Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134322e302f32332d3233203d3e2036353335.roa
File:                     3139302e35342e3134322e302f32332d3233203d3e2036353335.roa (raw, json)
Hash identifier:          LzVfbtBT8npErZjAwsgmCwTY7ogYHRZD8BZL+OjSXq0=
Subject key identifier:   2A:E1:00:31:CE:2D:F8:67:BF:33:03:8F:51:94:07:66:37:D6:91:52
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       53D4B1628A02DB0AE42E929352C9F1DCE1489FA5
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134322e302f32332d3233203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:17:01 +0000
ROA not before:           Tue 05 Mar 2024 18:12:01 +0000
ROA not after:            Tue 04 Mar 2025 18:17:01 +0000
asID:                     6535
IP address blocks:        190.54.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d4:b1:62:8a:02:db:0a:e4:2e:92:93:52:c9:f1:dc:e1:48:9f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:01 2024 GMT
            Not After : Mar  4 18:17:01 2025 GMT
        Subject: CN=2AE10031CE2DF867BF33038F5194076637D69152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:f9:1c:2c:ff:05:81:b9:27:c3:c0:8b:5d:
                    bd:49:ef:77:3a:61:92:15:a7:50:69:8a:3b:5e:04:
                    26:65:c9:f3:cc:7d:85:bf:f6:3d:36:d4:e6:7b:f4:
                    6b:ae:79:70:38:81:4d:ab:f2:4a:03:43:9b:5a:97:
                    f6:92:00:a0:47:dd:8a:31:38:dc:77:19:7d:91:4c:
                    e7:e1:6f:70:1a:8c:07:ae:bd:05:2b:13:90:f5:c2:
                    d5:6e:bb:34:97:67:81:69:94:18:38:2c:c9:3d:6e:
                    25:30:2e:ff:86:58:fd:50:0d:96:97:94:15:f3:3b:
                    46:cc:1d:56:95:c5:84:ae:78:f9:78:f9:9c:fe:7a:
                    c2:d3:c7:f3:73:b0:5d:9e:ca:19:dd:4f:6e:20:51:
                    76:80:12:41:58:24:c5:31:bd:6b:b5:f8:a8:98:e0:
                    4b:68:42:a3:46:07:17:53:a4:d2:d9:5d:b4:6b:c1:
                    ee:45:de:c4:fa:1c:74:9a:42:1a:e3:07:88:d6:58:
                    f4:64:e4:c3:2f:df:0a:45:68:fc:c7:c6:bc:17:9f:
                    3f:44:5a:e1:5b:ba:89:20:30:90:0f:41:a0:1a:86:
                    b3:64:6d:06:1a:ae:6b:7c:c3:a4:fb:6d:b6:ca:b1:
                    50:b9:ec:96:a4:02:4f:48:47:70:5c:54:69:6d:61:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E1:00:31:CE:2D:F8:67:BF:33:03:8F:51:94:07:66:37:D6:91:52
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134322e302f32332d3233203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:8a:6a:30:04:9d:86:6a:b3:23:a4:0c:c9:35:5e:d4:2e:
         e0:17:db:38:08:b2:cb:70:c7:76:77:04:de:e4:35:36:82:1a:
         eb:55:00:27:8d:d4:e1:cd:60:68:0f:25:98:06:c1:3b:b4:af:
         e1:03:91:50:2f:11:62:85:ec:0a:71:d3:da:24:e8:99:e1:51:
         0b:d0:05:92:75:32:da:0e:52:b0:d2:9c:bc:11:62:0a:4c:f3:
         2a:65:b4:38:b0:96:46:ba:3b:a7:3c:3b:1f:85:93:10:f2:69:
         83:28:00:50:09:79:62:e6:32:48:c4:a0:24:54:e0:e0:8c:7d:
         ce:03:3f:90:26:0c:02:ae:8d:fd:95:59:08:6d:8e:a8:91:cc:
         6f:35:11:be:d1:0b:03:70:6a:7a:1a:35:dc:98:f9:87:9c:12:
         3b:66:e9:cb:15:73:0e:89:7c:4e:f9:fa:95:a2:c0:d1:21:d8:
         a2:68:bd:63:7c:b7:30:01:51:3d:fd:c2:85:67:9d:98:9c:72:
         3d:d0:f7:ec:da:15:7a:4f:f9:20:b1:f7:d2:b4:66:d6:3b:98:
         ea:af:c4:93:50:46:ee:34:51:0c:28:fa:51:cf:e3:b6:2a:96:
         9b:b0:e6:57:7d:3c:15:54:63:f7:8e:7b:f8:22:cb:d5:a5:97:
         b2:41:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org