Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa
File:                     3139302e3131322e34302e302f32322d3234203d3e203532333137.roa (raw, json)
Hash identifier:          0A4C2YQisCJ3iLLkW7P4Q2ss3wnRf3fEoF6fwwqo2KI=
Subject key identifier:   4F:63:0B:8C:B0:9C:1A:D2:77:DC:84:A2:7C:CA:83:56:33:A6:BE:3C
Certificate issuer:       /CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
Certificate serial:       0E8A85AC90E98DC22BBEC340CCAAA00FBDF1765B
Authority key identifier: 0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa
Signing time:             Tue 04 Feb 2025 18:20:24 +0000
ROA not before:           Tue 04 Feb 2025 18:15:24 +0000
ROA not after:            Tue 03 Feb 2026 18:20:24 +0000
asID:                     52317
IP address blocks:        190.112.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8a:85:ac:90:e9:8d:c2:2b:be:c3:40:cc:aa:a0:0f:bd:f1:76:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
        Validity
            Not Before: Feb  4 18:15:24 2025 GMT
            Not After : Feb  3 18:20:24 2026 GMT
        Subject: CN=4F630B8CB09C1AD277DC84A27CCA835633A6BE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:9b:2d:b6:73:9d:aa:3f:06:a5:45:8b:3c:
                    3e:a7:cd:61:a1:5e:6c:2a:0b:0e:5e:b3:de:96:bd:
                    b8:46:4e:90:40:0a:09:32:8b:bc:9e:5f:d5:2f:4f:
                    1f:ee:9c:f9:bc:2a:67:7a:8b:e2:c3:98:51:f7:70:
                    b3:13:49:11:96:1d:de:a4:44:c8:db:72:27:bf:9c:
                    fb:43:a3:97:d6:19:cc:c6:bf:9c:df:de:cd:a6:39:
                    6f:6d:16:de:7b:73:49:3b:14:3a:22:6e:9f:95:ed:
                    de:3b:28:73:f6:55:40:31:27:7e:d8:a0:46:3c:99:
                    54:e3:5d:98:1e:56:27:0a:93:65:0e:1b:2b:be:42:
                    b6:80:5f:2c:fe:58:cd:cc:3e:dc:b9:4b:ed:93:98:
                    8b:ac:66:aa:2d:f2:be:d9:63:6c:2f:5b:5c:1c:87:
                    2e:d4:9b:dc:ac:78:c3:1f:37:a2:ca:a8:b4:9e:27:
                    57:35:af:35:8a:58:e8:15:ab:ce:73:98:c3:31:50:
                    a3:97:ea:ea:57:ec:af:a9:52:1a:29:17:80:57:19:
                    5d:1a:bc:e6:c6:79:50:f6:c0:97:ce:84:9b:51:83:
                    d7:09:92:b5:9a:94:74:0c:a4:02:ab:31:ce:0a:13:
                    14:80:5e:0f:ae:55:08:ba:72:9e:4b:66:14:0d:fd:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:0B:8C:B0:9C:1A:D2:77:DC:84:A2:7C:CA:83:56:33:A6:BE:3C
            X509v3 Authority Key Identifier:
                keyid:0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:67:16:48:ae:1d:78:95:ff:79:69:b7:b8:80:5c:8f:d5:90:
         52:21:fd:4d:68:37:39:ea:2f:b0:13:e4:ac:89:ce:3a:ce:e7:
