Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32342d3234203d3e20323733393834.roa
File:                     3139302e39392e39342e302f32342d3234203d3e20323733393834.roa (raw, json)
Hash identifier:          v9bdZ3lj40LamfWSm2brKGWSQTEh+/jBpRH57UDhtk0=
Subject key identifier:   47:8E:E4:9F:63:B8:61:4F:AB:9C:C3:11:26:D5:3D:F7:88:76:9C:6F
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       3576FE04A8EF599D0F4E7D78DF8261D80BA32EA3
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32342d3234203d3e20323733393834.roa
Signing time:             Tue 22 Jul 2025 18:50:00 +0000
ROA not before:           Tue 22 Jul 2025 18:45:00 +0000
ROA not after:            Tue 21 Jul 2026 18:50:00 +0000
asID:                     273984
IP address blocks:        190.99.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:76:fe:04:a8:ef:59:9d:0f:4e:7d:78:df:82:61:d8:0b:a3:2e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Jul 22 18:45:00 2025 GMT
            Not After : Jul 21 18:50:00 2026 GMT
        Subject: CN=478EE49F63B8614FAB9CC31126D53DF788769C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:3d:69:8f:f6:0d:b2:08:20:62:cb:3a:63:
                    ab:35:97:5b:0b:e6:80:e1:e2:f1:36:fd:f3:6b:97:
                    1f:65:a6:43:c1:3f:79:1a:cd:a9:55:94:df:26:a5:
                    1b:8c:e2:cc:f8:89:4d:70:ad:a5:b9:be:ef:77:f0:
                    d3:9e:e6:f8:c4:52:e5:c2:3f:38:17:32:3e:a0:f5:
                    aa:ab:4c:16:9e:ed:62:d4:3f:c5:bd:64:9d:f6:3c:
                    6e:c1:b4:60:de:cb:e6:e7:55:1d:5d:5f:d6:e7:60:
                    8e:53:6a:8b:87:e1:0f:7a:91:03:fa:9a:6b:4f:ed:
                    e8:99:ea:e2:9f:0c:43:2d:b8:79:b4:05:06:8e:50:
                    8a:37:6f:c8:88:9a:e1:2c:41:4c:c1:34:a3:4b:a9:
                    dd:9c:79:b2:b8:77:55:80:1c:3c:3e:63:e5:ef:d7:
                    7d:13:4c:86:2d:43:a2:53:75:86:c1:41:91:f7:f1:
                    ed:29:b5:87:8c:38:e9:8f:80:de:fb:f2:e1:8f:5b:
                    68:3a:8c:ad:93:cb:01:0d:eb:ae:99:9d:8f:0e:aa:
                    ac:34:4f:0a:ab:22:47:15:28:55:67:10:7e:02:07:
                    c2:9d:7c:6f:76:90:1b:34:f9:a7:1d:38:f4:14:72:
                    be:ff:64:0e:ca:4b:3b:bd:f6:a0:f2:60:9b:20:4c:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8E:E4:9F:63:B8:61:4F:AB:9C:C3:11:26:D5:3D:F7:88:76:9C:6F
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32342d3234203d3e20323733393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:53:7d:78:a2:48:4d:46:33:1a:1f:87:1f:64:3b:ba:ef:
         07:2a:40:52:42:3f:f7:c2:98:68:88:b7:12:8b:e1:e5:72:87:
         6c:7c:fc:db:26:e0:68:bf:fc:40:05:e8:97:b8:56:5b:1a:df:
