Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139342e302f32342d3234203d3e203630303232.roa
File:                     3139302e3130352e3139342e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          6fgOKOOwmoRxtIKePxMS9T5qUbXsxNbjPWK1favWj1g=
Subject key identifier:   60:95:03:56:28:CC:A1:D8:C0:06:C1:4A:36:DB:D5:C9:91:CB:9F:0B
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       34C95FCB47640E80E078F99A6BD5BCC548D0A941
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139342e302f32342d3234203d3e203630303232.roa
Signing time:             Sun 27 Jul 2025 09:10:00 +0000
ROA not before:           Sun 27 Jul 2025 09:05:00 +0000
ROA not after:            Sun 26 Jul 2026 09:10:00 +0000
asID:                     60022
IP address blocks:        190.105.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c9:5f:cb:47:64:0e:80:e0:78:f9:9a:6b:d5:bc:c5:48:d0:a9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Jul 27 09:05:00 2025 GMT
            Not After : Jul 26 09:10:00 2026 GMT
        Subject: CN=6095035628CCA1D8C006C14A36DBD5C991CB9F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d1:d6:fc:83:6b:67:6b:5b:69:16:b0:e1:1b:
                    d3:15:1d:7a:82:a8:23:45:11:9c:5c:a3:6d:62:cc:
                    93:43:79:c1:de:57:89:21:b9:a2:55:b5:56:4b:83:
                    ae:da:0d:b0:27:81:5f:07:62:20:c7:a1:23:74:44:
                    bb:a1:de:aa:25:31:c3:f8:45:f4:ad:77:60:9a:7b:
                    06:8b:ab:f8:07:55:63:43:eb:c7:48:4d:94:10:87:
                    3d:4a:56:52:14:e7:63:4a:00:55:f4:0a:95:71:16:
                    84:fc:92:c8:1f:d7:7b:b3:48:57:af:44:9f:16:01:
                    72:7f:3e:45:e1:5a:88:a5:15:09:f6:86:41:b1:6c:
                    c3:11:c0:a4:ac:5a:42:6b:a8:24:dc:7a:e4:24:be:
                    11:f1:e6:db:c1:06:b6:ca:33:cf:1d:dd:e0:cb:9d:
                    aa:84:28:8f:9c:33:4c:55:6c:d4:dc:37:42:39:f2:
                    f3:40:f1:07:5a:d8:ac:b1:54:ad:4e:89:99:14:22:
                    de:0a:fb:3c:cf:96:f6:d6:0d:e6:6d:06:3b:88:4e:
                    c8:4a:cc:8a:f7:83:46:dd:f3:4c:44:a5:fc:aa:71:
                    56:69:87:c8:c1:9d:44:e2:3b:3d:85:a9:1a:46:93:
                    3b:9a:2f:e7:97:9f:d8:3f:5d:e7:d7:c6:81:6d:b9:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:95:03:56:28:CC:A1:D8:C0:06:C1:4A:36:DB:D5:C9:91:CB:9F:0B
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139342e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:cd:98:44:10:f7:ef:ff:6c:f7:78:1b:1a:b5:f8:da:87:c9:
         d3:43:01:26:78:1e:d8:8b:27:62:f7:e0:55:b5:df:60:55:98:
         5d:05:e8:04:3f:b4:6f:83:81:23:71:91:3a:5f:a1:8d:bd:81:
         40:98:93:0f:c0:86:8e:10:12:e9:8a:5f:98:cc:28:27:d1:0b:
         0c:ff:bc:2d:91:23:df:d6:9d:66:4e:ec:e6:83:ff:81:f3:ef:
         d2:b9:52:1a:eb:c3:67:35:3e:cc:f7:39:9d:9d:bc:b3:cd:89:
         ef:a3:16:8b:e4:c8:24:ab:e1:35:73:b6:fe:c9:97:d2:43:53:
         3d:e0:2e:10:d0:ee:a9:e0:3e:16:6a:fc:91:91:fe:4b:f8:e7:
         95:88:e3:5c:10:80:5d:8e:c4:6e:1b:fc:f5:f7:00:97:ae:5b:
         ee:78:93:c9:a9:ae:40:09:fd:df:76:a8:7c:ae:87:96:c8:05:
         8c:72:dd:5a:74:c7:5d:2f:06:8d:8e:d7:3b:d5:70:95:b0:88:
         a0:9f:12:db:cc:26:db:31:26:59:d5:ea:e4:1f:30:2c:af:fe:
         20:3e:13:49:ab:73:22:03:78:7a:86:3a:c5:ac:62:e1:2c:e5:
         16:38:38:75:32:26:11:95:d3:d4:09:38:52:75:7d:d2:6a:64:
         57:8b:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:55:28 2025 by rpki-client