Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3137362e302f32322d3232203d3e2036353335.roa
File:                     3139302e35342e3137362e302f32322d3232203d3e2036353335.roa (raw, json)
Hash identifier:          sL8dG0HXCqmf8xrBxan1xKzeWt0vAPp+zUdzGUc32dE=
Subject key identifier:   AE:F2:35:5C:E2:DA:59:3F:5A:C3:F4:D4:A1:39:55:80:95:DE:77:50
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       5C85860717B42978B7EAC55BFF2CF6EBCAC76C7D
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3137362e302f32322d3232203d3e2036353335.roa
Signing time:             Mon 05 May 2025 14:00:00 +0000
ROA not before:           Mon 05 May 2025 13:55:00 +0000
ROA not after:            Mon 04 May 2026 14:00:00 +0000
asID:                     6535
IP address blocks:        190.54.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:85:86:07:17:b4:29:78:b7:ea:c5:5b:ff:2c:f6:eb:ca:c7:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: May  5 13:55:00 2025 GMT
            Not After : May  4 14:00:00 2026 GMT
        Subject: CN=AEF2355CE2DA593F5AC3F4D4A139558095DE7750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:e7:61:95:df:07:db:67:b8:c3:3f:a3:84:
                    52:ab:b3:df:e6:b5:c5:3f:19:94:d0:10:91:5c:e2:
                    21:91:ed:8d:8e:9b:1a:e6:18:16:1b:a0:89:59:14:
                    99:14:9d:52:0a:77:41:a0:28:74:4f:15:e0:d8:9a:
                    4d:60:d9:05:04:fe:56:92:fa:8f:a9:13:f3:4a:6f:
                    ad:b0:5d:b5:b7:d3:ac:9e:15:d9:bb:66:4b:1a:d3:
                    e9:e5:3e:8f:c0:b6:3f:44:b4:cf:23:c3:ca:da:9b:
                    17:75:49:04:c7:58:36:05:cb:32:d8:3d:dd:bf:a7:
                    26:73:10:76:76:29:77:fc:b6:03:9d:4b:ac:f7:06:
                    99:74:d8:d9:05:cc:49:e8:b3:ae:0b:67:19:f0:35:
                    5a:93:32:0f:ab:6d:8e:82:3b:84:b9:d0:06:28:e1:
                    4d:0d:00:72:b2:a2:d2:19:b9:13:aa:5e:70:63:80:
                    14:05:95:7e:94:1a:cf:3e:6e:f1:48:0c:ee:68:6d:
                    c8:69:7e:d9:ee:42:4c:ad:a5:aa:96:54:60:23:76:
                    6d:75:63:d2:97:ad:98:16:11:df:07:7c:d3:76:36:
                    0a:2a:3b:1f:6e:a5:7a:03:67:ac:f9:01:95:4d:e0:
                    ec:bd:84:16:c6:99:27:e6:4b:8e:2a:b7:51:03:99:
                    4d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:35:5C:E2:DA:59:3F:5A:C3:F4:D4:A1:39:55:80:95:DE:77:50
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3137362e302f32322d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:95:19:a9:2a:97:e3:4f:07:b3:ea:bc:0e:01:c3:ee:66:
         c1:61:be:6b:1d:d4:ce:6e:9e:a6:fc:f7:f5:a3:83:03:c5:94:
         dd:ea:4d:ac:67:c2:15:b4:a3:b1:37:6b:82:ca:28:7b:78:4d:
         bd:00:9a:c9:26:d8:15:06:15:41:3d:22:58:36:e4:4a:41:1f:
         2c:3b:a8:54:80:89:0e:0a:6e:a7:0d:3c:a5:f6:94:6e:37:04:
         aa:e2:7a:15:85:6f:c0:71:42:fe:b5:64:7f:a7:4e:e2:5a:af:
         8e:24:b2:f7:17:7b:a3:02:82:79:06:31:fb:01:4d:72:42:4b:
         ba:de:4d:bd:c5:94:3d:7e:2b:c9:37:18:fd:31:4a:ed:0b:9e:
         0b:61:93:ac:85:1a:1a:98:13:c0:f7:cc:ba:71:5f:11:a8:8e:
         1d:d3:85:53:54:21:5b:72:17:49:98:5d:4e:63:60:67:23:64:
         4b:c4:63:cf:83:35:75:c9:be:44:41:5e:a3:0b:9f:49:60:29:
         ee:86:db:ca:05:5c:de:a5:fa:39:d7:f9:2c:7d:97:62:4c:39:
         37:67:45:48:82:5b:7a:98:27:ac:b4:98:5b:ac:cf:11:76:74:
         92:46:72:95:6f:ff:f1:13:35:ab:b9:cc:33:c7:f4:a4:1d:50:
         20:da:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:51:52 2025 by rpki-client