Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e3231312e39322e302f32322d3234203d3e20323632313834.roa
File:                     3139302e3231312e39322e302f32322d3234203d3e20323632313834.roa (raw, json)
Hash identifier:          yzXEmTrCj/1QrDhXDwlTODJFrsR+y+zne+CM4CPBlj0=
Subject key identifier:   7C:49:52:54:31:55:6F:BE:32:7D:75:1D:C8:11:46:CA:2C:4F:F0:23
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       7BA2D14FD18A33A5A1E421B1A072C16CAAF83798
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e3231312e39322e302f32322d3234203d3e20323632313834.roa
Signing time:             Tue 04 Feb 2025 19:56:41 +0000
ROA not before:           Tue 04 Feb 2025 19:51:41 +0000
ROA not after:            Tue 03 Feb 2026 19:56:41 +0000
asID:                     262184
IP address blocks:        190.211.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 15:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a2:d1:4f:d1:8a:33:a5:a1:e4:21:b1:a0:72:c1:6c:aa:f8:37:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Feb  4 19:51:41 2025 GMT
            Not After : Feb  3 19:56:41 2026 GMT
        Subject: CN=7C49525431556FBE327D751DC81146CA2C4FF023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:9d:62:e2:2d:6d:8c:91:87:7c:46:b1:95:
                    f0:4c:cf:2c:e6:76:52:28:f0:55:90:03:45:97:cd:
                    20:41:70:ad:f2:6b:90:7b:84:1b:15:b6:20:a8:dd:
                    32:c2:14:b0:4f:6a:b5:b3:a5:80:a0:66:18:15:89:
                    80:d1:2f:75:ab:f1:eb:01:4d:0e:cf:6e:d3:de:89:
                    f5:1f:17:98:d7:98:ae:a8:43:21:ac:20:a2:48:68:
                    4d:76:da:cb:98:c1:34:c2:e6:f2:da:3d:a3:59:bc:
                    a7:ed:42:78:27:05:de:17:d2:76:e4:fc:20:35:3f:
                    45:58:ee:bf:78:b8:88:12:f7:91:47:00:b3:a7:c8:
                    22:ba:9e:bc:cc:3e:b6:b6:bd:98:17:63:d7:e8:5b:
                    ce:43:50:b0:a4:72:02:d2:48:c1:4e:54:04:8d:62:
                    fc:33:7f:6a:1a:ef:14:0b:8a:5e:cb:9f:9b:47:db:
                    06:25:35:3c:db:96:72:35:a6:cd:21:fd:48:17:60:
                    1e:02:21:84:11:79:c9:28:e1:f9:32:83:33:9a:e1:
                    b9:8a:9c:57:16:cf:bc:66:9f:99:bb:ea:9f:c0:5a:
                    f5:6b:9a:ec:86:1c:c3:15:f7:8a:83:d1:f1:53:01:
                    b7:dc:35:e2:3b:1c:71:91:cc:ea:e0:45:3a:a4:60:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:52:54:31:55:6F:BE:32:7D:75:1D:C8:11:46:CA:2C:4F:F0:23
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e3231312e39322e302f32322d3234203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:dc:6f:bb:ae:c2:cb:ac:19:b3:45:61:e5:44:cd:70:db:
