Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e302e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          Sk/SWiH9QDn5PImdCbgqj62PXn5gWq2DNZg0a+S9BMQ=
Subject key identifier:   F7:02:96:35:43:C7:68:A8:91:D2:C4:42:94:C0:2C:27:79:A6:B3:D2
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2E4F20BE391230DCCE471FC347CDC355094D47A8
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f32312d3234203d3e203138363738.roa
Signing time:             Wed 12 Feb 2025 12:55:00 +0000
ROA not before:           Wed 12 Feb 2025 12:50:00 +0000
ROA not after:            Wed 11 Feb 2026 12:55:00 +0000
asID:                     18678
IP address blocks:        190.90.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4f:20:be:39:12:30:dc:ce:47:1f:c3:47:cd:c3:55:09:4d:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 12 12:50:00 2025 GMT
            Not After : Feb 11 12:55:00 2026 GMT
        Subject: CN=F702963543C768A891D2C44294C02C2779A6B3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:bf:23:bc:5b:ed:21:18:70:86:8a:49:e4:
                    07:11:fc:a9:eb:58:6b:14:4f:50:fa:c7:98:5d:a5:
                    29:98:69:7f:fa:4d:e6:db:14:3e:bb:1e:70:02:3b:
                    4b:57:8a:0a:55:d9:b2:a8:79:d0:57:4f:34:94:14:
                    fd:7a:f1:f1:8c:46:e2:33:9e:92:04:11:7c:94:e1:
                    d2:da:58:34:d9:7c:2a:0f:21:40:f3:b3:c0:df:53:
                    2f:fe:cb:3c:72:05:bd:22:55:ae:08:0c:4e:37:a3:
                    80:11:a8:12:a8:bf:5e:15:af:b0:54:b3:12:49:fb:
                    6b:d3:fb:b3:c6:0c:e4:e1:61:71:20:87:69:01:cf:
                    9c:47:7f:dd:f7:a1:89:75:4a:be:81:a0:2b:cb:17:
                    97:43:bb:36:d3:94:ba:12:cc:e0:4a:0e:cc:f9:44:
                    88:4f:19:80:5d:25:d6:1d:2d:5c:98:81:aa:bb:9d:
                    9e:fc:05:88:a6:11:8d:bb:e0:73:56:bd:4c:31:61:
                    c8:88:98:ac:c6:c8:8f:6b:92:51:08:b4:aa:77:15:
                    0a:8d:7a:77:bb:1b:2d:f9:73:cb:d5:f5:f2:27:97:
                    b0:59:20:f1:dc:35:ef:2e:c9:00:d1:6d:a1:e4:7e:
                    93:6a:0a:cc:be:0d:3d:6a:c9:a3:82:55:04:02:6e:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:96:35:43:C7:68:A8:91:D2:C4:42:94:C0:2C:27:79:A6:B3:D2
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:d1:47:83:c1:33:c7:6e:e1:d8:fb:82:40:53:68:f7:01:
         82:a5:fa:de:7d:92:18:14:fc:0f:9c:1b:31:ba:da:d1:d7:be:
         3f:b6:24:2c:c9:3f:10:60:28:05:41:9f:c0:82:28:e2:cc:0d:
         68:1f:af:f1:22:50:01:13:77:6d:c4:10:fb:c7:e8:b6:10:15:
         5f:bd:63:c9:62:6e:d3:71:99:f5:60:5e:ee:02:08:20:57:4d:
         f6:4d:0b:5c:03:1b:45:9f:68:b5:1c:05:d2:b6:7a:ad:67:09:
         d6:13:ab:08:61:f0:71:e4:fd:8f:db:2e:c9:59:77:8a:8f:51:
         a6:60:d9:5f:13:a2:9c:8f:97:1b:b8:c1:a4:d5:09:67:df:c1:
         db:ff:ed:db:db:13:e4:c8:e3:1a:8e:cb:87:c5:22:24:c9:bd:
         1a:1e:50:dc:98:8f:0a:30:32:20:34:fd:06:15:31:c4:c4:a0:
         93:41:47:5d:9d:74:6a:82:a6:22:16:8d:c4:65:af:c7:ab:76:
         90:51:6d:4c:a8:7b:c2:e2:98:36:7c:25:b8:0e:76:ae:20:2d:
         b7:f3:14:c1:94:79:e0:0b:35:28:e0:09:87:1b:3c:1e:01:bb:
         90:f5:45:85:ff:3f:a9:b8:f1:00:10:5c:f5:fb:b2:1c:6e:f4:
         72:dd:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:10 2025 by rpki-client