Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139312e302f32342d3234203d3e2036343239.roa
File:                     3139302e35342e3139312e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          BZzsM//nnhLRrKV/6znKYtYlxGxgud8bXD/fdzPYUQQ=
Subject key identifier:   32:36:35:4A:CB:CD:3A:28:21:E2:CB:3A:D3:6E:1D:8E:6B:09:62:7D
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       52D3F0C1A33FC62547CBA7C0C6B590FC05476E3C
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139312e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 20:03:29 +0000
ROA not before:           Tue 04 Feb 2025 19:58:29 +0000
ROA not after:            Tue 03 Feb 2026 20:03:29 +0000
asID:                     6429
IP address blocks:        190.54.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 17:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d3:f0:c1:a3:3f:c6:25:47:cb:a7:c0:c6:b5:90:fc:05:47:6e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:29 2025 GMT
            Not After : Feb  3 20:03:29 2026 GMT
        Subject: CN=3236354ACBCD3A2821E2CB3AD36E1D8E6B09627D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:cc:1d:09:0b:77:ac:48:46:61:6d:04:bf:
                    21:41:ac:76:22:77:24:b7:11:f6:a1:fa:a8:79:43:
                    26:86:47:a3:30:b2:fe:6a:00:de:2c:38:cd:c7:4a:
                    cb:f1:72:14:17:a2:21:b3:5c:b3:6a:29:dd:bc:c0:
                    1c:e8:83:65:f8:d9:7c:d7:9c:cb:0b:a8:56:2f:72:
                    97:d5:ff:a3:2b:ef:c2:e3:84:e5:93:9d:0d:a8:b0:
                    de:11:98:4a:46:51:b1:28:39:bf:a1:8a:be:c8:1d:
                    d5:b3:62:da:2a:e0:05:f2:d0:99:78:0d:69:1b:eb:
                    df:58:13:88:a8:e9:94:cc:9d:e0:cf:7a:2f:a7:43:
                    2d:bb:5b:c8:70:37:26:62:9d:e8:f3:14:12:6d:f0:
                    bc:d7:e4:49:f0:f1:78:ba:2b:d5:8c:57:f0:51:85:
                    7d:a1:c9:91:95:23:91:1c:ba:4f:00:e1:07:36:dc:
                    ff:93:e2:3d:1c:c3:80:00:a0:72:e8:05:ef:e2:67:
                    fb:90:df:a7:06:c0:a3:5d:e5:67:51:36:19:f7:3a:
                    90:34:d1:58:f6:84:83:72:9c:35:4f:26:3e:4b:79:
                    86:ed:71:12:43:c1:44:9d:36:e5:96:9a:a0:db:78:
                    c4:bc:26:cd:bd:57:fe:3e:71:8e:70:6a:5f:79:fa:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:35:4A:CB:CD:3A:28:21:E2:CB:3A:D3:6E:1D:8E:6B:09:62:7D
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139312e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:4e:b8:0d:5b:71:fa:6f:8c:78:b2:09:09:70:7f:ee:0d:
         38:0d:86:cb:06:c5:8d:94:67:b4:df:d3:77:b5:b6:b0:ec:8b:
         f0:00:4d:a1:32:32:fb:fa:e3:ea:12:37:6d:2b:34:05:e7:d7:
         63:7b:3d:c8:e0:fa:bb:f0:29:a4:73:ef:ea:c1:92:7c:b0:b4:
         54:53:7b:11:99:3b:3a:16:a6:0d:d9:60:94:75:57:f5:f4:f7:
         a5:7e:b5:ea:4b:11:bc:81:15:ff:8d:10:dd:26:46:0c:70:44:
         f5:c5:0e:ad:5d:b5:a4:19:49:c3:49:a3:3b:da:12:99:ce:9a:
         6f:80:60:e0:27:84:14:a0:63:18:11:66:78:e7:d6:32:a3:63:
         43:d3:94:ca:36:d5:50:07:79:89:0a:35:e2:0e:30:76:a2:e9:
         83:8e:73:ef:6a:12:0c:bd:4e:31:f7:f9:a4:86:b7:c6:4a:20:
         65:ec:34:75:5b:4a:3e:90:7d:d5:9d:d7:70:bd:b9:24:e9:1b:
         f5:97:c7:fc:e1:04:f5:dd:6a:eb:44:3e:ff:89:3d:09:41:ce:
         67:c1:10:aa:d1:bd:6b:25:21:42:b6:cf:59:fd:65:00:6a:51:
         d9:6e:5b:a2:1e:45:37:9b:d7:5a:86:aa:60:44:08:1d:0e:89:
         0f:df:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:24:00 2025 by rpki-client