Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS11830.roa
File:                     AS11830.roa (raw, json)
Hash identifier:          Ha5PlcTa5t4gF0bW4vDW8m0Nq/pUvr+6emP3VYffyrE=
Subject key identifier:   09:73:09:C3:B7:9F:34:9F:C5:3D:9A:53:D6:32:AF:E6:6A:DF:AC:B6
Certificate issuer:       /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial:       31E4B07FA67416DA60A3329878FBEBE8B1D1AF27
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS11830.roa
Signing time:             Thu 15 May 2025 00:19:00 +0000
ROA not before:           Thu 15 May 2025 00:14:00 +0000
ROA not after:            Thu 14 May 2026 00:19:00 +0000
asID:                     11830
IP address blocks:        190.10.18.0/24 maxlen: 24
                          190.10.24.0/24 maxlen: 24
                          190.10.36.0/22 maxlen: 24
                          190.10.40.0/21 maxlen: 24
                          190.10.48.0/20 maxlen: 24
                          190.10.72.0/22 maxlen: 24
                          190.10.80.0/20 maxlen: 24
                          190.10.96.0/20 maxlen: 24
                          190.10.112.0/21 maxlen: 24
                          190.10.120.0/24 maxlen: 24
                          190.10.124.0/22 maxlen: 24
                          190.171.1.0/24 maxlen: 24
                          190.171.2.0/24 maxlen: 24
                          190.171.10.0/23 maxlen: 24
                          190.171.12.0/22 maxlen: 24
                          190.171.20.0/23 maxlen: 24
                          190.171.29.0/24 maxlen: 24
                          190.171.30.0/23 maxlen: 24
                          190.241.7.0/24 maxlen: 24
                          190.241.10.0/24 maxlen: 24
                          190.241.16.0/24 maxlen: 24
                          190.241.31.0/24 maxlen: 24
                          190.241.73.0/24 maxlen: 24
                          190.241.74.0/23 maxlen: 24
                          190.241.76.0/24 maxlen: 24
                          190.241.117.0/24 maxlen: 24
                          190.241.118.0/24 maxlen: 24
                          190.241.120.0/24 maxlen: 24
                          190.241.124.0/23 maxlen: 24
                          190.241.129.0/24 maxlen: 24
                          190.241.130.0/24 maxlen: 24
                          190.241.133.0/24 maxlen: 24
                          190.241.134.0/24 maxlen: 24
                          190.241.136.0/22 maxlen: 24
                          190.241.140.0/23 maxlen: 24
                          190.241.198.0/24 maxlen: 24
                          190.241.201.0/24 maxlen: 24
                          190.241.207.0/24 maxlen: 24
                          196.40.32.0/23 maxlen: 24
                          196.40.48.0/24 maxlen: 24
                          196.40.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e4:b0:7f:a6:74:16:da:60:a3:32:98:78:fb:eb:e8:b1:d1:af:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
        Validity
            Not Before: May 15 00:14:00 2025 GMT
            Not After : May 14 00:19:00 2026 GMT
        Subject: CN=097309C3B79F349FC53D9A53D632AFE66ADFACB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:ec:c2:2e:27:01:eb:ac:6a:13:b0:8d:c1:
                    a9:b1:71:be:ef:f7:96:2d:74:7c:12:2f:42:84:4e:
