Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa
File:                     3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          ERLMBRyV17FRo0aEf7GxlRJWk7L76/9Iye1KlF0Sr/k=
Subject key identifier:   9E:03:51:46:CD:E7:B5:7A:DF:CE:10:00:72:ED:8A:31:22:66:3C:DF
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       1DAF8DC381E860066AF080E04970C9B818E85290
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa
Signing time:             Tue 04 Feb 2025 20:00:13 +0000
ROA not before:           Tue 04 Feb 2025 19:55:13 +0000
ROA not after:            Tue 03 Feb 2026 20:00:13 +0000
asID:                     60022
IP address blocks:        190.105.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:af:8d:c3:81:e8:60:06:6a:f0:80:e0:49:70:c9:b8:18:e8:52:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Feb  4 19:55:13 2025 GMT
            Not After : Feb  3 20:00:13 2026 GMT
        Subject: CN=9E035146CDE7B57ADFCE100072ED8A3122663CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:20:ee:ff:80:6e:7d:a3:7f:32:87:ba:89:
                    bd:de:db:20:84:1a:c1:98:87:fc:83:56:ce:f0:17:
                    3a:9e:00:c6:4f:7a:b6:bf:b2:31:55:3c:9c:bd:22:
                    1d:31:b8:1c:27:21:0d:81:5c:62:f8:a6:3f:fa:a9:
                    f5:e2:05:11:97:19:6c:ae:f3:61:7f:be:07:26:fc:
                    7f:4c:97:d0:fc:5c:a5:20:6d:c7:fe:7d:8a:10:e3:
                    b8:d6:f0:8c:4f:88:5e:0d:df:fa:05:7f:d9:39:ea:
                    29:67:75:e5:56:45:40:29:fc:f2:68:d1:31:26:8b:
                    d0:12:91:0c:11:1c:3f:6f:60:d2:e8:51:0c:b9:91:
                    a2:63:d9:aa:6d:b6:8e:e3:04:f7:c4:0c:0d:27:6e:
                    f4:78:99:77:40:f7:fd:b4:f1:de:63:2b:85:a8:78:
                    23:d4:13:db:ef:de:83:dc:1b:60:0f:c6:d0:6e:fa:
                    42:99:fa:a4:31:60:17:2c:78:9a:75:21:61:b8:8a:
                    24:21:d5:f8:fc:38:65:21:3f:f2:2e:59:e9:62:24:
                    42:5f:3e:15:32:92:bd:a2:85:ba:01:af:bb:11:83:
                    1b:49:b4:57:f6:9f:7c:44:e6:ae:8d:11:d3:08:4a:
                    6a:cc:4e:73:a9:2c:c1:00:8b:43:7f:10:97:2d:9b:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:03:51:46:CD:E7:B5:7A:DF:CE:10:00:72:ED:8A:31:22:66:3C:DF
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:e7:c8:ad:8c:9b:9d:c6:73:62:23:d2:46:6e:8c:76:54:b4:
         0b:d0:f6:42:f0:38:b7:e2:58:3c:97:23:b8:de:1d:9f:33:6b:
         73:11:4b:c3:1b:57:59:53:85:2b:5c:af:14:21:6a:49:e1:9d:
         c1:f7:03:27:26:f4:f7:a9:71:51:12:56:44:96:f2:39:42:77:
         52:1d:3b:df:76:03:8e:49:b4:9b:21:fe:53:5a:bc:11:b6:50:
         49:08:4c:de:80:6b:1d:83:2c:b1:42:04:5b:05:12:86:3b:87:
         ee:08:08:71:2c:58:6d:2b:11:50:26:d1:ff:65:2a:4d:db:a8:
         d5:a6:d1:18:a0:68:e6:8c:48:20:d1:92:3b:fc:07:c1:74:c4:
         0b:46:7d:63:77:87:db:f1:e2:e6:66:01:6f:db:4b:11:34:c5:
         46:c1:e2:0e:60:2b:e8:e7:d6:f8:ce:e8:e6:3b:f8:5d:41:17:
         f3:88:c2:2e:d7:8c:ae:89:ed:82:94:73:6e:2f:8d:39:52:56:
         fe:b4:e8:7e:c0:c7:27:33:47:5f:a1:0f:05:32:86:1c:d2:0f:
         37:89:32:86:6b:bb:97:e6:1a:28:b5:59:ef:2f:f8:a4:c4:80:
         c8:2e:2a:92:d4:1f:87:8a:f5:fd:92:d6:eb:e9:ea:42:33:dd:
         bf:d9:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:44 2025 by rpki-client