Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3234203d3e203238313037.roa
File:                     3139302e3132342e3234302e302f32322d3234203d3e203238313037.roa (raw, json)
Hash identifier:          UmDVrqvnMO+6sQ+0FHwwANTTOO6nBkGrLNUdLs6AdIw=
Subject key identifier:   CF:0B:B2:06:3C:3D:AC:C3:EF:F9:CC:E6:CA:7B:A6:8D:2F:65:9D:AA
Certificate issuer:       /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial:       020678F52115ED2FFF64E769B963C25BD3577A62
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3234203d3e203238313037.roa
Signing time:             Wed 10 Sep 2025 15:44:18 +0000
ROA not before:           Wed 10 Sep 2025 15:39:18 +0000
ROA not after:            Wed 09 Sep 2026 15:44:18 +0000
asID:                     28107
IP address blocks:        190.124.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:06:78:f5:21:15:ed:2f:ff:64:e7:69:b9:63:c2:5b:d3:57:7a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
        Validity
            Not Before: Sep 10 15:39:18 2025 GMT
            Not After : Sep  9 15:44:18 2026 GMT
        Subject: CN=CF0BB2063C3DACC3EFF9CCE6CA7BA68D2F659DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:09:b2:94:d8:81:f9:6d:85:c3:0e:80:8c:
                    4b:4f:2d:01:b9:ab:01:7d:67:04:c7:26:53:c7:18:
                    36:c4:cc:58:6d:7e:18:d9:b5:56:af:26:2a:38:5b:
                    87:6c:04:f0:7d:a8:fa:89:eb:4d:db:38:e6:46:03:
                    7f:b0:3b:55:f9:98:73:9b:4b:cb:8d:4a:27:5d:7e:
                    75:75:2b:d2:67:9f:ec:ee:ec:a4:02:22:1f:b8:fa:
                    cb:98:6c:b7:2e:97:80:b1:9d:02:0f:10:e0:6f:7b:
                    96:49:72:7c:b4:5d:86:9b:89:99:b8:da:43:b6:9a:
                    da:73:18:04:c8:63:c7:76:d0:f7:32:52:02:d8:54:
                    3f:af:10:ad:c6:12:6a:19:bd:cd:66:51:5a:90:15:
                    e7:23:61:6b:f2:b4:ab:aa:2f:75:53:a7:8e:c6:04:
                    7b:c8:89:76:83:fa:ae:49:39:d3:05:00:ff:13:44:
                    ae:99:f0:32:ce:c2:13:2b:bd:20:9b:14:3f:15:fb:
                    c9:46:f4:10:c4:54:9f:c1:15:52:a3:a3:f3:ed:ca:
                    62:88:ba:e6:6b:ac:1d:7e:32:a5:7e:ea:21:b6:c9:
                    f2:56:31:15:b4:7e:39:0c:ed:94:b7:64:b6:23:3d:
                    65:30:3a:06:73:80:59:cb:b9:dd:f9:b5:64:7f:68:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0B:B2:06:3C:3D:AC:C3:EF:F9:CC:E6:CA:7B:A6:8D:2F:65:9D:AA
            X509v3 Authority Key Identifier:
                keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3234203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:68:1d:36:3f:1b:4d:fe:b3:39:20:17:a9:25:ee:3a:0c:22:
         49:01:a0:3a:a7:ec:a5:19:64:e5:da:06:83:d3:9b:18:8a:46:
