Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138372e302f32342d3234203d3e2036343239.roa
File:                     3139302e35342e3138372e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          U7U3ZfwlsTl7q4KG6PIVtr0VnU552ZVhitZrmjDlHgE=
Subject key identifier:   2E:8C:E7:86:3E:19:33:42:4D:86:C5:D6:8B:1D:4B:49:8F:5D:91:21
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       21D3B6196BBCD6880734A6C9601D62EE30528927
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138372e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 20:03:25 +0000
ROA not before:           Tue 04 Feb 2025 19:58:25 +0000
ROA not after:            Tue 03 Feb 2026 20:03:25 +0000
asID:                     6429
IP address blocks:        190.54.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:b6:19:6b:bc:d6:88:07:34:a6:c9:60:1d:62:ee:30:52:89:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:25 2025 GMT
            Not After : Feb  3 20:03:25 2026 GMT
        Subject: CN=2E8CE7863E1933424D86C5D68B1D4B498F5D9121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:ff:78:b1:46:23:df:02:03:33:6c:80:0d:
                    50:31:9e:f6:97:3e:99:32:40:1b:e7:8e:ef:d7:7b:
                    bc:38:ac:86:40:45:dd:04:6e:a3:f2:ea:70:49:00:
                    22:62:f0:db:2a:69:3d:a1:8b:f0:29:3c:36:39:a5:
                    23:bc:66:9c:b5:8f:08:1b:b0:57:a9:27:da:55:43:
                    48:4f:ac:93:07:70:53:c1:d8:4d:17:0e:ab:f7:8a:
                    bb:9d:d0:bf:ed:00:7c:30:ef:0e:f9:d7:33:14:a9:
                    41:47:2c:86:7f:3b:a1:de:6a:e0:2c:36:98:a4:58:
                    d3:42:89:a7:2a:39:92:a3:ee:85:c2:6f:c1:0e:c6:
                    cd:2f:f5:f5:05:f5:5d:f7:71:db:6e:b4:ab:59:c3:
                    4b:bf:47:75:5f:83:3c:94:81:6f:a9:f6:b9:53:69:
                    b3:57:be:5a:3c:09:a5:c9:55:b4:7e:f1:39:c8:0f:
                    1a:9d:4e:91:19:e6:b7:71:b1:d6:e8:f9:17:62:ad:
                    e0:30:90:75:29:45:c7:4f:e8:90:32:fb:59:7d:28:
                    aa:11:c8:ab:ad:af:4d:ab:f2:4e:da:83:b0:23:9b:
                    e6:74:5f:65:0c:78:78:9b:01:28:a9:99:24:32:5f:
                    e7:94:15:8a:2c:25:e2:88:b5:8d:81:ae:19:91:f2:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:E7:86:3E:19:33:42:4D:86:C5:D6:8B:1D:4B:49:8F:5D:91:21
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138372e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:90:92:cb:7c:ba:05:42:f1:ad:8a:b0:91:98:ca:6b:92:
         82:ce:06:bc:94:4b:d5:b2:a2:22:05:5b:05:4a:07:b9:73:79:
         fe:77:72:b7:68:15:62:7b:8f:35:4c:28:56:07:6e:24:75:e0:
         20:28:af:a2:ee:a3:32:c2:07:c1:08:fa:f0:90:83:57:e9:d2:
         33:09:f8:7c:5e:49:3b:0c:c6:32:71:bd:80:8b:df:b8:85:14:
         f6:0f:c3:74:e7:d7:be:f7:1e:e5:c3:6e:2e:1f:69:3f:d8:e2:
         f6:4a:5e:79:43:10:62:65:3a:86:02:bd:28:4c:2d:e7:ea:f8:
         3f:c6:9a:54:f4:bc:a4:88:fd:85:bf:81:30:69:d2:42:89:80:
         f7:e8:8e:c5:19:16:c8:7f:fb:8e:50:74:4a:65:e1:95:24:64:
         e4:37:47:b6:ae:b2:7a:76:59:ea:16:ea:74:06:5a:46:36:d4:
         5d:e1:f1:b6:a1:12:51:ef:14:3c:9d:8c:a6:f0:b1:00:e6:97:
         85:66:55:68:e8:8d:a5:49:ab:68:78:0d:48:14:90:28:fc:c9:
         4a:72:25:26:e7:fc:b9:02:04:c1:a5:bf:c3:6f:5d:1c:6c:e7:
         ef:80:ab:9f:b9:8a:9a:56:49:33:c3:59:f6:6d:e0:5d:34:dd:
         8a:9a:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:47 2025 by rpki-client