Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130342e302f32322d3234203d3e203532343338.roa
File:                     3139302e3138352e3130342e302f32322d3234203d3e203532343338.roa (raw, json)
Hash identifier:          uKJcsehj+98/LJtVJ8DIQ+Yx2WVle3qIMxUwg+GHgZU=
Subject key identifier:   58:67:C6:9E:FB:A3:64:0C:90:91:68:E7:FE:B0:27:B4:28:8E:25:5C
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       12A182EFBFA52EB2082660E6A1A3D79CA99E5157
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130342e302f32322d3234203d3e203532343338.roa
Signing time:             Sun 08 Jun 2025 15:21:16 +0000
ROA not before:           Sun 08 Jun 2025 15:16:16 +0000
ROA not after:            Sun 07 Jun 2026 15:21:16 +0000
asID:                     52438
IP address blocks:        190.185.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a1:82:ef:bf:a5:2e:b2:08:26:60:e6:a1:a3:d7:9c:a9:9e:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Jun  8 15:16:16 2025 GMT
            Not After : Jun  7 15:21:16 2026 GMT
        Subject: CN=5867C69EFBA3640C909168E7FEB027B4288E255C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:bf:0e:98:83:66:86:d9:a7:ec:23:eb:ff:
                    bd:a1:1a:65:ff:42:d3:df:59:7d:24:58:81:7e:50:
                    88:90:98:45:a1:e0:63:ae:fb:b5:e0:d3:c0:5c:f8:
                    95:66:26:89:de:fc:72:80:76:64:52:11:36:b8:8d:
                    a3:b5:0a:36:fa:00:d2:29:bd:97:d4:f5:a5:ca:a9:
                    db:02:14:6a:38:d0:d5:22:e6:7e:79:14:72:4f:4f:
                    c3:96:28:38:1d:ff:13:ff:49:fb:83:9e:62:4c:ce:
                    45:af:0d:b9:e9:24:60:6b:bc:eb:f0:9c:35:99:ca:
                    14:10:0d:54:7b:f1:b3:92:b7:65:f6:f5:29:af:6f:
                    6b:80:aa:cf:32:29:9c:21:8e:bf:63:37:c8:76:d4:
                    ec:f4:ff:ac:e3:e5:d4:38:32:94:94:17:99:90:6b:
                    3c:5c:e6:65:c6:e1:74:67:50:88:59:b7:b8:03:5c:
                    78:f3:26:c4:c0:52:bd:8b:16:8c:1b:b7:b3:b4:3e:
                    94:00:4c:2e:0b:25:4d:69:d2:44:dd:94:92:6b:b9:
                    cb:5b:90:d2:1d:a1:03:4f:99:88:7d:9b:d9:ae:cd:
                    cb:51:72:94:9a:83:86:1f:3a:32:25:b4:0a:4c:97:
                    65:9f:fe:1e:01:20:01:50:f2:e9:6e:df:64:5a:19:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:C6:9E:FB:A3:64:0C:90:91:68:E7:FE:B0:27:B4:28:8E:25:5C
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130342e302f32322d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:db:0b:0a:e2:c2:57:41:e7:4b:59:b8:23:03:ac:ad:70:
         c8:b1:d9:d9:c3:01:aa:b3:e4:55:e2:ee:9e:b7:6a:3d:e0:a2:
         dd:6d:8d:8e:a9:67:0c:e7:0b:ed:08:0b:06:43:28:20:8c:cc:
         61:77:7c:a9:a4:c3:4d:8a:47:8d:8a:92:46:ea:5e:da:4d:49:
         d7:bd:e2:34:fb:42:78:df:2b:46:3f:71:ee:12:fe:3d:3a:74:
         f4:56:3e:7d:dd:ca:33:94:33:4c:cf:75:c6:c4:b4:b4:9f:39:
         6a:2c:f5:29:77:b0:91:62:c1:e1:02:0b:8e:ff:f5:ba:09:41:
         d5:ed:35:93:a0:7b:31:94:d5:57:bd:d0:4a:74:c8:79:18:03:
         59:d6:07:d0:74:45:cf:90:67:d2:73:59:4c:8e:36:e8:2f:8c:
         d5:cb:f7:dd:1f:3f:56:95:72:50:1d:4c:c4:93:19:83:3a:90:
         b5:77:18:9c:8c:6e:82:94:a8:f3:0a:ab:05:b5:8a:f1:16:9e:
         e2:93:56:d1:ae:9d:a1:27:bd:4a:17:84:67:83:6e:ba:c3:d8:
         5c:84:f4:b6:26:c4:e2:f9:44:87:71:12:4f:8a:71:2e:56:5a:
         5c:48:70:81:fc:ee:b6:a4:19:57:6a:45:31:77:2e:f9:5c:50:
         2b:77:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:51:51 2025 by rpki-client