Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e322e302f32342d3234203d3e2036353335.roa
File:                     3139302e35342e322e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          I/soHzWNYiyLkimL29ICKjufOtY6Kg1ixIauwTyKmp4=
Subject key identifier:   11:52:4A:B6:DB:26:19:3F:43:E3:D0:31:80:5E:07:B3:FC:B8:EA:40
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       120B725C6B104FC5369C66F757516534BF966414
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e322e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:25 +0000
ROA not before:           Tue 04 Feb 2025 19:58:25 +0000
ROA not after:            Tue 03 Feb 2026 20:03:25 +0000
asID:                     6535
IP address blocks:        190.54.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:72:5c:6b:10:4f:c5:36:9c:66:f7:57:51:65:34:bf:96:64:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:25 2025 GMT
            Not After : Feb  3 20:03:25 2026 GMT
        Subject: CN=11524AB6DB26193F43E3D031805E07B3FCB8EA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:e3:d6:07:2d:d0:95:10:c8:c0:80:36:2d:
                    e5:2f:05:29:1f:19:ce:81:5a:e8:73:ff:2f:01:fa:
                    d3:50:4e:92:fc:70:92:ed:73:ae:4e:ef:50:fc:69:
                    9d:26:fb:39:76:2c:ca:d7:d3:38:c9:3f:a2:e4:9c:
                    85:23:8a:0a:aa:5c:22:61:4f:a1:13:02:93:8c:37:
                    67:34:61:53:a8:92:63:4e:31:8d:56:02:eb:24:13:
                    40:53:58:be:21:8c:0a:c8:aa:f4:2a:51:9c:03:ea:
                    40:0e:94:1f:a9:6f:9a:c9:a0:1c:62:b0:96:de:0f:
                    80:ca:00:fe:13:11:a2:65:5c:53:45:a8:0f:f5:96:
                    76:bd:2d:b6:2c:af:34:4d:5b:cf:2c:ca:f8:cf:60:
                    43:76:02:e1:58:60:27:52:a1:ba:15:88:73:0e:38:
                    61:3c:4a:93:5e:80:c6:9d:5f:ac:00:ad:97:be:37:
                    61:1e:eb:0c:7b:d4:f5:73:f1:78:7c:e8:81:25:18:
                    4d:d0:19:a1:7f:07:2b:cc:37:50:51:df:2b:74:ae:
                    bc:cf:41:60:d6:f7:76:41:77:79:e6:26:b2:96:b0:
                    7b:38:31:16:27:8f:a3:1c:fb:4c:dd:f2:e1:9a:5d:
                    5f:ad:85:fc:c6:ba:50:3a:8c:bf:fa:7e:8c:33:09:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:4A:B6:DB:26:19:3F:43:E3:D0:31:80:5E:07:B3:FC:B8:EA:40
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e322e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:53:61:5f:e5:a7:0c:93:cc:77:a0:b1:88:8a:3b:b1:a7:
         8a:00:07:de:64:ca:80:26:37:77:5a:7e:22:8c:34:c3:40:7a:
         f4:c6:13:57:27:8e:f7:af:d3:07:e4:51:81:b6:d6:a3:15:85:
         6d:0c:19:94:92:34:6e:dd:17:f5:ba:25:20:a5:a1:49:f4:fb:
         91:94:e7:8b:48:f3:04:f7:0d:6d:b2:91:bf:d5:a4:77:11:b8:
         ef:7f:2c:57:f5:57:1c:a4:64:f9:9a:c2:a9:de:72:7f:49:fb:
         64:05:d3:e1:00:0f:54:27:b9:94:ab:16:a7:f0:17:73:7a:ae:
         c5:3a:14:e5:59:52:7f:4a:6b:94:41:d8:07:48:d1:8e:b5:eb:
         a5:70:93:79:1b:41:97:ba:0b:ca:61:83:49:90:b6:98:01:6d:
         96:5b:b7:56:ea:be:93:88:42:66:a3:2f:7a:b0:c4:48:19:17:
         83:c5:d0:ea:37:fb:44:8c:f6:5a:55:68:af:7c:23:70:33:de:
         f8:66:1c:c4:59:98:d7:86:90:20:07:2c:4a:50:9f:17:61:f1:
         9d:d1:0c:c0:00:f9:5e:b1:58:9d:7f:55:63:0f:54:45:29:a7:
         f5:1d:ac:b8:f4:92:0b:5a:c8:a5:2b:7a:16:9a:ae:e6:f8:61:
         9b:09:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:48 2025 by rpki-client