Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3137362e302f32322d3232203d3e2036353335.roa
File:                     3139302e35342e3137362e302f32322d3232203d3e2036353335.roa (raw, json)
Hash identifier:          GrigMHospQxj5A8Hyrx+Y5Clrq2RM/KYRbDmPyj7V2I=
Subject key identifier:   38:21:03:93:8A:F8:9B:97:FB:5F:30:CE:59:F9:80:3D:F2:5B:EA:46
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       03500A0359A4DEA9161D420FDFCCAF63FF647518
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3137362e302f32322d3232203d3e2036353335.roa
Signing time:             Mon 06 Apr 2026 14:37:39 +0000
ROA not before:           Mon 06 Apr 2026 14:32:39 +0000
ROA not after:            Mon 05 Apr 2027 14:37:39 +0000
asID:                     6535
IP address blocks:        190.54.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 05:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:50:0a:03:59:a4:de:a9:16:1d:42:0f:df:cc:af:63:ff:64:75:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Apr  6 14:32:39 2026 GMT
            Not After : Apr  5 14:37:39 2027 GMT
        Subject: CN=382103938AF89B97FB5F30CE59F9803DF25BEA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:c4:6c:79:f5:9b:a6:1b:ae:fd:5a:d3:02:
                    83:aa:bc:df:43:4e:96:64:43:91:b7:08:18:e0:f5:
                    59:cc:77:d8:b5:90:e9:c3:fd:3d:57:7f:21:08:3a:
                    ba:c7:64:d8:dc:aa:a6:62:cf:c0:93:ad:51:22:d0:
                    23:5f:c2:ce:51:58:29:17:2d:89:93:2f:18:c2:8a:
                    a2:cb:17:d0:4b:cd:af:fe:4a:73:79:78:17:ac:cf:
                    a2:2a:c7:41:50:0d:3e:af:46:84:74:87:1a:33:9f:
                    e9:f8:fb:58:c9:33:e9:7d:26:31:2e:c5:19:bf:36:
                    1c:5b:db:f0:ce:b7:a8:dc:94:4d:0d:0c:e0:cc:47:
                    68:a6:99:e6:61:ce:bb:b9:f5:84:a0:39:3e:ac:1b:
                    c2:bf:6c:dc:28:20:0f:f5:cf:10:ee:7d:13:ca:8f:
                    67:97:e2:f8:c1:a1:0c:d6:80:f1:4f:29:63:79:1a:
                    cc:d3:d8:10:7d:e5:93:4d:ba:d6:6d:a7:80:9a:c5:
                    98:55:68:c2:a7:eb:66:dd:de:b1:58:54:3b:b8:11:
                    3b:c0:06:c1:58:50:f8:c7:d1:fa:15:67:8f:9b:f9:
                    c3:e0:e9:ba:49:75:bb:18:54:7d:a5:a9:68:1d:37:
                    85:32:cb:2d:82:aa:82:43:6b:ed:bc:c2:51:61:e2:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:03:93:8A:F8:9B:97:FB:5F:30:CE:59:F9:80:3D:F2:5B:EA:46
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3137362e302f32322d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:b4:da:bc:5c:e0:a9:5e:42:3f:b0:f1:b1:0e:92:c5:67:
         94:b3:26:b5:15:51:f5:51:3c:29:68:4d:be:10:20:b8:3a:57:
         46:d0:c3:8d:9f:d3:2f:71:ac:d1:27:8c:cf:c7:03:c7:81:31:
         4b:5a:10:51:4f:e1:8e:8d:d1:87:99:65:79:93:cb:3c:c6:88:
         64:22:09:5d:47:c5:bd:21:3f:0c:e5:89:c0:40:06:8b:37:4e:
         4b:06:c2:46:24:5f:d5:67:c6:8f:2e:fe:4e:fd:24:a1:0b:f6:
         e2:27:21:63:3a:c6:7c:66:05:75:52:da:0a:b0:5f:77:0d:55:
         b4:11:40:8d:f2:98:a6:1f:cc:2f:95:d7:d5:bf:59:6d:1b:40:
         8d:e9:58:9e:54:6a:fe:e8:7a:cf:6c:d1:ed:67:b7:0c:6d:fb:
         19:8a:1d:40:70:98:ee:a6:13:3b:86:9b:5b:94:88:33:77:e7:
         aa:67:ba:21:05:26:e3:56:cd:e2:d3:e7:43:6b:63:64:f6:9f:
         fb:6a:4a:90:02:bc:db:1a:de:05:00:86:e8:28:fe:08:32:ba:
         ae:79:0e:8f:4d:43:ba:85:0f:11:03:ae:8e:35:b9:10:35:2c:
         05:62:52:bb:eb:41:5f:4f:2b:cb:82:fe:25:94:98:19:9a:40:
         8f:49:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:50:44 2026 by rpki-client