Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203630303232.roa
File:                     3139302e3132312e3231302e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          pLziKJAzUBtQDjX1jGjX+m2jUUJLTm/JJ5blS6hF2zg=
Subject key identifier:   F5:6A:E1:39:70:A1:1A:E5:1E:0E:E0:19:CF:25:44:9B:2E:3E:AE:A6
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       4D9D26D90EEE27B9462B3B3378CEABE01D47CB58
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203630303232.roa
Signing time:             Sun 27 Jul 2025 09:20:00 +0000
ROA not before:           Sun 27 Jul 2025 09:15:00 +0000
ROA not after:            Sun 26 Jul 2026 09:20:00 +0000
asID:                     60022
IP address blocks:        190.121.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9d:26:d9:0e:ee:27:b9:46:2b:3b:33:78:ce:ab:e0:1d:47:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Jul 27 09:15:00 2025 GMT
            Not After : Jul 26 09:20:00 2026 GMT
        Subject: CN=F56AE13970A11AE51E0EE019CF25449B2E3EAEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:54:76:a5:b4:4d:e6:dc:3b:d5:bd:ed:e6:
                    57:01:76:d7:83:93:da:f3:c5:f5:cb:b8:73:98:eb:
                    c0:fd:47:98:8f:6a:8e:bd:fe:8e:63:58:50:c2:56:
                    69:2b:c1:9e:f6:be:f9:b6:c0:1b:e2:d0:f1:ec:79:
                    48:a1:55:3f:d6:6c:25:66:af:fe:cf:28:e0:5d:d7:
                    1d:54:3c:77:95:21:cf:74:1a:84:7f:5d:83:2c:56:
                    51:48:18:4d:6b:4d:15:ae:ec:b6:e9:6f:23:f6:c4:
                    b6:0b:86:1c:0a:b6:ea:e4:87:28:63:c0:33:1b:63:
                    db:20:7f:fd:3b:fd:24:9f:c0:fb:4f:ee:a5:40:25:
                    5d:10:72:d5:de:24:e9:20:fa:b7:bf:ee:61:66:59:
                    f3:fb:02:ea:37:03:cd:aa:2d:a9:54:b5:2a:b5:30:
                    8f:96:c1:f6:71:b0:78:c9:f8:bf:7f:e8:b4:e9:37:
                    b9:23:21:b1:b3:ed:9e:58:27:1f:6b:26:af:45:b0:
                    9e:ba:1a:0d:f1:af:80:ac:f6:27:d5:64:3a:ba:51:
                    ce:d3:6c:b7:5d:fc:25:84:87:df:60:04:40:a0:5e:
                    19:c0:f9:ef:fa:c5:76:e7:85:fe:a4:0e:c7:40:68:
                    4b:5d:c6:7b:bc:95:7c:9a:cd:e3:dc:a3:a5:1e:fc:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:E1:39:70:A1:1A:E5:1E:0E:E0:19:CF:25:44:9B:2E:3E:AE:A6
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:0f:ea:c6:81:d3:56:53:08:e2:06:2d:47:cf:5c:a6:61:2b:
         ae:61:2c:80:3f:99:85:15:f2:75:b1:f2:22:9d:3f:e3:53:46:
         b5:ff:28:cf:4e:3e:7e:c4:f3:f2:de:42:ed:c5:5d:d9:42:8c:
         86:a0:a0:b0:3a:99:10:03:84:69:54:45:db:b8:8f:71:c6:49:
         36:e2:f8:6f:70:74:66:55:8d:bf:fa:15:57:d4:eb:26:b0:de:
         b0:55:7b:c7:c9:67:76:76:55:6f:b2:95:c0:4d:52:aa:23:7b:
         29:d7:08:cf:03:8f:6c:a6:ea:c7:51:4c:e9:87:e3:65:bc:fb:
         b1:e8:6d:ec:9e:8c:96:a4:cd:2b:1e:e9:1a:33:17:5f:b8:3d:
         7e:08:68:ca:0c:a5:5b:90:7e:c1:aa:1c:db:a3:ea:07:be:00:
         57:3e:cb:43:06:47:98:58:bd:e8:93:91:95:09:49:6a:ca:d8:
         c8:53:73:4e:78:ce:36:76:70:3c:ab:c8:00:66:0e:81:35:af:
         e2:49:2c:52:3c:c6:1f:8f:84:70:ff:87:67:88:36:3d:20:a9:
         62:67:f6:f4:ad:44:c8:2d:22:18:00:96:a7:53:f2:47:60:3b:
         b4:e6:10:20:3c:b4:6a:59:e1:60:a8:4f:71:b0:61:18:b7:ab:
         7a:83:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:00 2025 by rpki-client