Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39322e302f32322d3232203d3e20323634383535.roa
File:                     3139302e39392e39322e302f32322d3232203d3e20323634383535.roa (raw, json)
Hash identifier:          N/6sbiZY4J50NtcrQAXQC9b8v580VJ5vjrivo5aN7o4=
Subject key identifier:   99:BE:4F:79:C4:63:54:91:B1:1D:FB:64:B5:34:4E:2A:08:75:05:76
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       3FADACF142FC116FA260FECB35ABD5DB80CB7C0B
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39322e302f32322d3232203d3e20323634383535.roa
Signing time:             Fri 25 Jul 2025 11:35:00 +0000
ROA not before:           Fri 25 Jul 2025 11:30:00 +0000
ROA not after:            Fri 24 Jul 2026 11:35:00 +0000
asID:                     264855
IP address blocks:        190.99.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ad:ac:f1:42:fc:11:6f:a2:60:fe:cb:35:ab:d5:db:80:cb:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Jul 25 11:30:00 2025 GMT
            Not After : Jul 24 11:35:00 2026 GMT
        Subject: CN=99BE4F79C4635491B11DFB64B5344E2A08750576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:23:86:40:a3:f5:69:f0:3c:87:75:3e:bb:
                    3e:f3:b5:27:8b:6d:b1:6d:28:8f:b3:6d:56:d0:4c:
                    70:93:3b:f2:53:97:87:6e:77:c2:a8:6a:4c:dd:9f:
                    b8:dc:d9:39:91:25:c7:59:20:12:41:6e:e5:a0:20:
                    ce:89:b9:4c:5a:25:7d:7c:d2:f5:d7:c9:0b:42:9b:
                    3d:3a:73:be:6f:b4:b2:0c:d6:0e:e6:76:22:e5:3b:
                    41:3f:db:f3:df:a5:a3:09:b4:36:7b:39:62:80:36:
                    ff:de:a8:5e:77:f4:d2:3c:85:71:28:b2:4d:ae:0d:
                    37:ca:85:84:3a:b0:06:7c:1e:a4:da:9d:47:bf:5f:
                    d3:8b:e0:62:ce:62:31:d7:3a:6e:d3:bb:51:1a:e2:
                    40:c8:05:ba:19:ce:9c:2e:68:ea:00:e7:71:bf:56:
                    35:19:54:a2:8d:ab:44:c1:0a:1a:f9:77:3a:2d:ec:
                    7c:78:43:e7:24:e4:94:c5:b5:d7:55:1c:85:95:03:
                    9d:d8:a0:12:c6:c2:3a:76:b0:77:9c:92:f2:f7:a7:
                    94:41:40:a9:54:9e:37:a2:aa:b9:d9:5a:2a:b4:92:
                    f7:6b:cd:a5:fb:d7:6c:59:35:0d:f9:bb:3d:45:67:
                    2f:90:a9:bb:16:04:5b:a7:8c:3f:13:c3:90:94:1a:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:4F:79:C4:63:54:91:B1:1D:FB:64:B5:34:4E:2A:08:75:05:76
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39322e302f32322d3232203d3e20323634383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:11:70:94:9a:b7:4a:b7:69:d4:18:51:10:38:24:70:6e:ad:
         cb:a0:c2:98:b6:63:24:a1:f3:a9:d2:6a:5c:b3:e6:9d:07:67:
         a6:b7:19:be:0d:50:7b:91:8d:12:19:b8:04:ba:7d:ed:ca:99:
         36:b8:3e:fd:c6:1a:09:1d:42:e0:b0:31:12:e0:22:e9:68:0f:
         c6:01:5f:14:c5:36:ee:2b:0b:f1:1b:17:83:b1:0b:4d:9f:c5:
         7c:4a:57:86:de:aa:ed:e5:45:6c:dd:95:23:e1:dd:6c:da:94:
         bb:b3:64:d4:2c:19:8a:12:0d:66:00:22:e9:0b:bc:63:12:55:
         b9:bb:51:9b:e3:2c:c1:07:31:cf:af:81:f7:c7:13:6e:7f:a4:
         f0:dd:da:24:e8:30:47:ea:6f:2e:15:6d:40:d5:35:3b:bc:ed:
         f5:dc:d7:16:92:ca:10:07:8d:8f:5a:7d:fe:fc:84:61:51:c7:
         c0:36:f9:55:7e:33:a0:29:c9:05:83:42:82:4a:90:94:37:52:
         dc:a6:93:ee:59:33:91:42:7f:ea:a1:2d:a5:7d:7e:ff:9e:9c:
         0c:78:17:57:df:ba:18:be:37:ee:f8:65:71:12:a5:1d:47:71:
         01:28:02:ed:ab:a6:26:9b:8f:20:f0:4f:22:c2:8a:b9:18:be:
         cd:a2:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 08:59:40 2025 by rpki-client