Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa
File:                     3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          8EP1sFISMJ7hHVeWynj2m6c7h/0HoMrtoaI80d7BtYI=
Subject key identifier:   35:6F:7E:F8:E3:24:2D:9E:84:D9:8B:35:C7:20:B8:40:D5:E8:7E:B7
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       678FB63910631983E95FA20179B93FE7994F691C
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa
Signing time:             Sat 02 Aug 2025 22:00:00 +0000
ROA not before:           Sat 02 Aug 2025 21:55:00 +0000
ROA not after:            Sat 01 Aug 2026 22:00:00 +0000
asID:                     60022
IP address blocks:        190.105.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:b6:39:10:63:19:83:e9:5f:a2:01:79:b9:3f:e7:99:4f:69:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Aug  2 21:55:00 2025 GMT
            Not After : Aug  1 22:00:00 2026 GMT
        Subject: CN=356F7EF8E3242D9E84D98B35C720B840D5E87EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:0b:7f:e9:f4:c7:b1:f0:d4:70:08:7c:78:
                    37:62:cf:8f:11:b9:e2:19:91:00:92:35:60:68:76:
                    3e:85:45:0f:32:31:13:9c:63:6e:c9:53:bd:f6:7e:
                    ed:7a:61:ce:1d:0a:94:b8:12:0c:ae:53:4c:32:b1:
                    fa:58:21:bc:f3:15:01:36:8f:85:8a:54:2d:3e:15:
                    b9:c4:92:51:c6:a8:24:39:0e:6a:00:91:1a:48:3f:
                    e1:1f:51:42:00:84:de:a5:d6:a1:e1:be:2f:06:48:
                    79:3e:31:b4:50:41:c7:9d:1b:4d:e4:dd:f2:d7:52:
                    d0:25:02:07:74:09:bb:f5:58:ff:49:00:4b:40:33:
                    08:af:fd:7a:c6:79:b8:07:6b:1f:a1:3b:18:e2:13:
                    7d:3b:35:77:a4:fc:8f:9e:31:8a:b3:63:6e:dd:60:
                    19:44:97:8c:4f:6f:33:8a:2f:d8:11:78:af:b4:62:
                    e3:ca:b2:4d:39:ce:b7:b8:36:30:99:36:b1:ed:52:
                    b9:d6:79:4d:93:5d:f7:0d:4e:7e:30:d6:e9:bf:58:
                    58:9c:3b:80:8a:35:9a:6b:19:25:16:16:dc:4c:b4:
                    b1:b9:bd:53:53:15:f3:89:62:be:a6:08:d0:97:92:
                    a2:0a:da:f0:48:6d:7b:d7:72:9f:8a:be:51:38:44:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:7E:F8:E3:24:2D:9E:84:D9:8B:35:C7:20:B8:40:D5:E8:7E:B7
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:4a:7a:78:52:1d:fc:62:39:ae:2c:d6:d2:89:23:0a:91:
         76:5f:8b:c5:32:46:05:f8:db:a0:55:d7:3e:da:55:7d:c9:ae:
         09:74:52:46:0a:50:f2:b3:66:eb:bb:79:b7:69:03:25:fe:6f:
         ea:21:03:98:84:72:6f:2f:4a:10:ba:84:66:2d:ad:23:17:36:
