Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa
File:                     3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          E2Vu24W/Mbep8XqL8UPO3h47g1+0VDbq5x4Zo6C/2+E=
Subject key identifier:   6B:B7:A2:07:F9:2C:15:98:A2:AA:FD:51:42:73:AC:F7:63:E2:E5:34
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       35E10D62C715B2F84B274377ED06055EE2CB36EE
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa
Signing time:             Sat 02 Aug 2025 22:00:00 +0000
ROA not before:           Sat 02 Aug 2025 21:55:00 +0000
ROA not after:            Sat 01 Aug 2026 22:00:00 +0000
asID:                     60022
IP address blocks:        190.121.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:0d:62:c7:15:b2:f8:4b:27:43:77:ed:06:05:5e:e2:cb:36:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Aug  2 21:55:00 2025 GMT
            Not After : Aug  1 22:00:00 2026 GMT
        Subject: CN=6BB7A207F92C1598A2AAFD514273ACF763E2E534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:2a:7a:c5:34:70:5c:71:fa:d5:14:2b:7a:
                    5b:60:d5:f0:64:d6:0b:ef:0f:07:cc:12:5d:b9:b2:
                    78:50:df:b3:38:10:12:1b:6a:db:ac:77:fb:35:e8:
                    58:dd:c2:eb:8a:30:dc:cb:e5:f6:03:8f:12:ae:91:
                    b3:5a:e2:81:81:d3:32:a9:74:ac:89:0b:96:bf:b5:
                    05:1a:0b:f3:fc:d9:6e:19:1e:00:e6:a1:7f:b5:84:
                    b9:ca:2b:21:38:d8:02:51:99:e3:ee:e4:35:de:18:
                    d2:e8:a2:4b:93:48:ca:62:bc:75:da:6b:ca:6d:5c:
                    42:0c:0c:bd:dc:7b:e2:35:89:f2:ef:18:47:62:4f:
                    78:d3:4d:9d:bd:62:30:46:06:d8:70:30:8f:87:fd:
                    a3:12:9e:25:8c:be:a1:ff:6a:6b:ed:74:52:b0:df:
                    50:05:35:94:9e:41:5e:13:6e:52:3a:bb:fc:7f:e6:
                    1c:54:71:15:5e:e6:e0:f7:9c:55:09:c2:8e:f1:49:
                    88:0c:37:8c:58:1a:55:12:6b:b4:6c:6c:25:86:4d:
                    4b:2c:36:61:f3:65:a4:df:ac:dd:69:96:51:f8:cd:
                    cb:9f:73:47:7d:44:98:f5:ed:08:7c:88:cb:80:81:
                    79:06:0d:63:9a:41:4e:77:be:d8:fa:21:9c:1d:9e:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B7:A2:07:F9:2C:15:98:A2:AA:FD:51:42:73:AC:F7:63:E2:E5:34
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:87:1c:e7:07:22:43:f1:93:07:8f:f4:f8:8a:37:ea:07:3a:
         ae:f2:e5:2a:63:00:0f:3d:2d:c1:5d:be:39:e8:cc:96:1a:ad:
         97:39:8d:91:ac:60:6a:96:92:0d:94:a6:94:51:7e:7f:b7:4b:
         ae:41:16:26:c5:56:06:bb:d9:7a:0a:97:c8:47:64:9c:a4:d7:
         57:97:b3:02:b5:bb:6f:50:ab:c9:11:da:35:fa:73:36:ea:2d:
         f9:24:ee:2c:3a:bf:e1:c3:8b:c8:c4:ee:a1:ea:94:9e:25:8e:
         fe:04:f2:ac:92:ae:ee:32:b4:b2:b1:17:9b:3a:ad:82:c4:c5:
         22:fa:40:c0:e5:42:dc:e0:7f:ff:8d:d4:6b:96:3c:7c:49:a6:
         a6:8e:79:a3:96:d2:5a:0a:0a:7d:1b:9f:27:15:43:e0:a1:6c:
         01:1e:f3:5a:9c:e1:f9:1d:54:da:b5:06:6d:b3:77:9f:f6:6e:
         a4:64:df:fd:f2:c1:f9:b6:4a:88:a4:d2:28:5c:cf:0e:20:02:
         15:52:45:81:73:a2:c7:39:6c:3e:c2:6d:f1:26:ac:4b:f2:d2:
         7d:2e:98:97:30:70:e9:bb:99:f8:f0:8f:a4:3f:de:3e:68:56:
         d0:1e:c1:85:5a:37:37:cb:07:3b:45:64:ec:bc:a4:1c:4e:04:
         a5:d1:ca:b6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNeENYscVsvhLJ0N37QYFXuLLNu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1RDA2QzI0QUYxQzI5RDIyMzI5MjY4OUY0MjAxRkRC
Q0MwQzA5MTAeFw0yNTA4MDIyMTU1MDBaFw0yNjA4MDEyMjAwMDBaMDMxMTAvBgNV
BAMTKDZCQjdBMjA3RjkyQzE1OThBMkFBRkQ1MTQyNzNBQ0Y3NjNFMkU1MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1yp6xTRwXHH61RQreltg1fBk
1gvvDwfMEl25snhQ37M4EBIbatusd/s16FjdwuuKMNzL5fYDjxKukbNa4oGB0zKp
dKyJC5a/tQUaC/P82W4ZHgDmoX+1hLnKKyE42AJRmePu5DXeGNLookuTSMpivHXa
a8ptXEIMDL3ce+I1ifLvGEdiT3jTTZ29YjBGBthwMI+H/aMSniWMvqH/amvtdFKw
31AFNZSeQV4TblI6u/x/5hxUcRVe5uD3nFUJwo7xSYgMN4xYGlUSa7RsbCWGTUss
NmHzZaTfrN1pllH4zcufc0d9RJj17Qh8iMuAgXkGDWOaQU53vtj6IZwdnqqzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUa7eiB/ksFZiiqv1RQnOs92Pi5TQwHwYDVR0j
BBgwFoAUMF0Gwkrxwp0iMpJon0IB/bzAwJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTJDOUFEMDdFRDg2M0ZFMzcxNENEMjQyRjE1MUFGODBG
RUQ5MUIxQzgzRjI3RUZGRjYzNUVFRTNGRDlGMzI3LzAvMzA1RDA2QzI0QUYxQzI5
RDIyMzI5MjY4OUY0MjAxRkRCQ0MwQzA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDVEMDZDMjRBRjFDMjlEMjIz
MjkyNjg5RjQyMDFGREJDQzBDMDkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyQzlBRDA3RUQ4NjNGRTM3MTRDRDI0MkYxNTFBRjgwRkVEOTFCMUM4
M0YyN0VGRkY2MzVFRUUzRkQ5RjMyNy8wLzMxMzkzMDJlMzEzMjMxMmUzMjMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzAzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnnU
MA0GCSqGSIb3DQEBCwUAA4IBAQCGhxznByJD8ZMHj/T4ijfqBzqu8uUqYwAPPS3B
Xb456MyWGq2XOY2RrGBqlpINlKaUUX5/t0uuQRYmxVYGu9l6CpfIR2ScpNdXl7MC
tbtvUKvJEdo1+nM26i35JO4sOr/hw4vIxO6h6pSeJY7+BPKskq7uMrSysRebOq2C
xMUi+kDA5ULc4H//jdRrljx8SaamjnmjltJaCgp9G58nFUPgoWwBHvNanOH5HVTa
tQZts3ef9m6kZN/98sH5tkqIpNIoXM8OIAIVUkWBc6LHOWw+wm3xJqxL8tJ9LpiX
MHDpu5n48I+kP94+aFbQHsGFWjc3ywc7RWTsvKQcTgSl0cq2
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:26:07 2025 by rpki-client