Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa
File:                     3139302e372e3139322e302f31392d3234203d3e203237383736.roa (raw, json)
Hash identifier:          UT0dLfiHGxVc6HcPrXNMSqObXGhHyi+pjEz9Kqzah3I=
Subject key identifier:   72:48:FC:42:FA:7A:72:C1:15:A7:A7:9A:8F:08:7C:14:D0:23:0D:F1
Certificate issuer:       /CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
Certificate serial:       5F05EBCAEE24F9A9BC91D824F61FF37A4499CAB7
Authority key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa
Signing time:             Tue 09 Sep 2025 21:44:16 +0000
ROA not before:           Tue 09 Sep 2025 21:39:16 +0000
ROA not after:            Tue 08 Sep 2026 21:44:16 +0000
asID:                     27876
IP address blocks:        190.7.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 00:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:05:eb:ca:ee:24:f9:a9:bc:91:d8:24:f6:1f:f3:7a:44:99:ca:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
        Validity
            Not Before: Sep  9 21:39:16 2025 GMT
            Not After : Sep  8 21:44:16 2026 GMT
        Subject: CN=7248FC42FA7A72C115A7A79A8F087C14D0230DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:44:f8:b7:f9:ec:3a:73:70:3b:d6:86:f6:
                    eb:b8:a5:ce:0c:e5:9a:5a:db:e1:27:c0:3f:78:12:
                    29:b0:c7:ac:a8:d2:e6:78:dd:1f:63:2c:bf:1c:e7:
                    c5:25:fb:59:49:d0:03:e9:29:0d:34:0a:5e:b4:a6:
                    e7:06:17:66:dd:53:04:f8:6d:9e:76:77:56:9c:f3:
                    2a:f2:21:9f:3c:a9:fa:b8:8f:09:dd:ee:e0:2a:25:
                    ae:10:b1:13:a9:ec:6b:62:3d:38:68:69:84:ef:34:
                    ad:06:60:be:b1:ff:f2:61:9d:ca:cf:db:de:19:6f:
                    80:f2:36:91:8f:67:b7:42:7d:7c:2d:2e:1d:e8:16:
                    93:dc:14:ba:c3:83:a0:f3:f4:89:eb:90:c3:f9:ae:
                    f4:cb:79:db:5d:e7:39:6f:e3:f2:58:fc:f4:93:bf:
                    40:46:71:f8:e3:de:b0:59:69:e3:4e:1f:9a:32:35:
                    e6:89:aa:5c:8a:6f:98:c5:e2:2a:d0:fb:b8:d6:0a:
                    1a:a6:e6:cb:f9:7e:cb:dd:df:83:ad:a0:95:2f:bc:
                    b8:a4:6e:a1:28:f2:7e:3b:9f:3a:24:e5:35:83:67:
                    a7:c4:29:c7:5f:b5:22:ed:f5:9e:a2:a0:e3:68:da:
                    2e:4b:e6:22:77:48:59:03:51:db:2c:56:52:e9:48:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:48:FC:42:FA:7A:72:C1:15:A7:A7:9A:8F:08:7C:14:D0:23:0D:F1
            X509v3 Authority Key Identifier:
                keyid:4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:63:fb:02:d7:e2:0d:b9:87:aa:da:3b:7d:ce:b2:0a:bd:4b:
         49:d3:80:e9:42:c9:4c:13:2a:c5:81:6f:92:e4:e8:69:2f:16:
         7b:83:39:f1:6e:c1:18:6c:a5:d3:7e:4e:53:9a:d7:28:e7:f6:
         d3:bb:fa:28:de:fe:24:e4:e4:ae:b7:59:57:3e:4f:07:9c:eb:
         7e:f2:7b:27:af:8d:76:b5:d8:56:ec:39:0d:b0:4d:53:84:f7:
         97:13:f8:db:16:4e:7e:39:f4:40:da:96:75:26:91:46:b4:26:
         0c:fa:4c:4a:ba:56:c2:26:9f:bc:4c:a7:aa:62:9f:ec:51:21:
         97:38:46:a6:a7:9f:47:e2:25:5c:c3:b8:ac:d2:2b:c1:15:75:
         04:ff:17:ad:54:0b:cd:5e:42:64:05:9c:2e:2b:ca:6f:bd:e0:
         26:5a:16:08:02:b2:d9:59:04:cd:13:7b:0c:e4:f6:e4:03:21:
         d0:70:41:9f:01:2c:10:1e:64:42:52:08:02:ec:4d:7c:66:20:
         d7:18:c8:c9:21:95:fe:ff:09:6d:59:9f:5a:b5:7b:a1:82:ec:
         65:fa:97:39:96:d7:e5:43:d7:ff:f6:57:45:67:45:59:92:bb:
         72:9d:e0:a1:89:b4:9e:be:8b:b2:56:90:a6:61:85:c5:7f:0a:
         3d:ee:ba:15
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXwXryu4k+am8kdgk9h/zekSZyrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMEY2RjU1RTJEOEVDMTdCMDEzMUEwN0ZBMkU4QzA1
REU2MkUzMTAeFw0yNTA5MDkyMTM5MTZaFw0yNjA5MDgyMTQ0MTZaMDMxMTAvBgNV
BAMTKDcyNDhGQzQyRkE3QTcyQzExNUE3QTc5QThGMDg3QzE0RDAyMzBERjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6L0T4t/nsOnNwO9aG9uu4pc4M
5Zpa2+EnwD94Eimwx6yo0uZ43R9jLL8c58Ul+1lJ0APpKQ00Cl60pucGF2bdUwT4
bZ52d1ac8yryIZ88qfq4jwnd7uAqJa4QsROp7GtiPThoaYTvNK0GYL6x//JhncrP
294Zb4DyNpGPZ7dCfXwtLh3oFpPcFLrDg6Dz9InrkMP5rvTLedtd5zlv4/JY/PST
v0BGcfjj3rBZaeNOH5oyNeaJqlyKb5jF4irQ+7jWChqm5sv5fsvd34OtoJUvvLik
bqEo8n47nzok5TWDZ6fEKcdftSLt9Z6ioONo2i5L5iJ3SFkDUdssVlLpSE+HAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUckj8Qvp6csEVp6eajwh8FNAjDfEwHwYDVR0j
BBgwFoAUTMD29V4tjsF7ATGgf6LowF3mLjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODQ4OEIzN0UzMDYxOEExQjVDN0EzQjVFRUFBNTQwMUE0
QTRGN0ZCNThERTg0MzlEMjZCNjZFQkQyQTI2ODNBLzAvNENDMEY2RjU1RTJEOEVD
MTdCMDEzMUEwN0ZBMkU4QzA1REU2MkUzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MwRjZGNTVFMkQ4RUMxN0Iw
MTMxQTA3RkEyRThDMDVERTYyRTMxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjg0ODhCMzdFMzA2MThBMUI1QzdBM0I1RUVBQTU0MDFBNEE0RjdGQjU4
REU4NDM5RDI2QjY2RUJEMkEyNjgzQS8wLzMxMzkzMDJlMzcyZTMxMzkzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzczODM3MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+B8AwDQYJ
KoZIhvcNAQELBQADggEBALdj+wLX4g25h6raO33Osgq9S0nTgOlCyUwTKsWBb5Lk
6GkvFnuDOfFuwRhspdN+TlOa1yjn9tO7+ije/iTk5K63WVc+Twec637yeyevjXa1
2FbsOQ2wTVOE95cT+NsWTn459EDalnUmkUa0Jgz6TEq6VsImn7xMp6pin+xRIZc4
Rqann0fiJVzDuKzSK8EVdQT/F61UC81eQmQFnC4rym+94CZaFggCstlZBM0Tewzk
9uQDIdBwQZ8BLBAeZEJSCALsTXxmINcYyMkhlf7/CW1Zn1q1e6GC7GX6lzmW1+VD
1//2V0VnRVmSu3Kd4KGJtJ6+i7JWkKZhhcV/Cj3uuhU=
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:14:09 2025 by rpki-client