Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e33302e302f32342d3234203d3e203532323637.roa
File:                     3139302e35342e33302e302f32342d3234203d3e203532323637.roa (raw, json)
Hash identifier:          9Pk7LEdBN4eW5tEr5OLpQgs8yDri03DBY+1jUllxv3s=
Subject key identifier:   B8:4D:53:77:FC:E1:BF:07:E3:29:2E:19:3C:39:93:31:76:C4:83:AD
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       019F8331DEC1625BE9644FA56E134F92BF07B9
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e33302e302f32342d3234203d3e203532323637.roa
Signing time:             Tue 04 Feb 2025 20:03:25 +0000
ROA not before:           Tue 04 Feb 2025 19:58:25 +0000
ROA not after:            Tue 03 Feb 2026 20:03:25 +0000
asID:                     52267
IP address blocks:        190.54.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:31:de:c1:62:5b:e9:64:4f:a5:6e:13:4f:92:bf:07:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:25 2025 GMT
            Not After : Feb  3 20:03:25 2026 GMT
        Subject: CN=B84D5377FCE1BF07E3292E193C39933176C483AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:c1:53:37:8a:91:83:bb:a6:21:04:22:d8:
                    d8:89:6f:66:e1:60:d4:1a:6c:98:6a:54:f3:c6:7e:
                    76:df:76:0a:23:47:c3:23:07:bd:f9:7e:9d:cb:9c:
                    09:54:87:ad:20:cb:2a:e7:4f:c6:36:fa:0a:2d:cc:
                    f1:2d:06:f7:8c:5b:53:2a:f5:5b:53:b7:59:43:d5:
                    da:f1:c5:8f:54:ba:35:a6:8b:8f:cf:4e:47:8b:3e:
                    3a:2f:91:21:dd:05:55:a5:c8:ca:84:12:0f:b3:80:
                    82:59:21:a2:e7:a5:26:3e:39:61:03:d1:33:bd:e2:
                    53:d7:4f:17:16:16:ed:39:3f:4a:72:62:7a:6a:53:
                    46:74:87:ad:9b:24:a1:36:83:29:fb:f9:b2:60:47:
                    d2:a8:31:0f:47:42:ae:ee:a4:74:01:89:da:cb:c9:
                    f8:0f:e3:c1:a1:f7:2d:a8:a6:eb:08:3f:24:de:89:
                    0d:91:54:d7:25:93:0c:12:fa:bf:07:5d:15:1e:7e:
                    ac:62:90:59:4b:a3:e6:8c:a8:6f:5f:00:e4:11:95:
                    23:bb:39:68:a5:42:15:3e:cc:04:c0:fd:e2:11:2f:
                    20:60:23:ba:f1:62:e2:a3:aa:00:a0:46:16:41:ba:
                    fa:c3:e2:02:be:6e:5e:5a:9b:c5:34:5a:1f:07:e8:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:53:77:FC:E1:BF:07:E3:29:2E:19:3C:39:93:31:76:C4:83:AD
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e33302e302f32342d3234203d3e203532323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:67:fe:49:37:c6:0e:ad:0e:f3:1e:64:03:bd:de:2b:56:
         26:01:ce:cb:b1:44:07:1a:7f:8e:cd:00:62:ed:db:34:e3:8b:
         38:d0:ab:0b:ea:fc:7e:9b:a8:4f:50:c0:4d:dc:13:72:56:d8:
         37:0b:80:b7:23:40:22:ba:63:b4:9b:07:1e:67:0d:3b:80:3f:
         05:d3:c5:05:ec:19:b2:9a:8f:33:26:45:8b:02:b9:b5:f7:95:
         57:5e:df:e6:1e:39:2c:b7:12:e0:fe:96:0a:35:8f:76:43:a3:
         0a:91:0b:46:93:3c:ce:d6:1d:15:7b:ef:5d:86:c1:47:05:82:
         54:9d:05:ce:76:d8:cf:e3:3e:49:c6:ff:9c:a4:14:67:6d:d5:
         dc:a1:1e:0d:d6:3e:4d:38:08:2f:7b:49:2c:6b:2e:6a:6d:31:
         33:3c:e8:8e:0f:8f:6e:61:62:87:c1:b9:75:48:d8:2e:ae:49:
         3f:05:4d:10:c7:40:ed:13:67:1e:4b:7d:37:63:d4:51:04:f9:
         b3:d1:02:b7:9d:b0:9a:a6:96:5e:a4:ce:b3:e8:5a:ee:5c:da:
         e7:8b:29:8e:15:0d:3b:e8:61:f7:04:e0:14:44:bb:fa:4e:8d:
         7e:e5:1d:38:b0:ae:48:89:ec:ed:8f:26:5b:ff:ee:89:f1:7b:
         1e:15:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:39:05 2025 by rpki-client