                    fe:68:7a:07:0f:b1:eb:56:1e:6f:01:f8:61:e4:8c:
                    41:7e:ac:8a:b2:c9:37:85:45:c7:42:4d:9b:4a:6f:
                    49:11:74:35:63:8c:73:af:74:94:8f:3b:d3:7d:38:
                    95:61:40:d1:85:d6:5b:cc:8b:8b:42:65:e6:eb:41:
                    97:b8:bf:d4:da:8f:7c:4f:71:36:3e:b0:9d:c1:19:
                    1d:a6:fd:16:6c:db:8f:37:db:fb:9c:3a:f2:64:49:
                    87:a7:e4:e2:aa:19:02:5a:2d:ab:2b:07:1b:5f:37:
                    91:b6:ac:c9:21:e7:8e:79:43:65:35:64:3e:2a:a3:
                    9a:33:d6:67:f4:5a:fa:a2:69:8b:20:22:f3:43:0c:
                    3e:bc:79:4c:f2:ba:25:85:e8:7e:d6:ec:4d:93:85:
                    fc:b2:4e:c2:e2:54:82:08:77:05:ca:db:30:35:3c:
                    a4:50:f9:00:59:d2:f1:fe:48:c8:b6:9b:2a:59:da:
                    61:d9:d4:70:5f:94:dd:b2:a1:2b:c6:a4:81:89:bb:
                    d4:76:cd:ce:89:f8:1b:4a:f0:8f:fd:6f:44:df:d8:
                    7a:14:68:20:ff:a6:d2:c1:4d:77:e8:0e:83:3b:7a:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:73:09:C3:B7:9F:34:9F:C5:3D:9A:53:D6:32:AF:E6:6A:DF:AC:B6
            X509v3 Authority Key Identifier:
                keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS11830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.18.0/24
                  190.10.24.0/24
                  190.10.36.0-190.10.63.255
                  190.10.72.0/22
                  190.10.80.0-190.10.120.255
                  190.10.124.0/22
                  190.171.1.0-190.171.2.255
                  190.171.10.0-190.171.15.255
                  190.171.20.0/23
                  190.171.29.0-190.171.31.255
                  190.241.7.0/24
                  190.241.10.0/24
                  190.241.16.0/24
                  190.241.31.0/24
                  190.241.73.0-190.241.76.255
                  190.241.117.0-190.241.118.255
                  190.241.120.0/24
                  190.241.124.0/23
                  190.241.129.0-190.241.130.255
                  190.241.133.0-190.241.134.255
                  190.241.136.0-190.241.141.255
                  190.241.198.0/24
                  190.241.201.0/24
                  190.241.207.0/24
                  196.40.32.0/23
                  196.40.48.0/24
                  196.40.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:08:9c:4f:41:5b:4b:b9:73:2e:fc:0a:02:fd:58:59:00:1f:
         2f:38:a1:b0:b3:e6:09:19:9d:bc:03:2f:3e:ca:6c:1f:85:b1:
         2c:5c:ee:c9:89:3a:9a:d3:fb:24:32:1e:fb:ad:21:56:83:f3:
         15:36:5e:6c:5c:48:67:36:59:c6:2f:1b:af:5b:c4:33:eb:2e:
         b3:19:88:f2:1a:eb:79:1d:80:44:74:1a:8d:33:e6:b6:2b:42:
         5f:bc:3e:78:d8:98:d1:55:b1:d3:15:ca:09:9a:d7:11:2f:8d:
         ed:05:4a:2b:a5:f7:dd:b4:7c:7f:08:ac:ce:57:22:be:43:7b:
         f8:87:04:4f:a0:4c:56:b5:57:25:13:69:ea:0f:6b:a7:f4:6d:
         79:ae:19:86:fb:0f:75:fd:90:cc:6c:ed:78:13:9e:b8:1e:fa:
         9c:f7:44:24:2e:ff:7a:39:d4:b6:5a:1b:45:e4:bc:9c:21:23:
         a7:df:c8:10:5b:5b:fb:4e:5a:4c:5f:24:0e:87:75:fe:3c:7a:
         a6:eb:1d:63:d1:8b:d7:8e:32:0e:d3:43:f4:84:87:54:f3:ab:
         23:df:de:8d:02:db:f3:58:72:37:ad:ba:b7:75:67:67:1d:a2:
         f0:ad:36:b8:6d:74:e0:47:f3:ef:f1:30:5e:47:c4:d0:4c:8d:
         6b:75:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:51:24 2025 by rpki-client