cf:47:75:71:f0:8d:e8:86:2a:8b:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:42:6B:6B:CC:22:27:BF:1B:84:85:A6:BB:93:67:7B:91:B9:FA:04
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:4a:28:61:1c:40:f6:9f:94:a2:83:7d:cb:05:7c:5f:87:
         99:b3:b1:19:ab:a4:c7:ef:b8:f6:66:ae:20:cc:d0:27:70:f8:
         5f:44:8b:a2:7d:21:7b:0e:a8:9f:e0:72:03:7c:5f:57:11:ed:
         c7:82:cd:05:ae:7d:b9:33:23:70:40:a2:9b:57:4b:f1:35:60:
         b3:d0:b0:c6:5d:62:5b:70:24:eb:36:0c:7d:a0:e1:44:9c:44:
         5b:f0:ba:bc:e5:de:50:ad:bc:43:69:73:c0:5a:45:35:6e:bb:
         29:9e:dd:33:c6:a3:9a:62:15:f0:ac:15:5f:20:17:c2:59:5a:
         37:5d:91:e6:63:e7:48:02:11:62:e5:8d:32:ed:f0:b0:5d:d3:
         c6:34:8a:fc:24:24:e6:f5:46:28:10:94:9c:51:a9:88:b9:64:
         bc:b6:0e:35:b7:b4:28:55:bb:09:66:14:0d:d0:c3:81:9a:6a:
         ce:54:b3:b8:4d:86:83:70:08:8c:48:68:e3:33:4d:1b:e6:86:
         71:d7:3f:df:3f:e6:40:ee:68:ae:bb:18:bf:b4:ea:23:f8:a7:
         fb:83:81:d6:5d:da:62:f2:88:7c:49:71:e7:fa:e2:cf:a0:a0:
         bb:7f:18:f9:ab:3a:3b:ce:57:7a:2a:0d:52:7e:69:f3:f2:72:
         8c:69:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:28:28 2025 by rpki-client