Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3230302e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          xhr/mViblUeIn1ROXaywbasBH3WiNW6zreuxmWZwn3M=
Subject key identifier:   84:9A:75:DC:55:F7:14:80:D1:0B:A0:04:39:EA:07:C6:07:C7:D5:3C
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       4F23BD16D014D19ADCA1B1D4E8F83DF20752E56B
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 02 Apr 2025 18:50:03 +0000
ROA not before:           Wed 02 Apr 2025 18:45:03 +0000
ROA not after:            Wed 01 Apr 2026 18:50:03 +0000
asID:                     20454
IP address blocks:        190.112.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:23:bd:16:d0:14:d1:9a:dc:a1:b1:d4:e8:f8:3d:f2:07:52:e5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:03 2025 GMT
            Not After : Apr  1 18:50:03 2026 GMT
        Subject: CN=849A75DC55F71480D10BA00439EA07C607C7D53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:52:3e:2d:05:b5:85:97:3d:d5:c8:e5:f3:f9:
                    83:08:40:76:3f:1d:c5:ff:4d:23:32:ab:c3:90:84:
                    9c:61:c5:ff:be:36:1a:ea:8f:15:7e:a3:f0:31:ee:
                    49:20:b9:23:95:9f:d0:e8:8d:ce:81:a7:88:af:43:
                    3c:15:d3:b2:d8:d7:76:af:6d:0c:38:75:ea:13:bc:
                    eb:b9:ed:e3:ff:57:3e:cb:77:b7:ba:61:8e:82:7d:
                    32:35:9d:05:a5:40:49:bb:30:c0:d9:80:60:f0:32:
                    28:42:9d:4f:3c:5a:f6:c4:60:e5:15:f7:f4:3f:5b:
                    f2:f1:83:a4:f4:c3:b7:46:37:6a:4f:af:bc:37:af:
                    6f:fa:3d:68:2e:4e:4a:29:64:dc:66:15:6d:2c:e8:
                    29:e6:32:22:a1:46:ac:bd:5a:b1:12:c3:bb:f6:bf:
                    71:49:09:45:91:65:ed:d4:85:aa:fb:db:18:4a:ba:
                    b6:46:2c:1d:87:84:a9:d4:2b:83:cf:81:4d:5d:12:
                    9e:64:17:db:26:29:46:8f:98:ac:7e:56:45:03:c4:
                    b0:c0:90:a4:4d:16:e5:96:54:f9:e6:b9:3d:fb:d6:
                    0a:45:3f:c2:64:ce:74:da:22:de:06:35:13:64:3d:
                    82:ba:ca:12:bc:9c:70:fb:34:38:53:df:09:da:ed:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9A:75:DC:55:F7:14:80:D1:0B:A0:04:39:EA:07:C6:07:C7:D5:3C
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:71:4d:39:ac:36:6e:e5:15:c6:63:3e:8f:ef:f9:3d:a6:85:
         b9:a5:47:48:87:01:8e:f7:e1:f5:12:93:64:ab:a2:20:9e:1b:
         f1:26:c2:32:44:c2:67:b8:cc:1a:39:3c:18:d5:32:ac:0f:d5:
         1c:7d:a9:87:38:c6:ee:b0:28:f3:94:17:d3:a4:79:7d:4b:00:
         5e:72:9d:06:c8:64:7e:8d:c1:ec:6a:63:87:ea:97:ea:41:e7:
         b9:f7:fa:fb:58:03:bd:98:33:fe:da:a3:be:a8:f7:8b:04:ff:
         68:34:b8:d6:2d:d0:d7:a2:56:02:16:43:4b:c9:7c:43:bc:f6:
         1c:da:2c:20:77:cf:cf:bc:8a:9a:bd:1d:fc:a2:bd:91:b7:c8:
         07:2d:79:5e:14:87:56:a2:25:1a:61:74:a6:f1:36:df:c0:16:
         a6:d3:26:47:f2:4c:15:fb:7d:59:90:fe:75:83:35:a1:b6:fa:
         c6:e6:1c:38:16:8c:1d:26:ee:7c:08:cf:94:9a:ab:52:88:bb:
         0c:9e:61:e7:7c:8c:93:9a:60:b9:47:c0:c4:86:0d:eb:6f:a8:
         77:0d:5c:b7:9b:fd:4c:aa:ff:5e:a4:f2:c1:18:06:13:7f:a4:
         72:d6:05:b9:d4:7b:87:e6:c8:8b:f9:c4:27:4b:c9:63:b2:a6:
         8f:4a:61:29
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTyO9FtAU0ZrcobHU6Pg98gdS5WswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA0MDIxODQ1MDNaFw0yNjA0MDExODUwMDNaMDMxMTAvBgNV
BAMTKDg0OUE3NURDNTVGNzE0ODBEMTBCQTAwNDM5RUEwN0M2MDdDN0Q1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUj4tBbWFlz3VyOXz+YMIQHY/
HcX/TSMyq8OQhJxhxf++NhrqjxV+o/Ax7kkguSOVn9Dojc6Bp4ivQzwV07LY13av
bQw4deoTvOu57eP/Vz7Ld7e6YY6CfTI1nQWlQEm7MMDZgGDwMihCnU88WvbEYOUV
9/Q/W/Lxg6T0w7dGN2pPr7w3r2/6PWguTkopZNxmFW0s6CnmMiKhRqy9WrESw7v2
v3FJCUWRZe3Uhar72xhKurZGLB2HhKnUK4PPgU1dEp5kF9smKUaPmKx+VkUDxLDA
kKRNFuWWVPnmuT371gpFP8JkznTaIt4GNRNkPYK6yhK8nHD7NDhT3wna7eRbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhJp13FX3FIDRC6AEOeoHxgfH1TwwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMjMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnDI
MA0GCSqGSIb3DQEBCwUAA4IBAQBjcU05rDZu5RXGYz6P7/k9poW5pUdIhwGO9+H1
EpNkq6IgnhvxJsIyRMJnuMwaOTwY1TKsD9UcfamHOMbusCjzlBfTpHl9SwBecp0G
yGR+jcHsamOH6pfqQee59/r7WAO9mDP+2qO+qPeLBP9oNLjWLdDXolYCFkNLyXxD
vPYc2iwgd8/PvIqavR38or2Rt8gHLXleFIdWoiUaYXSm8TbfwBam0yZH8kwV+31Z
kP51gzWhtvrG5hw4FowdJu58CM+UmqtSiLsMnmHnfIyTmmC5R8DEhg3rb6h3DVy3
m/1Mqv9epPLBGAYTf6Ry1gW51HuH5siL+cQnS8ljsqaPSmEp
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net