Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa
File:                     3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          CGcYhDezQjdoQrmkm+cmxSz1OdyKUJBS1i0laIITMlw=
Subject key identifier:   22:9A:A1:CA:50:B8:89:E4:D7:50:25:7F:70:85:0E:73:40:07:F2:B0
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       1E2B0F01D7AB2E7A99D740FF6FE63F2F2D49BBF1
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:29 +0000
ROA not before:           Mon 10 Feb 2025 20:04:29 +0000
ROA not after:            Mon 09 Feb 2026 20:09:29 +0000
asID:                     262182
IP address blocks:        190.52.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2b:0f:01:d7:ab:2e:7a:99:d7:40:ff:6f:e6:3f:2f:2d:49:bb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:29 2025 GMT
            Not After : Feb  9 20:09:29 2026 GMT
        Subject: CN=229AA1CA50B889E4D750257F70850E734007F2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a0:7d:4b:d0:9b:1d:ef:f3:d6:6a:4c:ea:84:
                    c4:c3:13:8f:c9:97:82:58:d2:fa:3e:48:5f:38:d7:
                    45:c8:bd:41:cd:ac:f4:3e:2c:01:38:d9:fc:c1:e7:
                    ee:fd:0b:d3:2d:ff:ef:fa:eb:46:29:1a:72:94:84:
                    d8:f5:cd:e6:0f:e7:75:45:ea:7d:35:c2:64:4a:89:
                    17:c6:8d:92:43:c6:47:6e:02:d3:0f:32:7a:7a:34:
                    d4:0e:5d:2e:fb:11:2e:27:22:ee:c2:f3:af:29:e3:
                    6f:c7:db:f4:df:f8:18:fb:a5:46:af:46:7e:f3:a8:
                    6d:c1:59:88:6a:84:9a:b7:77:f9:aa:61:67:2a:ba:
                    5c:1f:2e:84:77:ef:23:7b:bc:8f:3d:13:df:21:d4:
                    cd:c6:95:52:0c:ec:d7:62:fa:ef:fd:65:ce:e9:c6:
                    bb:59:20:0f:f9:89:6c:d4:27:fb:59:cb:96:9b:21:
                    1e:26:75:64:0f:9f:db:1b:7c:9d:ec:d8:85:ac:c4:
                    55:6d:eb:24:58:66:cb:ea:0c:e9:11:fd:4d:8e:15:
                    b2:db:22:db:4e:33:d8:eb:20:99:e0:b4:5d:77:a1:
                    7e:40:38:c9:d0:2c:39:aa:99:96:52:43:ae:29:98:
                    bc:36:4e:37:7c:5d:e5:70:1e:f9:05:3e:33:15:38:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:A1:CA:50:B8:89:E4:D7:50:25:7F:70:85:0E:73:40:07:F2:B0
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:26:64:11:99:ca:8c:37:90:82:73:ab:88:d8:4a:12:4b:13:
         e3:e3:0a:33:be:7d:b9:7c:bc:1d:c2:c2:1c:7a:ac:b7:91:b5:
         02:a7:71:64:81:ad:c8:f4:98:bd:ca:be:28:3a:28:1a:87:ef:
         b2:1a:17:a0:97:e9:37:6a:cc:0c:0e:ed:67:5d:f0:a4:0d:30:
         61:3a:57:cb:d8:a4:b2:aa:4b:a5:aa:d9:c4:33:0b:48:cb:8d:
         44:bc:e7:38:ea:f2:43:38:0c:fa:a1:ee:00:12:9e:41:f8:a6:
         de:ca:21:b5:75:d1:40:fe:c4:70:4d:41:07:43:61:81:98:5f:
         e4:80:60:68:37:e5:6d:0d:ed:80:12:78:8d:79:01:d0:bd:84:
         4e:25:31:50:47:bb:07:d2:41:e3:22:73:f1:0e:59:04:fd:7c:
         90:8d:af:3e:78:b3:a2:2f:b0:f5:c3:8c:7a:8a:e4:cc:2a:eb:
         b6:44:c6:d7:a1:d9:42:e0:23:7f:ba:6e:21:82:77:3e:c5:6c:
         d3:d2:17:fa:a1:66:a5:15:30:5b:f0:3a:0d:8d:79:7b:3a:0c:
         1a:db:e1:2b:f7:07:b1:de:a0:87:6a:ee:2f:5c:ef:97:20:da:
         a7:f7:f7:82:b3:df:32:dd:03:01:03:fe:47:0c:04:cd:c7:67:
         6c:5c:94:36
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHisPAderLnqZ10D/b+Y/Ly1Ju/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNTAyMTAyMDA0MjlaFw0yNjAyMDkyMDA5MjlaMDMxMTAvBgNV
BAMTKDIyOUFBMUNBNTBCODg5RTRENzUwMjU3RjcwODUwRTczNDAwN0YyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoH1L0Jsd7/PWakzqhMTDE4/J
l4JY0vo+SF8410XIvUHNrPQ+LAE42fzB5+79C9Mt/+/660YpGnKUhNj1zeYP53VF
6n01wmRKiRfGjZJDxkduAtMPMnp6NNQOXS77ES4nIu7C868p42/H2/Tf+Bj7pUav
Rn7zqG3BWYhqhJq3d/mqYWcqulwfLoR37yN7vI89E98h1M3GlVIM7Ndi+u/9Zc7p
xrtZIA/5iWzUJ/tZy5abIR4mdWQPn9sbfJ3s2IWsxFVt6yRYZsvqDOkR/U2OFbLb
IttOM9jrIJngtF13oX5AOMnQLDmqmZZSQ64pmLw2Tjd8XeVwHvkFPjMVOIkdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIpqhylC4ieTXUCV/cIUOc0AH8rAwHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzkzMDJlMzUzMjJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvjRw
MA0GCSqGSIb3DQEBCwUAA4IBAQCvJmQRmcqMN5CCc6uI2EoSSxPj4wozvn25fLwd
wsIceqy3kbUCp3Fkga3I9Ji9yr4oOigah++yGhegl+k3aswMDu1nXfCkDTBhOlfL
2KSyqkulqtnEMwtIy41EvOc46vJDOAz6oe4AEp5B+KbeyiG1ddFA/sRwTUEHQ2GB
mF/kgGBoN+VtDe2AEniNeQHQvYROJTFQR7sH0kHjInPxDlkE/XyQja8+eLOiL7D1
w4x6iuTMKuu2RMbXodlC4CN/um4hgnc+xWzT0hf6oWalFTBb8DoNjXl7Ogwa2+Er
9wex3qCHau4vXO+XINqn9/eCs98y3QMBA/5HDATNx2dsXJQ2
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:55 2025 by rpki-client