         d3:3e:a0:6a:0c:14:86:34:d0:39:3a:b2:fa:e5:a6:81:96:43:
         28:da:52:6e:04:38:85:ed:dc:66:6e:97:a3:b4:04:e4:7e:15:
         4b:c7:b4:55:a2:85:15:11:e0:4d:56:02:62:ca:1a:9a:d4:d6:
         11:d5:b7:a3:bf:45:e7:ce:aa:90:05:e1:a3:0e:f1:69:20:03:
         f6:c4:53:00:a8:32:3d:51:b1:17:87:91:49:27:e3:a1:c0:ce:
         50:4c:b9:9f:78:c6:78:80:c1:e2:a3:59:7b:78:36:9b:ca:e0:
         77:d7:30:61:c7:04:d5:b0:64:14:c6:4a:3e:7c:4d:a6:b6:b9:
         58:71:87:5e:15:c3:55:2f:65:c3:7f:8b:3d:d0:9c:da:b3:5b:
         4f:78:27:9e:bb:64:87:c8:ea:f5:60:c1:c3:a8:02:d4:33:95:
         f7:34:c6:ae:a1:03:bd:99:c7:65:91:d1:22:e6:f4:43:5c:17:
         49:4d:59:5b:06:29:c2:23:9a:58:c0:8d:5a:e0:17:50:d7:27:
         35:df:30:94:51:95:d1:9a:78:a4:cd:81:12:41:a7:4c:68:82:
         27:69:41:56
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAgZ49SEV7S//ZOdpuWPCW9NXemIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ5MDRCQUZBNEZBNUM3QjRDNjA5OTI5QUUyMTU1NkI5
NEFGODk5NTAeFw0yNTA5MTAxNTM5MThaFw0yNjA5MDkxNTQ0MThaMDMxMTAvBgNV
BAMTKENGMEJCMjA2M0MzREFDQzNFRkY5Q0NFNkNBN0JBNjhEMkY2NTlEQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29wmylNiB+W2Fww6AjEtPLQG5
qwF9ZwTHJlPHGDbEzFhtfhjZtVavJio4W4dsBPB9qPqJ603bOOZGA3+wO1X5mHOb
S8uNSiddfnV1K9Jnn+zu7KQCIh+4+suYbLcul4CxnQIPEOBve5ZJcny0XYabiZm4
2kO2mtpzGATIY8d20PcyUgLYVD+vEK3GEmoZvc1mUVqQFecjYWvytKuqL3VTp47G
BHvIiXaD+q5JOdMFAP8TRK6Z8DLOwhMrvSCbFD8V+8lG9BDEVJ/BFVKjo/PtymKI
uuZrrB1+MqV+6iG2yfJWMRW0fjkM7ZS3ZLYjPWUwOgZzgFnLud35tWR/aLd7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzwuyBjw9rMPv+czmynumjS9lnaowHwYDVR0j
BBgwFoAU/ZBLr6T6XHtMYJkpriFVa5SviZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkM2RjAyRDRBQ0ZBMzg0MkQzQzE2MDE1MDBFQjBGRjJD
NUI3MUFDOTI1ODczMEZBRTc5OEM2OEI4RjM2MkE4LzAvRkQ5MDRCQUZBNEZBNUM3
QjRDNjA5OTI5QUUyMTU1NkI5NEFGODk5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDkwNEJBRkE0RkE1QzdCNEM2
MDk5MjlBRTIxNTU2Qjk0QUY4OTk1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJDNkYwMkQ0QUNGQTM4NDJEM0MxNjAxNTAwRUIwRkYyQzVCNzFBQzky
NTg3MzBGQUU3OThDNjhCOEYzNjJBOC8wLzMxMzkzMDJlMzEzMjM0MmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzEzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnzw
MA0GCSqGSIb3DQEBCwUAA4IBAQBWaB02PxtN/rM5IBepJe46DCJJAaA6p+ylGWTl
2gaD05sYikbTPqBqDBSGNNA5OrL65aaBlkMo2lJuBDiF7dxmbpejtATkfhVLx7RV
ooUVEeBNVgJiyhqa1NYR1bejv0XnzqqQBeGjDvFpIAP2xFMAqDI9UbEXh5FJJ+Oh
wM5QTLmfeMZ4gMHio1l7eDabyuB31zBhxwTVsGQUxko+fE2mtrlYcYdeFcNVL2XD
f4s90Jzas1tPeCeeu2SHyOr1YMHDqALUM5X3NMauoQO9mcdlkdEi5vRDXBdJTVlb
BinCI5pYwI1a4BdQ1yc13zCUUZXRmnikzYESQadMaIInaUFW
-----END CERTIFICATE-----
Generated at Tue Sep 16 14:46:57 2025 by rpki-client