Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          Q6QGKR5RJTbN/yU4iyCuKCztvKvyAn1/evnsW2OBrB4=
Subject key identifier:   AB:B2:01:BB:F6:DE:F9:8C:8E:F0:45:5B:0C:F9:40:EB:43:E4:AD:C3
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       312FB16D22A669739FB260627523FBF7EEE4D3B1
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 02 Apr 2025 18:50:04 +0000
ROA not before:           Wed 02 Apr 2025 18:45:04 +0000
ROA not after:            Wed 01 Apr 2026 18:50:04 +0000
asID:                     20454
IP address blocks:        190.112.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2f:b1:6d:22:a6:69:73:9f:b2:60:62:75:23:fb:f7:ee:e4:d3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:04 2025 GMT
            Not After : Apr  1 18:50:04 2026 GMT
        Subject: CN=ABB201BBF6DEF98C8EF0455B0CF940EB43E4ADC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:c7:c9:e1:eb:bb:e9:59:94:ab:ab:e7:36:
                    7b:f0:fb:70:3e:84:d8:73:8b:c9:38:6b:75:08:51:
                    d3:35:6a:6a:2f:65:e3:93:04:27:85:aa:66:cc:7d:
                    ec:a0:65:b8:2d:53:55:71:64:b6:e8:08:b2:d8:0d:
                    53:a5:f1:9a:96:bc:33:20:06:1e:e9:0e:62:f7:88:
                    68:15:c2:34:f8:3c:89:37:37:e0:dd:df:41:1d:84:
                    1b:05:01:2e:29:57:e6:25:9e:80:27:44:0a:dd:c5:
                    bd:6f:d4:f8:dd:78:f5:4e:00:f6:06:32:47:f7:9b:
                    7f:83:35:68:d4:08:c8:6d:55:e0:03:97:d7:87:15:
                    02:20:16:00:0d:0a:c5:60:29:d6:8d:12:4a:5a:69:
                    90:fb:41:30:f8:db:01:fc:47:ba:f3:04:04:6a:86:
                    90:95:53:16:41:0a:d3:1a:a9:97:97:ec:aa:95:81:
                    fc:97:6b:d9:03:cb:e0:20:47:99:3c:f0:32:ac:6c:
                    af:f2:05:d6:39:89:20:a5:a6:3c:29:6a:92:dd:21:
                    3a:82:2d:a5:78:6e:77:4c:a2:4c:6c:e2:ec:ef:f6:
                    35:56:18:f1:56:4a:46:3a:6a:c7:6b:4f:f0:21:8f:
                    ef:fe:93:00:94:8e:61:cd:ef:c7:d4:51:ca:8c:c2:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B2:01:BB:F6:DE:F9:8C:8E:F0:45:5B:0C:F9:40:EB:43:E4:AD:C3
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:df:40:55:db:4d:c9:ad:44:70:2c:62:7f:5a:88:e6:1d:
         5a:a6:4f:86:e8:8d:4b:fa:22:3e:01:85:c1:d5:99:f5:75:3f:
         ea:fd:78:b8:47:a5:48:66:de:b5:d6:a5:d7:fa:38:50:d5:ab:
         d2:a0:61:ce:ec:74:58:6f:67:10:3a:52:0b:27:fb:10:f1:06:
         18:f6:d1:f8:b1:08:e7:14:4e:ac:42:96:63:01:78:b8:17:5f:
         24:d9:a4:ea:23:ca:45:ed:46:e7:6f:f0:8e:77:59:20:02:ed:
         b8:31:26:f9:e5:4d:22:24:28:ce:6c:65:68:60:05:ab:8d:05:
         6f:0c:af:56:2b:66:33:86:ee:ac:01:66:27:6b:75:49:6f:ef:
         22:2a:4e:90:23:fc:b9:5c:79:0b:d9:5a:28:da:1d:76:55:b4:
         32:8b:27:f1:bb:93:97:2d:70:c2:e3:43:3f:8e:4e:1d:f1:4a:
         1c:9f:82:d2:79:0a:99:65:ca:0d:bb:e1:35:fc:6d:d3:99:b0:
         6b:ef:c2:e7:f4:8e:6d:9b:a1:ab:44:aa:3d:fc:17:8a:68:40:
         90:a9:bb:7e:24:6d:65:b3:f4:63:0c:1b:c3:79:91:10:b9:55:
         51:3b:0e:09:cd:05:bb:fc:ac:68:ad:be:73:b5:d7:8a:95:41:
         12:70:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net