Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e36342e302f31382d3234203d3e203237393834.roa
File:                     3139302e3130352e36342e302f31382d3234203d3e203237393834.roa (raw, json)
Hash identifier:          meXyQp1UjvQLUgmThegPxd/yuq5zuvXQ+zy7PzXd+Sw=
Subject key identifier:   94:54:C9:1A:E1:32:D8:8E:BD:18:64:61:56:5D:02:22:3F:B2:CC:31
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       0D4EBF653D853FDBBF56A67D9339E0B9633501AE
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e36342e302f31382d3234203d3e203237393834.roa
Signing time:             Tue 04 Feb 2025 18:04:55 +0000
ROA not before:           Tue 04 Feb 2025 17:59:55 +0000
ROA not after:            Tue 03 Feb 2026 18:04:55 +0000
asID:                     27984
IP address blocks:        190.105.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4e:bf:65:3d:85:3f:db:bf:56:a6:7d:93:39:e0:b9:63:35:01:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Feb  4 17:59:55 2025 GMT
            Not After : Feb  3 18:04:55 2026 GMT
        Subject: CN=9454C91AE132D88EBD186461565D02223FB2CC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:36:bb:60:bc:ab:77:0c:c9:30:82:ac:9a:
                    37:52:8a:8f:06:7a:60:a2:0e:30:47:df:3a:3b:8b:
                    77:25:31:0c:ae:14:73:1d:84:27:ba:5d:80:9b:67:
                    b5:b0:09:89:05:90:6b:09:63:2c:25:37:62:a2:ca:
                    e8:0c:12:69:45:05:dd:54:88:84:ac:da:9f:90:80:
                    50:00:07:36:d9:94:fb:1d:80:af:70:43:c2:cc:c6:
                    c5:ea:07:db:c4:cf:e6:63:54:4c:10:89:df:66:01:
                    52:d1:cd:03:0c:0d:c8:cd:19:d2:db:9f:19:d6:bb:
                    2b:b7:1d:62:22:50:e3:8d:ed:b7:e4:4e:be:27:e9:
                    a7:fe:84:12:b2:0e:cc:0f:2b:62:1f:16:fc:34:95:
                    19:33:56:70:77:85:11:43:89:3e:3d:18:f7:70:ab:
                    29:29:ba:a3:38:fa:e8:5c:05:0a:d4:fe:92:c7:c8:
                    2b:13:81:63:6e:eb:c6:fb:6d:e4:3c:49:b1:46:11:
                    de:b2:56:ee:0f:db:4c:0a:4b:c6:19:5f:8b:ef:95:
                    51:b2:95:f8:27:54:35:73:2f:a5:a8:64:8b:85:1c:
                    87:f6:98:bc:c2:29:4d:60:eb:29:1d:ce:2d:a5:90:
                    40:b6:9e:84:0c:b3:11:da:39:93:8d:ec:bb:9a:cb:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:C9:1A:E1:32:D8:8E:BD:18:64:61:56:5D:02:22:3F:B2:CC:31
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e36342e302f31382d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:d4:33:a2:1c:28:73:71:0c:7c:13:c0:99:44:2f:5d:77:
         80:c7:b4:56:d1:1f:66:30:e8:63:49:77:50:94:5b:cc:aa:15:
         f8:63:27:27:c2:5d:7b:79:d4:b4:14:4b:67:5c:74:ba:36:c1:
