Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138382e302f32322d3232203d3e2036353335.roa
File:                     3139302e35342e3138382e302f32322d3232203d3e2036353335.roa (raw, json)
Hash identifier:          N201UIN8ervIjujuGfBF0zAtDf/KLq6QfyHfo4uXods=
Subject key identifier:   B8:A1:BC:BB:0B:35:2B:23:4B:52:C9:FD:D2:CB:AF:D7:0D:78:33:54
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       1E03065C8D99068BF102DC7B248D93A1A6FE7C
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138382e302f32322d3232203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:26 +0000
ROA not before:           Tue 04 Feb 2025 19:58:26 +0000
ROA not after:            Tue 03 Feb 2026 20:03:26 +0000
asID:                     6535
IP address blocks:        190.54.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:03:06:5c:8d:99:06:8b:f1:02:dc:7b:24:8d:93:a1:a6:fe:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:26 2025 GMT
            Not After : Feb  3 20:03:26 2026 GMT
        Subject: CN=B8A1BCBB0B352B234B52C9FDD2CBAFD70D783354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:77:1e:7a:41:f5:13:8e:ef:ff:90:a3:8e:
                    ff:dd:8a:8f:3b:62:39:a4:a0:d8:11:58:83:7f:ef:
                    04:9e:da:96:74:59:5c:7e:94:88:4a:72:7a:b2:b6:
                    11:52:33:b4:ee:10:1b:f5:ec:fb:6e:30:65:ef:78:
                    8d:cf:cc:6b:4f:39:31:6a:13:39:25:6d:6b:2c:f6:
                    fa:f2:30:d9:2b:e0:8b:b0:57:4e:47:23:f5:4b:1b:
                    0d:1d:49:00:dd:73:27:99:f7:5a:e3:10:7f:67:94:
                    58:86:28:03:ba:17:0d:81:6f:00:81:56:35:9d:8a:
                    63:dd:7b:d6:2f:70:15:95:5d:85:ff:5d:2d:c3:f1:
                    a6:64:c3:18:4e:07:67:92:7b:f0:1a:10:ea:09:36:
                    d7:e2:fa:47:b7:45:73:25:f6:e1:64:7a:2f:66:44:
                    c1:9d:a1:9f:8a:90:37:ec:98:d5:81:3b:f3:69:43:
                    72:5d:36:2f:e0:3a:62:85:bd:4a:45:1c:79:71:7d:
                    0f:5b:b9:19:3e:46:1e:d7:40:1c:cd:93:3d:fb:13:
                    aa:de:6d:68:51:95:e0:21:b4:15:57:05:e0:ba:28:
                    e6:d1:60:d9:d9:0a:9c:d1:dc:02:08:5e:3d:27:c0:
                    98:d5:9e:2e:7c:b5:2a:5c:31:d8:fb:f8:52:0c:34:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:BC:BB:0B:35:2B:23:4B:52:C9:FD:D2:CB:AF:D7:0D:78:33:54
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138382e302f32322d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:90:d7:96:b7:f8:0c:fd:f2:5a:41:15:5a:44:cc:43:4a:
         c6:78:a4:77:40:5b:de:39:8a:f5:5f:6f:e7:03:16:ec:55:f8:
         ef:e9:a3:a0:94:f7:20:00:14:57:41:87:a6:d9:57:c1:4d:25:
         71:f5:79:40:c6:58:aa:a8:29:a6:4a:ea:10:db:b4:f8:11:75:
         f1:1d:42:97:d7:7c:f1:7a:cd:b5:c2:0c:27:47:08:ff:7c:a4:
         88:88:78:51:d7:ed:ad:e7:92:20:e2:c1:dc:28:ff:e5:a4:d8:
         9f:9e:ab:f5:96:4f:e9:1a:66:b8:24:aa:64:f8:b3:0e:bd:f3:
         e7:49:bc:ad:3b:9e:01:ad:67:f4:ee:5c:b9:d8:a5:b1:1d:9b:
         da:f7:66:5b:5b:8e:a0:00:75:19:de:bb:11:83:54:64:d6:46:
         cb:02:82:a6:b7:98:7b:b6:80:ae:c5:d2:00:74:96:2d:06:b8:
         89:b8:73:89:60:bd:e1:7d:f0:0a:05:ea:80:49:9b:5d:be:ef:
         01:d8:73:3e:f3:c2:b4:e9:1e:7e:a7:18:b8:ae:4e:a1:b6:a6:
         9e:c0:46:da:23:4d:9f:de:88:c6:f9:43:a8:03:4b:65:55:5c:
         d6:3e:91:a6:63:7d:a1:80:01:dd:16:b2:a8:a4:a2:f4:04:61:
         7b:26:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:38 2025 by rpki-client