         78:86:3d:d0:b5:b9:39:f8:28:45:bb:61:fb:cf:b2:d2:47:ce:
         8b:0e:96:05:17:93:e6:91:71:8d:ff:9d:f5:cd:bf:76:16:cb:
         3d:bf:eb:46:4b:68:bd:53:95:da:a1:0e:0f:e3:37:64:e3:01:
         70:5a:64:1e:f5:2a:43:bc:57:56:b2:52:35:5d:7f:09:a5:88:
         bd:e8:92:8f:71:75:26:9e:a0:30:4c:06:03:e5:eb:b9:86:32:
         c2:85:29:87:f1:c6:4b:ba:1c:6a:b2:c7:36:2e:a5:6f:5c:04:
         a8:1b:e2:a1:6c:3b:fb:34:fb:e9:72:2d:0f:ec:36:cc:1f:27:
         5e:db:1c:e8:9f:c3:5b:91:cb:5e:8c:4c:bf:be:fb:b1:57:06:
         3d:7c:29:0d:58:ee:82:6c:e8:2a:ac:47:d4:f0:15:ce:cc:36:
         8b:b5:a7:55:3c:f4:2e:4c:c1:cf:36:df:41:f7:44:d3:74:2a:
         47:46:5c:68:a7:36:98:1d:6e:d7:40:15:c9:40:45:b1:7a:85:
         cb:a9:22:62:5f:71:84:02:34:1b:b8:30:83:87:fb:f6:2f:60:
         78:c8:7a:6b:0a:68:9d:41:26:4f:f8:94:9a:9d:09:82:bb:8d:
         46:4b:27:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUe6LRT9GKM6Wh5CGxoHLBbKr4N5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDQzYyNDQyOEJDRUQ5RjM3N0JBQzk1RDU2MkE1ODVE
NTA5RjFCNDAeFw0yNTAyMDQxOTUxNDFaFw0yNjAyMDMxOTU2NDFaMDMxMTAvBgNV
BAMTKDdDNDk1MjU0MzE1NTZGQkUzMjdENzUxREM4MTE0NkNBMkM0RkYwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ip1i4i1tjJGHfEaxlfBMzyzm
dlIo8FWQA0WXzSBBcK3ya5B7hBsVtiCo3TLCFLBParWzpYCgZhgViYDRL3Wr8esB
TQ7PbtPeifUfF5jXmK6oQyGsIKJIaE122suYwTTC5vLaPaNZvKftQngnBd4X0nbk
/CA1P0VY7r94uIgS95FHALOnyCK6nrzMPra2vZgXY9foW85DULCkcgLSSMFOVASN
Yvwzf2oa7xQLil7Ln5tH2wYlNTzblnI1ps0h/UgXYB4CIYQRecko4fkygzOa4bmK
nFcWz7xmn5m76p/AWvVrmuyGHMMV94qD0fFTAbfcNeI7HHGRzOrgRTqkYIpnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfElSVDFVb74yfXUdyBFGyixP8CMwHwYDVR0j
BBgwFoAUVsxiRCi87Z83e6yV1WKlhdUJ8bQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkRFM0FGNjhCMUE4N0U3OTQ1OEFBNkQxQjE3NUUxMzU3
Qjg5ODAyRjBGMjQwNEVDRDdDMTMwRTc3QTM2RkY1LzAvNTZDQzYyNDQyOEJDRUQ5
RjM3N0JBQzk1RDU2MkE1ODVENTA5RjFCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkNDNjI0NDI4QkNFRDlGMzc3
QkFDOTVENTYyQTU4NUQ1MDlGMUI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJERTNBRjY4QjFBODdFNzk0NThBQTZEMUIxNzVFMTM1N0I4OTgwMkYw
RjI0MDRFQ0Q3QzEzMEU3N0EzNkZGNS8wLzMxMzkzMDJlMzIzMTMxMmUzOTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvtNc
MA0GCSqGSIb3DQEBCwUAA4IBAQBr4dxvu67Cy6wZs0Vh5UTNcNt4hj3Qtbk5+ChF
u2H7z7LSR86LDpYFF5PmkXGN/531zb92Fss9v+tGS2i9U5XaoQ4P4zdk4wFwWmQe
9SpDvFdWslI1XX8JpYi96JKPcXUmnqAwTAYD5eu5hjLChSmH8cZLuhxqssc2LqVv
XASoG+KhbDv7NPvpci0P7DbMHyde2xzon8NbkctejEy/vvuxVwY9fCkNWO6CbOgq
rEfU8BXOzDaLtadVPPQuTMHPNt9B90TTdCpHRlxopzaYHW7XQBXJQEWxeoXLqSJi
X3GEAjQbuDCDh/v2L2B4yHprCmidQSZP+JSanQmCu41GSyeY
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:48 2025 by rpki-client