Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3136302e302f32302d3233203d3e2036353335.roa
File:                     3139302e35342e3136302e302f32302d3233203d3e2036353335.roa (raw, json)
Hash identifier:          jUvURRySUIjJ+47GZqCdaNQ4iuTjA7g6iVPDnSsg898=
Subject key identifier:   C8:69:A6:72:B9:52:D0:F1:34:4C:C5:1F:4E:C9:20:70:1F:53:5D:B2
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       0A36AF2BE4C7233EC1FAA8A29A787E6BFBBE77CB
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3136302e302f32302d3233203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:17:06 +0000
ROA not before:           Tue 05 Mar 2024 18:12:06 +0000
ROA not after:            Tue 04 Mar 2025 18:17:06 +0000
asID:                     6535
IP address blocks:        190.54.160.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:36:af:2b:e4:c7:23:3e:c1:fa:a8:a2:9a:78:7e:6b:fb:be:77:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:06 2024 GMT
            Not After : Mar  4 18:17:06 2025 GMT
        Subject: CN=C869A672B952D0F1344CC51F4EC920701F535DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:c6:b1:ad:0d:05:fe:31:f8:30:cb:fa:9f:
                    f3:78:4b:7a:92:ba:85:af:e5:86:76:b8:7b:5d:89:
                    14:26:bb:df:07:19:2f:ea:4b:2a:c0:42:77:86:bf:
                    2e:0a:80:47:84:ed:08:d1:88:2e:2e:84:65:13:fc:
                    aa:1c:21:f4:c5:4f:74:3f:18:39:af:a3:bb:27:b8:
                    6a:62:d7:d3:bd:8e:61:c1:5f:e2:f4:ac:8a:60:e3:
                    7b:97:42:3e:10:a5:fd:e5:68:e6:48:1a:1e:17:98:
                    64:96:1c:34:a8:e1:41:07:8b:b6:84:5e:f5:36:0e:
                    01:ab:cf:52:8c:5c:c6:fe:fa:3b:c7:4f:45:48:25:
                    2c:3d:b6:58:ed:69:3c:9b:ef:45:cf:5d:21:f8:38:
                    19:dd:42:7f:e7:91:37:5e:d1:1a:75:3e:0a:86:61:
                    00:37:28:6f:15:09:ad:6f:5a:68:94:81:3e:08:56:
                    87:60:fb:fe:43:90:36:8c:8c:13:56:14:da:c6:7b:
                    89:b3:82:79:03:2d:05:14:e6:7a:f3:4e:f6:9f:b5:
                    08:b0:b0:c8:70:66:1c:2a:82:72:fb:61:f8:d1:4a:
                    93:10:be:13:6f:26:9b:48:c2:80:69:b8:43:74:d5:
                    06:a2:5d:87:0b:dc:ce:bd:16:f9:9d:f6:36:75:ad:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:A6:72:B9:52:D0:F1:34:4C:C5:1F:4E:C9:20:70:1F:53:5D:B2
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3136302e302f32302d3233203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:97:80:c5:92:7f:30:4f:6a:51:5f:5a:e5:37:42:11:77:dd:
         b8:ae:61:5f:1f:0a:b9:65:78:27:97:e6:6b:50:3e:bd:25:14:
         3e:32:60:05:26:5d:6d:61:ef:fa:c7:d0:0f:aa:fd:56:19:c9:
         e7:1c:99:c7:99:9b:12:f5:64:97:07:d6:bb:98:0b:54:2e:cc:
         f3:59:4c:bc:30:96:55:c0:9d:3d:24:60:59:34:50:16:2e:26:
         76:70:01:41:59:52:05:7a:6c:42:32:2f:a2:a5:1e:8c:47:8b:
         ae:a3:0f:11:1e:0f:51:de:ad:96:06:62:45:bb:ff:ee:f9:25:
         f2:b1:4b:95:d3:57:03:f2:56:32:7b:78:0f:38:61:9d:f3:a7:
         3e:05:d0:19:1c:3f:01:ab:24:dc:46:c8:f0:cb:b0:8b:05:df:
         f9:23:86:0f:b6:ac:c5:46:eb:5e:29:83:ad:54:38:6f:e2:62:
         11:2f:68:97:03:29:c4:da:d7:ab:ff:2d:65:fd:f8:e7:43:4e:
         e8:41:fb:45:35:bc:f2:e8:2f:63:87:c8:f5:fa:01:66:1c:6b:
         27:d2:44:d6:74:5c:a9:4f:b4:af:44:e8:f4:33:7c:72:08:05:
         b1:56:29:5a:22:63:77:bd:51:ca:be:20:6a:41:76:62:75:a3:
         71:d4:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:12 2024 by rpki-client on console-fra.rpki-client.org