         c2:36:0c:31:e5:4f:59:4b:4d:b0:9b:ff:dd:ee:15:13:0c:f4:
         f0:6b:83:1b:16:68:3e:af:0d:59:53:7b:aa:d3:55:d3:61:12:
         d8:40:f1:f5:59:0b:e7:3e:d4:e7:f5:eb:0c:13:f6:1f:0a:53:
         d2:31:fb:31:a3:d9:ed:e5:f0:f6:bb:1c:3e:2d:46:22:ab:f3:
         4b:cc:55:e2:76:06:59:2a:f2:bd:c6:3e:22:e5:1c:fd:df:2e:
         46:f2:41:ed:05:1c:2c:aa:12:22:55:99:72:90:11:dd:f0:40:
         b7:ac:bd:1b:45:d8:0f:f9:fd:e9:bb:1f:7d:1b:2f:c7:44:17:
         e1:9b:ed:16:24:21:24:51:8d:52:81:06:81:0f:25:f8:0d:1e:
         02:f1:ee:08:28:52:10:c7:7e:6b:30:3d:c5:af:5a:cf:95:cd:
         bc:de:a8:3c:84:64:b0:f4:13:c1:78:b5:14:d4:e5:33:0f:5f:
         7c:07:f0:ef:7a:11:cd:1e:eb:bb:90:02:14:74:5a:cb:79:04:
         79:6c:d7:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDU6/ZT2FP9u/VqZ9kznguWM1Aa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDOUIyNzAxQzQ0NjZGQjQ4OTc2QUU0RUVCQjlDMUZB
MDE3QUQ5NTAeFw0yNTAyMDQxNzU5NTVaFw0yNjAyMDMxODA0NTVaMDMxMTAvBgNV
BAMTKDk0NTRDOTFBRTEzMkQ4OEVCRDE4NjQ2MTU2NUQwMjIyM0ZCMkNDMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTrja7YLyrdwzJMIKsmjdSio8G
emCiDjBH3zo7i3clMQyuFHMdhCe6XYCbZ7WwCYkFkGsJYywlN2KiyugMEmlFBd1U
iISs2p+QgFAABzbZlPsdgK9wQ8LMxsXqB9vEz+ZjVEwQid9mAVLRzQMMDcjNGdLb
nxnWuyu3HWIiUOON7bfkTr4n6af+hBKyDswPK2IfFvw0lRkzVnB3hRFDiT49GPdw
qykpuqM4+uhcBQrU/pLHyCsTgWNu68b7beQ8SbFGEd6yVu4P20wKS8YZX4vvlVGy
lfgnVDVzL6WoZIuFHIf2mLzCKU1g6ykdzi2lkEC2noQMsxHaOZON7Luay1slAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlFTJGuEy2I69GGRhVl0CIj+yzDEwHwYDVR0j
BBgwFoAUYsmycBxEZvtIl2rk7rucH6AXrZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83Mjk3RDFCODcyNEFBRDBGMjA2OUU0MUY0NkYxN0Y1RkZB
QUU4QzI4ODYyMTQ5QTY3QUFCRkUzQzAxQzYyNjE1LzAvNjJDOUIyNzAxQzQ0NjZG
QjQ4OTc2QUU0RUVCQjlDMUZBMDE3QUQ5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MkM5QjI3MDFDNDQ2NkZCNDg5
NzZBRTRFRUJCOUMxRkEwMTdBRDk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzI5N0QxQjg3MjRBQUQwRjIwNjlFNDFGNDZGMTdGNUZGQUFFOEMyODg2
MjE0OUE2N0FBQkZFM0MwMUM2MjYxNS8wLzMxMzkzMDJlMzEzMDM1MmUzNjM0MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzIzNzM5MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr5pQDAN
BgkqhkiG9w0BAQsFAAOCAQEAwufUM6IcKHNxDHwTwJlEL113gMe0VtEfZjDoY0l3
UJRbzKoV+GMnJ8Jde3nUtBRLZ1x0ujbBwjYMMeVPWUtNsJv/3e4VEwz08GuDGxZo
Pq8NWVN7qtNV02ES2EDx9VkL5z7U5/XrDBP2HwpT0jH7MaPZ7eXw9rscPi1GIqvz
S8xV4nYGWSryvcY+IuUc/d8uRvJB7QUcLKoSIlWZcpAR3fBAt6y9G0XYD/n96bsf
fRsvx0QX4ZvtFiQhJFGNUoEGgQ8l+A0eAvHuCChSEMd+azA9xa9az5XNvN6oPIRk
sPQTwXi1FNTlMw9ffAfw73oRzR7ru5ACFHRay3kEeWzX9g==
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:27:39 2025 by rpki-client