         f3:30:3a:e1:e9:7f:7e:63:36:3e:03:ca:7c:78:3e:e9:83:09:
         d5:9e:ea:ab:c8:02:eb:4a:15:4e:ea:6d:bd:93:1b:b3:99:3b:
         35:36:20:73:88:d7:1a:89:40:36:94:c1:dd:07:34:44:7f:23:
         87:29:2a:71:da:b4:a5:19:0a:c9:4b:01:11:28:ba:d2:9c:9e:
         d3:3c:59:91:58:17:23:6c:03:17:a9:68:a5:89:3b:70:91:dc:
         96:34:3b:3b:f1:2d:2c:6e:43:87:5a:67:cd:48:53:f3:24:6e:
         61:53:6e:63:c3:ea:89:4e:f6:56:a4:d9:d8:16:be:e4:37:c6:
         d5:51:f7:f7:08:97:66:16:4d:b4:a9:2a:bd:1c:a4:69:e3:ff:
         f6:05:13:2e:e1:85:68:c3:23:7d:4b:15:6c:0b:0c:8a:8c:00:
         c3:9d:53:85:6e:88:5f:1b:f7:45:7d:8e:e2:cf:0b:c9:0c:74:
         be:76:9a:8a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZ4+2ORBjGYPpX6IBebk/55lPaRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1RDA2QzI0QUYxQzI5RDIyMzI5MjY4OUY0MjAxRkRC
Q0MwQzA5MTAeFw0yNTA4MDIyMTU1MDBaFw0yNjA4MDEyMjAwMDBaMDMxMTAvBgNV
BAMTKDM1NkY3RUY4RTMyNDJEOUU4NEQ5OEIzNUM3MjBCODQwRDVFODdFQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYgt/6fTHsfDUcAh8eDdiz48R
ueIZkQCSNWBodj6FRQ8yMROcY27JU732fu16Yc4dCpS4EgyuU0wysfpYIbzzFQE2
j4WKVC0+FbnEklHGqCQ5DmoAkRpIP+EfUUIAhN6l1qHhvi8GSHk+MbRQQcedG03k
3fLXUtAlAgd0Cbv1WP9JAEtAMwiv/XrGebgHax+hOxjiE307NXek/I+eMYqzY27d
YBlEl4xPbzOKL9gReK+0YuPKsk05zre4NjCZNrHtUrnWeU2TXfcNTn4w1um/WFic
O4CKNZprGSUWFtxMtLG5vVNTFfOJYr6mCNCXkqIK2vBIbXvXcp+KvlE4RGK3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNW9++OMkLZ6E2Ys1xyC4QNXofrcwHwYDVR0j
BBgwFoAUMF0Gwkrxwp0iMpJon0IB/bzAwJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTJDOUFEMDdFRDg2M0ZFMzcxNENEMjQyRjE1MUFGODBG
RUQ5MUIxQzgzRjI3RUZGRjYzNUVFRTNGRDlGMzI3LzAvMzA1RDA2QzI0QUYxQzI5
RDIyMzI5MjY4OUY0MjAxRkRCQ0MwQzA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDVEMDZDMjRBRjFDMjlEMjIz
MjkyNjg5RjQyMDFGREJDQzBDMDkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyQzlBRDA3RUQ4NjNGRTM3MTRDRDI0MkYxNTFBRjgwRkVEOTFCMUM4
M0YyN0VGRkY2MzVFRUUzRkQ5RjMyNy8wLzMxMzkzMDJlMzEzMDM1MmUzMTM5MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzAzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmnD
MA0GCSqGSIb3DQEBCwUAA4IBAQAS0kp6eFId/GI5rizW0okjCpF2X4vFMkYF+Nug
Vdc+2lV9ya4JdFJGClDys2bru3m3aQMl/m/qIQOYhHJvL0oQuoRmLa0jFzbzMDrh
6X9+YzY+A8p8eD7pgwnVnuqryALrShVO6m29kxuzmTs1NiBziNcaiUA2lMHdBzRE
fyOHKSpx2rSlGQrJSwERKLrSnJ7TPFmRWBcjbAMXqWiliTtwkdyWNDs78S0sbkOH
WmfNSFPzJG5hU25jw+qJTvZWpNnYFr7kN8bVUff3CJdmFk20qSq9HKRp4//2BRMu
4YVowyN9SxVsCwyKjADDnVOFbohfG/dFfY7izwvJDHS+dpqK
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:04:23 2025 by rpki-client