Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa
File:                     3139302e35342e36342e302f31392d3139203d3e2036353335.roa (raw, json)
Hash identifier:          A6iAxVwe0yMVw1bnISCSRD79g/27jdataJDFsX+FPyg=
Subject key identifier:   7A:0D:C7:22:0D:CE:66:7C:E8:E5:B7:7D:59:3B:3D:4A:5E:6A:13:1F
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       1A1A10A8F6DD85C56C8A0537E1C073BFE6DF0696
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:21 +0000
ROA not before:           Tue 04 Feb 2025 19:58:21 +0000
ROA not after:            Tue 03 Feb 2026 20:03:21 +0000
asID:                     6535
IP address blocks:        190.54.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1a:10:a8:f6:dd:85:c5:6c:8a:05:37:e1:c0:73:bf:e6:df:06:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:21 2025 GMT
            Not After : Feb  3 20:03:21 2026 GMT
        Subject: CN=7A0DC7220DCE667CE8E5B77D593B3D4A5E6A131F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:29:11:9a:d5:cb:37:b3:e9:67:31:0e:10:
                    a4:75:d8:e7:e9:f7:c2:98:fa:2e:6d:60:0e:68:1f:
                    51:26:fb:70:98:95:2c:e5:37:9a:e6:b4:36:7b:6b:
                    8f:6c:98:78:1a:83:2e:d3:97:58:d4:67:31:01:6c:
                    9b:fd:0a:6c:51:4e:07:f0:1e:d9:38:ba:2a:cc:6a:
                    ed:43:7f:e9:de:c4:b5:52:61:4d:4e:00:0d:b5:1a:
                    cd:32:82:dd:a2:37:57:7f:58:2a:68:58:3e:2f:61:
                    3b:60:bc:ed:d7:d6:e5:32:f1:df:1d:0f:e1:c7:26:
                    bb:35:fb:b7:3a:63:e0:a1:32:64:93:4e:ec:cc:f3:
                    b4:b0:f4:9b:29:2b:a8:1c:b9:03:ab:a3:c3:66:11:
                    17:7a:6e:0f:c2:36:72:7d:c9:84:8c:6d:5d:58:8e:
                    6a:8e:52:cd:44:5d:ec:36:f5:1c:38:79:21:81:78:
                    91:1a:45:a1:6c:ed:8b:11:d2:0d:d9:89:22:3e:c4:
                    cb:6e:3d:53:59:04:1d:b0:9a:28:ce:a1:e9:a9:a9:
                    eb:ed:f1:03:6b:61:a1:86:d9:f0:40:1d:1c:75:9e:
                    30:fd:00:7c:dc:76:e7:6e:f4:88:73:62:22:0e:ad:
                    62:63:d0:53:ce:da:01:fa:6a:e2:8f:28:cf:45:e2:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:C7:22:0D:CE:66:7C:E8:E5:B7:7D:59:3B:3D:4A:5E:6A:13:1F
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:fc:bc:e9:2e:b4:4e:fe:47:1f:74:a1:ff:72:85:19:53:d9:
         7f:75:38:47:4a:3e:73:70:9f:dd:b5:59:4a:8b:e4:4a:fd:f8:
         66:65:07:1a:5e:84:2d:0b:5b:89:5e:30:fa:da:8e:19:e5:a8:
         6c:30:87:31:74:a6:5f:6b:99:56:a7:c3:fd:12:b1:57:8c:c9:
         5d:f9:23:7e:73:04:fe:6d:a1:9d:6e:9c:83:c8:30:24:a2:27:
         15:97:31:33:bb:ec:75:15:40:b6:23:a7:e2:0d:bf:50:29:ba:
         53:f2:1a:06:e4:1b:47:39:a3:2e:ac:ae:44:38:5f:0e:ec:69:
         00:6d:4e:3f:a4:fb:79:ad:de:43:78:3d:90:8e:3b:d9:ce:a2:
         bd:21:97:55:74:ed:ed:e2:44:ec:44:69:7a:8e:c7:37:58:a0:
         c2:7b:be:1b:9a:3f:e5:3f:04:68:9b:75:2f:fe:2e:0b:ae:23:
         56:c0:1a:5c:18:f8:f5:b0:5d:f1:3d:14:51:5a:f0:7a:1f:51:
         88:b6:6f:33:dc:06:81:7e:5d:22:21:54:d5:0e:55:ec:fd:f8:
         af:e4:ee:f3:63:e2:9e:65:dd:03:f5:cc:fb:1b:ac:68:c8:79:
         b4:62:19:63:1c:76:0b:89:2f:37:0f:cc:2e:f2:ce:86:46:41:
         75:3d:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:09 2025 by rpki-client