Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3139392e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3139392e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          oHHTPjPHZIGfhts/8lrOjMeuZyvTim2DQJtlTLaj3qo=
Subject key identifier:   5A:72:FC:08:97:E0:04:A7:E5:0B:93:AE:28:43:09:43:B8:50:23:12
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       03EBC4721A4C63090B6D054CCEF2691D5819BCA0
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3139392e302f32342d3234203d3e203532323333.roa
Signing time:             Mon 09 Jun 2025 14:21:20 +0000
ROA not before:           Mon 09 Jun 2025 14:16:20 +0000
ROA not after:            Mon 08 Jun 2026 14:21:20 +0000
asID:                     52233
IP address blocks:        190.88.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:eb:c4:72:1a:4c:63:09:0b:6d:05:4c:ce:f2:69:1d:58:19:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jun  9 14:16:20 2025 GMT
            Not After : Jun  8 14:21:20 2026 GMT
        Subject: CN=5A72FC0897E004A7E50B93AE28430943B8502312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:6e:f1:9d:3e:37:0b:9f:44:2c:aa:ca:cd:
                    e0:a1:ca:8e:ca:be:c7:54:65:0d:77:6b:bf:43:a9:
                    3a:f6:09:93:21:49:61:34:fc:85:3a:c3:04:99:0c:
                    a8:42:78:f4:7e:8e:5d:dc:a7:ff:f3:f7:25:98:fe:
                    05:d2:51:2b:84:fa:25:21:48:cf:6b:29:4a:e6:5e:
                    4a:fc:c4:45:fa:f5:0a:48:de:34:c7:69:4e:f3:3f:
                    fe:35:00:56:75:aa:bd:56:7f:ca:ba:34:13:55:ac:
                    3e:17:99:ff:81:93:e0:da:22:ee:c9:81:ad:f2:8c:
                    56:3c:4d:76:d5:50:e2:6d:48:5f:84:a7:2f:41:8b:
                    9c:f0:3c:ad:70:4e:4f:6e:87:bf:b2:86:a9:a9:71:
                    26:5c:6c:1e:94:54:93:31:4d:71:05:75:0d:2d:43:
                    85:18:21:ac:c2:7d:5c:41:34:42:e7:90:ac:15:7c:
                    bf:9a:af:64:af:67:e8:97:bf:cd:86:64:89:86:23:
                    e1:14:e5:cb:4e:27:7b:df:c8:3d:ad:1e:37:75:79:
                    1b:fd:94:06:d8:71:86:81:38:ca:4c:b6:e0:c5:e9:
                    16:3a:07:eb:22:6e:46:fd:8b:4c:0c:3b:1f:86:8e:
                    69:a7:3d:2b:d0:50:27:5c:b7:47:20:92:c0:2f:ad:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:72:FC:08:97:E0:04:A7:E5:0B:93:AE:28:43:09:43:B8:50:23:12
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3139392e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:8a:5e:2d:e1:c0:32:bf:b7:1e:4a:1e:98:47:4a:4c:a5:
         e1:61:9e:22:07:fd:0e:be:e5:57:1b:c4:76:68:ae:c8:c6:16:
         16:17:5a:77:de:99:f2:af:f7:58:50:29:57:2a:9f:60:ea:e2:
         6c:d2:9e:ef:be:d8:7f:4a:fd:ad:10:6d:d6:6a:c4:60:ae:ba:
         5d:2d:58:1e:1a:5b:1c:8d:a3:eb:cb:44:57:0c:b4:38:b2:01:
         f1:e5:51:26:d7:77:5d:68:cb:21:7c:41:a9:e6:e7:3b:c7:93:
         ba:7f:d4:d3:c5:44:2a:fb:28:39:d3:04:54:4a:b4:13:7f:4e:
         a2:cd:04:cb:ea:5a:f6:ce:2f:ea:e4:19:8f:20:0f:04:cd:57:
         e5:a4:c8:5f:65:be:75:63:b3:4c:54:73:e4:6b:65:ac:ee:01:
         8d:9f:34:11:f8:b3:9f:3d:13:f7:0d:dd:fe:1c:9f:ea:87:0d:
         d6:29:4e:ae:2c:d2:c8:99:08:20:05:8b:18:63:20:bb:90:44:
         47:38:ba:9e:ee:03:41:5e:d4:81:fe:96:b4:39:f3:2f:83:42:
         d5:f7:ca:37:4c:4f:4f:3a:72:b7:54:34:98:9d:5d:3a:19:51:
         6e:b4:70:32:f2:52:6a:d6:61:19:03:95:b8:0b:27:c5:28:b7:
         e2:48:1b:f9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA+vEchpMYwkLbQVMzvJpHVgZvKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTA2MDkxNDE2MjBaFw0yNjA2MDgxNDIxMjBaMDMxMTAvBgNV
BAMTKDVBNzJGQzA4OTdFMDA0QTdFNTBCOTNBRTI4NDMwOTQzQjg1MDIzMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzG7xnT43C59ELKrKzeChyo7K
vsdUZQ13a79DqTr2CZMhSWE0/IU6wwSZDKhCePR+jl3cp//z9yWY/gXSUSuE+iUh
SM9rKUrmXkr8xEX69QpI3jTHaU7zP/41AFZ1qr1Wf8q6NBNVrD4Xmf+Bk+DaIu7J
ga3yjFY8TXbVUOJtSF+Epy9Bi5zwPK1wTk9uh7+yhqmpcSZcbB6UVJMxTXEFdQ0t
Q4UYIazCfVxBNELnkKwVfL+ar2SvZ+iXv82GZImGI+EU5ctOJ3vfyD2tHjd1eRv9
lAbYcYaBOMpMtuDF6RY6B+sibkb9i0wMOx+GjmmnPSvQUCdct0cgksAvrTCxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWnL8CJfgBKflC5OuKEMJQ7hQIxIwHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMxMzkzMDJlMzgzODJlMzEzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5YxzAN
BgkqhkiG9w0BAQsFAAOCAQEAfGOKXi3hwDK/tx5KHphHSkyl4WGeIgf9Dr7lVxvE
dmiuyMYWFhdad96Z8q/3WFApVyqfYOribNKe777Yf0r9rRBt1mrEYK66XS1YHhpb
HI2j68tEVwy0OLIB8eVRJtd3XWjLIXxBqebnO8eTun/U08VEKvsoOdMEVEq0E39O
os0Ey+pa9s4v6uQZjyAPBM1X5aTIX2W+dWOzTFRz5GtlrO4BjZ80Efiznz0T9w3d
/hyf6ocN1ilOrizSyJkIIAWLGGMgu5BERzi6nu4DQV7Ugf6WtDnzL4NC1ffKN0xP
Tzpyt1Q0mJ1dOhlRbrRwMvJSatZhGQOVuAsnxSi34kgb+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 21 21:13:56 2025 by rpki-client