         0c:53:66:e9:fe:ba:de:a0:da:b0:49:9e:84:90:9c:5a:fb:77:
         30:3c:e1:72:64:1b:12:3d:7a:ef:b3:7f:7d:ac:5e:d9:b9:26:
         4a:75:03:cc:e5:4b:c2:a5:c8:0d:42:24:06:1d:8a:7d:b8:fe:
         03:90:b6:e8:0e:a6:2e:8f:bf:c1:dc:08:75:cb:df:31:f9:4d:
         41:17:c4:f2:4b:5d:7d:eb:52:a0:87:46:80:a5:95:76:05:be:
         71:7d:af:91:89:5e:48:3b:f1:95:78:f9:36:b5:74:aa:c8:42:
         e4:79:14:bf:47:58:bd:34:bf:44:22:ac:57:31:f0:0f:97:59:
         29:89:23:27:b8:3e:ce:e7:33:6b:e9:70:35:d9:21:ca:e4:d8:
         26:76:4d:7c:46:86:8f:e5:63:36:0c:53:7b:bb:01:f3:d3:a8:
         dd:06:c7:ef:9f:cb:06:e6:a6:ce:a1:6f:aa:57:e8:27:d5:f1:
         ee:bd:20:54:84:3e:93:d2:17:ae:5c:21:b2:c3:25:71:13:da:
         6f:49:51:8b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNXb+BKjvWZ0PTn1434Jh2AujLqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVEQ0Q0RTcxRjkxMTY4QjU1NDE0NEIyQ0Q1NDI3NTg1
QUIxNkE4QTAeFw0yNTA3MjIxODQ1MDBaFw0yNjA3MjExODUwMDBaMDMxMTAvBgNV
BAMTKDQ3OEVFNDlGNjNCODYxNEZBQjlDQzMxMTI2RDUzREY3ODg3NjlDNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31D1pj/YNsgggYss6Y6s1l1sL
5oDh4vE2/fNrlx9lpkPBP3kazalVlN8mpRuM4sz4iU1wraW5vu938NOe5vjEUuXC
PzgXMj6g9aqrTBae7WLUP8W9ZJ32PG7BtGDey+bnVR1dX9bnYI5TaouH4Q96kQP6
mmtP7eiZ6uKfDEMtuHm0BQaOUIo3b8iImuEsQUzBNKNLqd2cebK4d1WAHDw+Y+Xv
130TTIYtQ6JTdYbBQZH38e0ptYeMOOmPgN778uGPW2g6jK2TywEN666ZnY8Oqqw0
TwqrIkcVKFVnEH4CB8KdfG92kBs0+acdOPQUcr7/ZA7KSzu99qDyYJsgTK9JAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUR47kn2O4YU+rnMMRJtU994h2nG8wHwYDVR0j
BBgwFoAUXtzU5x+RFotVQUSyzVQnWFqxaoowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjIyQTdCRTk1NUI0Q0UxNEVDRjM5RjZGOEUxRDBERDI5
QjdGRUI0NzEwQTY5QTlDM0RFNjgzN0NBOUQwREYwLzAvNUVEQ0Q0RTcxRjkxMTY4
QjU1NDE0NEIyQ0Q1NDI3NTg1QUIxNkE4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RURDRDRFNzFGOTExNjhCNTU0
MTQ0QjJDRDU0Mjc1ODVBQjE2QThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIyMkE3QkU5NTVCNENFMTRFQ0YzOUY2RjhFMUQwREQyOUI3RkVCNDcx
MEE2OUE5QzNERTY4MzdDQTlEMERGMC8wLzMxMzkzMDJlMzkzOTJlMzkzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzM5MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5jXjAN
BgkqhkiG9w0BAQsFAAOCAQEASgtTfXiiSE1GMxofhx9kO7rvBypAUkI/98KYaIi3
Eovh5XKHbHz82ybgaL/8QAXol7hWWxrfDFNm6f663qDasEmehJCcWvt3MDzhcmQb
Ej1677N/faxe2bkmSnUDzOVLwqXIDUIkBh2Kfbj+A5C26A6mLo+/wdwIdcvfMflN
QRfE8ktdfetSoIdGgKWVdgW+cX2vkYleSDvxlXj5NrV0qshC5HkUv0dYvTS/RCKs
VzHwD5dZKYkjJ7g+zucza+lwNdkhyuTYJnZNfEaGj+VjNgxTe7sB89Oo3QbH75/L
BuamzqFvqlfoJ9Xx7r0gVIQ+k9IXrlwhssMlcRPab0lRiw==
-----END CERTIFICATE-----
Generated at Sat Aug 2 14:12:56 2025 by rpki-client