         a9:95:41:36:0a:c2:1b:80:6b:17:da:6e:2c:57:bb:24:c4:10:
         2e:8e:61:20:44:30:dd:00:25:87:23:cb:59:41:7a:2e:89:9d:
         d9:a0:dd:a1:8e:b6:3e:97:96:47:56:4f:28:65:f9:0d:d1:0e:
         ee:3c:2e:fb:c5:61:71:ae:1e:d0:e3:fa:2a:79:d2:7d:89:1b:
         95:a5:e9:08:6a:57:c8:7b:f9:91:71:ad:83:3b:98:d3:84:6e:
         c3:ad:7c:1c:ac:f7:17:83:8d:f7:1a:b6:07:52:61:af:d3:a7:
         b9:68:7c:ba:8d:0a:51:34:95:4a:50:88:79:74:cf:fa:68:6f:
         07:83:7d:f2:06:62:5d:05:c3:e8:6c:3c:df:76:fe:fc:a5:fa:
         38:b1:82:22:69:ee:33:c3:62:65:82:c3:f9:ef:bb:80:b9:77:
         de:a8:15:00:2e:9a:e5:b4:5e:d5:40:37:e0:e1:27:02:61:4e:
         06:7c:34:91:df:67:fc:24:a9:b8:b7:b3:fa:06:c9:46:12:86:
         af:c6:6f:f8:eb:34:24:be:65:2e:06:3a:4f:ed:26:fa:e0:c9:
         87:62:00:42
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDoqFrJDpjcIrvsNAzKqgD73xdlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZCQzkyNzYyNUYwMjc3NkExNjE2OUFCMDM4QUQ5RUIw
QTQ2ODlFMzAeFw0yNTAyMDQxODE1MjRaFw0yNjAyMDMxODIwMjRaMDMxMTAvBgNV
BAMTKDRGNjMwQjhDQjA5QzFBRDI3N0RDODRBMjdDQ0E4MzU2MzNBNkJFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhJsttnOdqj8GpUWLPD6nzWGh
XmwqCw5es96WvbhGTpBACgkyi7yeX9UvTx/unPm8Kmd6i+LDmFH3cLMTSRGWHd6k
RMjbcie/nPtDo5fWGczGv5zf3s2mOW9tFt57c0k7FDoibp+V7d47KHP2VUAxJ37Y
oEY8mVTjXZgeVicKk2UOGyu+QraAXyz+WM3MPty5S+2TmIusZqot8r7ZY2wvW1wc
hy7Um9yseMMfN6LKqLSeJ1c1rzWKWOgVq85zmMMxUKOX6upX7K+pUhopF4BXGV0a
vObGeVD2wJfOhJtRg9cJkrWalHQMpAKrMc4KExSAXg+uVQi6cp5LZhQN/VWnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUT2MLjLCcGtJ33ISifMqDVjOmvjwwHwYDVR0j
BBgwFoAUD7ySdiXwJ3ahYWmrA4rZ6wpGieMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjUzNTIyODdGMzFDMEM2RDc4NDJCMzA3RDM5MUUyRjU5
MTU5ODRDQ0NFRDIzMzQxODE2MzczNDI1RDBGM0Q3LzAvMEZCQzkyNzYyNUYwMjc3
NkExNjE2OUFCMDM4QUQ5RUIwQTQ2ODlFMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkJDOTI3NjI1RjAyNzc2QTE2
MTY5QUIwMzhBRDlFQjBBNDY4OUUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY1MzUyMjg3RjMxQzBDNkQ3ODQyQjMwN0QzOTFFMkY1OTE1OTg0Q0ND
RUQyMzM0MTgxNjM3MzQyNUQwRjNENy8wLzMxMzkzMDJlMzEzMTMyMmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5wKDAN
BgkqhkiG9w0BAQsFAAOCAQEAM2cWSK4deJX/eWm3uIBcj9WQUiH9TWg3OeovsBPk
rInOOs7nqZVBNgrCG4BrF9puLFe7JMQQLo5hIEQw3QAlhyPLWUF6Lomd2aDdoY62
PpeWR1ZPKGX5DdEO7jwu+8Vhca4e0OP6KnnSfYkblaXpCGpXyHv5kXGtgzuY04Ru
w618HKz3F4ON9xq2B1Jhr9OnuWh8uo0KUTSVSlCIeXTP+mhvB4N98gZiXQXD6Gw8
33b+/KX6OLGCImnuM8NiZYLD+e+7gLl33qgVAC6a5bRe1UA34OEnAmFOBnw0kd9n
/CSpuLez+gbJRhKGr8Zv+Os0JL5lLgY6T+0m+uDJh2IAQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:43 2025 by rpki-client