Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230332e302f32342d3234203d3e203132313839.roa
File:                     3139302e3131322e3230332e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          +s+5M26laZvsFy6w1AUjTFXDK7j/UoZARWJLxFYCQLE=
Subject key identifier:   22:04:02:F2:70:9B:01:8D:23:36:B9:4C:62:EE:BD:66:02:A0:B0:8F
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       37BD7690339E967231804CCCDB68BA37AEA00FB8
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230332e302f32342d3234203d3e203132313839.roa
Signing time:             Wed 02 Apr 2025 18:50:03 +0000
ROA not before:           Wed 02 Apr 2025 18:45:03 +0000
ROA not after:            Wed 01 Apr 2026 18:50:03 +0000
asID:                     12189
IP address blocks:        190.112.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bd:76:90:33:9e:96:72:31:80:4c:cc:db:68:ba:37:ae:a0:0f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:03 2025 GMT
            Not After : Apr  1 18:50:03 2026 GMT
        Subject: CN=220402F2709B018D2336B94C62EEBD6602A0B08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:8b:56:a5:4a:3b:6d:88:d5:ec:58:19:31:
                    b7:e0:7c:db:6f:ad:43:3d:e0:3f:23:ea:3a:ab:a2:
                    2c:90:05:e4:5e:d9:9e:4e:a5:15:6a:70:15:31:4b:
                    98:8b:7d:d2:41:d8:df:66:42:26:8c:11:ca:2c:c5:
                    10:6a:d3:1d:6a:25:cb:b7:90:8f:b3:c9:c2:98:0f:
                    63:dc:53:d0:3a:cb:d6:3c:45:88:c4:43:08:41:1c:
                    66:bf:d2:86:cd:db:87:6a:ea:84:89:64:f3:64:ce:
                    78:30:21:d9:74:37:c9:cc:a8:1a:75:a0:eb:b2:96:
                    80:00:5f:f6:d2:15:f6:16:cb:8b:29:aa:f7:7b:fd:
                    3e:92:a0:ab:7a:aa:9c:f8:80:48:e2:f5:98:80:8f:
                    24:12:8d:55:0c:19:80:d5:b3:44:56:b9:2c:b9:fc:
                    81:84:97:7d:d5:bc:4c:6a:cf:21:b8:7b:4f:86:ee:
                    66:de:46:42:26:5b:cf:28:d3:a3:95:49:19:2d:79:
                    7e:8f:2e:33:0b:eb:42:79:16:ef:95:2c:71:2b:3a:
                    bd:cf:ae:c1:af:74:95:d2:68:49:32:83:05:40:75:
                    86:04:7d:98:f8:04:80:d0:26:6a:84:8f:20:fa:af:
                    19:28:34:35:09:59:83:39:0e:a0:2b:5b:5d:58:f2:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:02:F2:70:9B:01:8D:23:36:B9:4C:62:EE:BD:66:02:A0:B0:8F
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230332e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:03:94:b2:f2:98:4c:66:d9:0f:0f:e3:a9:49:d0:96:f6:
         4b:d3:c2:40:95:a5:88:94:04:5a:af:51:56:f9:b5:91:3b:64:
         12:2c:6d:65:1e:5e:8d:2b:45:24:8e:52:d6:f5:28:ac:e4:85:
         8a:04:9e:3b:0c:74:27:fc:3d:68:91:d3:bd:6a:41:63:63:83:
         35:1b:4b:ef:c2:cf:09:5e:42:45:62:04:51:58:3d:2a:bb:a9:
         55:db:1f:30:23:a3:c1:d9:1d:fe:5d:2d:2f:d4:44:d3:8e:14:
         e8:91:16:74:04:21:55:19:07:c4:0e:6e:86:3e:b9:94:b2:d4:
         4a:54:8e:87:d2:f5:19:e8:87:81:da:52:ec:ff:b5:98:5a:6c:
         e8:6c:40:62:fa:8d:2e:f7:ad:87:33:c5:e4:f5:89:88:ec:84:
         ac:33:3a:79:0b:96:69:7d:6a:6d:6c:60:d1:1c:50:f4:64:3c:
         6f:a2:73:93:00:7c:1a:cc:2d:16:ef:2f:3d:f6:09:3f:65:49:
         5f:ea:ef:6e:ad:ae:e5:93:a7:d1:8f:58:82:55:62:e3:89:47:
         3a:a5:df:71:3f:5f:59:32:53:c6:c5:fd:7d:d0:b9:ee:04:78:
         0e:03:c7:1a:dc:9f:12:8d:d1:17:d9:4c:bb:0f:db:ac:37:25:
         e8:a5:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net