Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa
File:                     3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa (raw, json)
Hash identifier:          uMpwZv3GRvCCdlEdHavV+BvPUXTDCWVz7bOnqxPMi2Q=
Subject key identifier:   58:A4:83:5A:A1:EE:FB:7F:31:2E:A7:21:7A:92:A5:12:0E:66:86:A6
Certificate issuer:       /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial:       04498C94AC73413E17545779F8D9F51315E9CCEF
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa
Signing time:             Wed 10 Sep 2025 15:44:19 +0000
ROA not before:           Wed 10 Sep 2025 15:39:19 +0000
ROA not after:            Wed 09 Sep 2026 15:44:19 +0000
asID:                     28107
IP address blocks:        190.124.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:49:8c:94:ac:73:41:3e:17:54:57:79:f8:d9:f5:13:15:e9:cc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
        Validity
            Not Before: Sep 10 15:39:19 2025 GMT
            Not After : Sep  9 15:44:19 2026 GMT
        Subject: CN=58A4835AA1EEFB7F312EA7217A92A5120E6686A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:36:cd:87:df:66:d8:9e:7c:c7:74:cf:d8:cc:
                    af:e5:75:5c:33:45:ba:d1:a7:cc:91:bb:8f:88:ab:
                    18:3e:bf:a3:a4:ff:15:28:b9:32:e4:be:91:63:f1:
                    1d:fa:20:7a:6d:e3:92:7f:98:45:96:86:a5:a4:61:
                    29:cb:0f:fc:af:8a:c2:29:be:49:92:f4:bf:3a:3c:
                    60:bd:d9:c2:0a:a2:e5:55:69:71:66:b7:47:2c:b5:
                    54:13:24:b8:fb:a5:76:18:2e:d3:41:cf:a5:9f:e4:
                    6b:26:0f:c7:23:95:4e:83:72:25:22:14:ce:97:8b:
                    07:fb:89:0c:51:e1:92:d9:95:78:33:58:6e:bc:37:
                    79:53:61:e2:5b:14:b5:d7:37:9e:57:bf:02:db:fd:
                    88:06:cd:62:eb:c7:7a:6d:52:e8:97:48:fe:37:18:
                    53:80:c1:b5:00:93:2a:6f:46:a4:ff:06:42:71:91:
                    96:08:a1:78:02:1f:f7:09:17:70:98:2c:58:77:ef:
                    0e:5c:31:c4:16:5a:be:47:a4:63:7a:17:15:69:75:
                    45:ee:8b:93:8d:32:2e:53:26:73:00:89:89:88:25:
                    1f:6c:52:e3:d6:f2:6f:18:c5:2d:9b:18:c5:f6:fc:
                    4c:78:26:4e:d8:e4:10:82:75:cf:78:8c:1c:39:fa:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A4:83:5A:A1:EE:FB:7F:31:2E:A7:21:7A:92:A5:12:0E:66:86:A6
            X509v3 Authority Key Identifier:
                keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3234203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:50:77:bc:07:2f:4a:ac:03:92:31:4b:93:f0:0a:4f:de:
         a6:b3:b8:03:4b:3e:4b:c9:b2:86:cf:d3:7e:d3:91:d5:17:04:
         e1:c3:77:fc:f3:d5:0d:43:e2:0a:13:a2:aa:aa:30:7f:9f:d6:
         61:a1:5e:5c:c7:a5:90:18:f4:07:e4:1f:54:c3:89:ef:24:68:
         5d:f5:26:e4:08:c7:08:98:21:bc:3f:27:2b:91:74:5a:c1:98:
         47:c8:af:38:4d:43:a7:db:92:8b:d6:40:eb:83:08:44:c7:92:
         a6:1e:8c:36:88:c3:45:88:4f:5a:9b:4c:d0:91:f1:c4:5b:24:
         4c:34:12:a3:66:b2:f5:40:94:0b:eb:7f:9f:fe:37:e4:9a:55:
         7e:e3:35:4a:20:b1:dc:bf:bd:9c:9d:8e:a4:51:b5:41:21:1e:
         dc:c7:31:0c:e2:ee:57:4e:4b:4e:6f:7e:04:12:7a:02:4c:c4:
         cf:6f:be:41:30:d3:b5:9d:9d:30:50:7a:c4:b0:40:5f:4a:96:
         db:e0:5e:a0:38:1f:53:31:62:81:34:db:82:27:a5:83:d2:3a:
         94:55:6b:0f:39:64:a2:f1:a5:9a:1e:36:39:af:b6:11:95:04:
         d9:72:a3:5f:77:59:e8:4e:4b:71:27:96:5f:ae:36:b9:81:c1:
         f3:51:f7:d8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBEmMlKxzQT4XVFd5+Nn1ExXpzO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ5MDRCQUZBNEZBNUM3QjRDNjA5OTI5QUUyMTU1NkI5
NEFGODk5NTAeFw0yNTA5MTAxNTM5MTlaFw0yNjA5MDkxNTQ0MTlaMDMxMTAvBgNV
BAMTKDU4QTQ4MzVBQTFFRUZCN0YzMTJFQTcyMTdBOTJBNTEyMEU2Njg2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyNs2H32bYnnzHdM/YzK/ldVwz
RbrRp8yRu4+Iqxg+v6Ok/xUouTLkvpFj8R36IHpt45J/mEWWhqWkYSnLD/yvisIp
vkmS9L86PGC92cIKouVVaXFmt0cstVQTJLj7pXYYLtNBz6Wf5GsmD8cjlU6DciUi
FM6Xiwf7iQxR4ZLZlXgzWG68N3lTYeJbFLXXN55XvwLb/YgGzWLrx3ptUuiXSP43
GFOAwbUAkypvRqT/BkJxkZYIoXgCH/cJF3CYLFh37w5cMcQWWr5HpGN6FxVpdUXu
i5ONMi5TJnMAiYmIJR9sUuPW8m8YxS2bGMX2/Ex4Jk7Y5BCCdc94jBw5+g3xAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWKSDWqHu+38xLqchepKlEg5mhqYwHwYDVR0j
BBgwFoAU/ZBLr6T6XHtMYJkpriFVa5SviZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkM2RjAyRDRBQ0ZBMzg0MkQzQzE2MDE1MDBFQjBGRjJD
NUI3MUFDOTI1ODczMEZBRTc5OEM2OEI4RjM2MkE4LzAvRkQ5MDRCQUZBNEZBNUM3
QjRDNjA5OTI5QUUyMTU1NkI5NEFGODk5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDkwNEJBRkE0RkE1QzdCNEM2
MDk5MjlBRTIxNTU2Qjk0QUY4OTk1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJDNkYwMkQ0QUNGQTM4NDJEM0MxNjAxNTAwRUIwRkYyQzVCNzFBQzky
NTg3MzBGQUU3OThDNjhCOEYzNjJBOC8wLzMxMzkzMDJlMzEzMjM0MmUzMjMyMzQy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzEzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnzg
MA0GCSqGSIb3DQEBCwUAA4IBAQA4SlB3vAcvSqwDkjFLk/AKT96ms7gDSz5LybKG
z9N+05HVFwThw3f889UNQ+IKE6KqqjB/n9ZhoV5cx6WQGPQH5B9Uw4nvJGhd9Sbk
CMcImCG8PycrkXRawZhHyK84TUOn25KL1kDrgwhEx5KmHow2iMNFiE9am0zQkfHE
WyRMNBKjZrL1QJQL63+f/jfkmlV+4zVKILHcv72cnY6kUbVBIR7cxzEM4u5XTktO
b34EEnoCTMTPb75BMNO1nZ0wUHrEsEBfSpbb4F6gOB9TMWKBNNuCJ6WD0jqUVWsP
OWSi8aWaHjY5r7YRlQTZcqNfd1noTktxJ5Zfrja5gcHzUffY
-----END CERTIFICATE-----
Generated at Tue Sep 16 14:46:58 2025 by rpki-client