Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32332d3233203d3e2036353335.roa
File:                     3139302e35342e3138322e302f32332d3233203d3e2036353335.roa (raw, json)
Hash identifier:          yN4ewunNayU8Nfjv7UOWZnODzSAXhVqD2KrC99B9AaM=
Subject key identifier:   E3:7A:B9:87:CC:74:33:F1:4D:2B:65:0F:19:B4:50:DE:F4:4B:DC:1B
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       24A818F94DECABB9866089D6BB152B2D57055C1E
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32332d3233203d3e2036353335.roa
Signing time:             Mon 05 May 2025 14:00:00 +0000
ROA not before:           Mon 05 May 2025 13:55:00 +0000
ROA not after:            Mon 04 May 2026 14:00:00 +0000
asID:                     6535
IP address blocks:        190.54.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 23:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a8:18:f9:4d:ec:ab:b9:86:60:89:d6:bb:15:2b:2d:57:05:5c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: May  5 13:55:00 2025 GMT
            Not After : May  4 14:00:00 2026 GMT
        Subject: CN=E37AB987CC7433F14D2B650F19B450DEF44BDC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:8f:51:fa:11:0a:a8:bc:11:98:6f:ad:1b:
                    9f:01:28:ca:20:98:9e:9d:5d:79:45:c1:d9:6a:18:
                    35:fd:f0:4b:35:d8:63:5e:d2:bf:d8:38:8a:41:9a:
                    b8:2a:da:25:ef:9e:32:46:65:af:ad:54:53:38:d0:
                    34:cc:47:82:c7:1f:fb:3c:78:d8:67:5b:9d:79:69:
                    82:3c:48:eb:dc:77:4e:a1:65:67:31:46:08:81:e7:
                    ca:3b:fa:40:4b:1c:f1:bf:85:a3:38:ea:4c:8d:a8:
                    93:32:38:f8:c6:ae:9a:8b:d9:23:5e:c5:e0:ee:9f:
                    82:43:59:46:d5:2c:35:02:e0:ba:20:e7:a9:9c:32:
                    8f:17:26:80:53:3c:04:70:50:da:ed:11:5e:6f:12:
                    f2:56:d7:49:74:ce:44:e7:b0:49:09:cf:3b:2d:92:
                    2d:52:a6:80:a3:db:f3:41:ac:9a:a4:d5:97:04:32:
                    45:5e:15:91:5a:26:83:d5:89:a9:b6:e3:fb:f5:1f:
                    f0:f9:a0:16:19:19:e0:f6:3b:85:64:a1:86:2d:ca:
                    14:95:40:72:92:1a:17:12:db:e3:28:55:d6:5f:fa:
                    1d:5a:ee:17:94:70:bb:8c:74:20:bd:3b:3b:16:42:
                    35:ad:6e:ee:0f:a6:7e:84:c2:77:87:66:6a:91:21:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:B9:87:CC:74:33:F1:4D:2B:65:0F:19:B4:50:DE:F4:4B:DC:1B
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32332d3233203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:fb:26:71:c9:16:67:60:06:57:05:22:af:57:44:0a:ee:
         9a:cb:60:e2:29:aa:61:fd:32:b3:55:d3:3c:36:0d:42:2f:d8:
         b2:e8:50:02:97:53:6b:c1:0d:b9:76:b0:67:52:4b:1f:5e:ac:
         43:40:a8:cb:cd:02:34:cc:7b:b5:23:23:5d:bd:62:e3:6f:a1:
         c3:81:07:ab:9c:f1:64:da:dd:68:5c:d9:9c:a8:09:07:0a:80:
         2d:c9:3d:5d:7f:1d:73:a9:ed:b0:3f:93:4b:06:31:01:9a:13:
         0e:60:d9:bd:e6:4a:cb:15:6d:11:40:7f:0d:e3:fa:7d:e4:32:
         aa:58:8f:57:86:f4:04:91:3c:c4:ff:d5:be:67:dc:5c:3e:96:
         c0:23:41:4d:ba:bc:2b:79:31:99:2a:04:35:ae:66:5b:52:0f:
         f9:7f:d0:74:c5:09:17:92:81:0d:9d:8e:10:6a:68:52:94:75:
         6e:85:70:db:1d:98:86:6d:8b:42:ab:82:e4:95:dc:c3:84:ff:
         8b:51:9b:9e:f1:6f:2c:de:92:ed:07:10:db:2f:d9:9d:e6:2f:
         66:d0:41:82:e8:70:0f:13:eb:6c:dc:ce:0d:ff:33:eb:57:05:
         fb:c3:47:e2:5d:b9:14:02:9e:da:01:60:08:42:f3:74:f6:70:
         fa:59:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:11:51 2025 by rpki-client