Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132342e302f32342d3234203d3e203237383337.roa
File:                     3139302e39302e3132342e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier:          wREG09xljSW1eFYWRjdm26z+Oe+bsa1rPNStTEMugy0=
Subject key identifier:   C3:AE:90:37:FC:55:EB:2E:69:F8:20:2B:06:43:85:0D:EC:9B:D7:3F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       73C9E8F6470BF9BDFB8C824195A5010E05D02201
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132342e302f32342d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 18:00:47 +0000
ROA not before:           Tue 05 Mar 2024 17:55:47 +0000
ROA not after:            Tue 04 Mar 2025 18:00:47 +0000
asID:                     27837
IP address blocks:        190.90.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c9:e8:f6:47:0b:f9:bd:fb:8c:82:41:95:a5:01:0e:05:d0:22:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:47 2024 GMT
            Not After : Mar  4 18:00:47 2025 GMT
        Subject: CN=C3AE9037FC55EB2E69F8202B0643850DEC9BD73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:1c:d7:3d:66:0c:4b:a1:09:15:27:51:bf:
                    e5:f1:51:bb:0c:9d:19:27:53:49:44:80:00:76:b1:
                    16:c7:17:23:ce:50:69:02:38:72:36:e3:80:38:fb:
                    1b:cc:80:2b:4f:8e:5a:4e:d2:39:6a:df:5a:ca:b9:
                    df:b9:42:e0:15:f4:5a:bc:e5:eb:cd:56:9d:b1:49:
                    f4:29:e8:0b:48:c1:8e:d7:39:27:3b:ba:33:6f:03:
                    ad:47:b7:3b:1b:b5:8c:6c:55:ee:4c:b7:01:4b:e1:
                    f0:57:6d:4c:5d:c5:20:c3:f3:3a:62:fc:9b:03:39:
                    14:cb:82:5d:7a:d7:74:f8:8f:3e:d8:9e:33:52:8c:
                    12:7a:ab:68:8c:c1:41:1b:88:63:7b:bf:ec:fa:f8:
                    47:ea:f2:99:96:3e:71:cc:94:bd:28:d9:07:a1:d5:
                    a4:00:bd:35:83:17:e8:c2:3d:d9:20:07:31:41:3f:
                    70:6f:44:04:ef:90:bd:01:bf:c3:26:8d:4e:c1:98:
                    46:a3:ee:73:62:df:4a:dc:38:53:3a:24:4f:a5:0d:
                    fc:57:db:1e:1d:cc:9f:a8:88:09:06:a1:30:d9:6e:
                    98:95:80:b7:de:77:1f:e4:ac:1c:d9:56:84:20:0b:
                    c6:05:88:de:9d:7b:54:25:69:00:d6:04:0d:76:05:
                    8c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:90:37:FC:55:EB:2E:69:F8:20:2B:06:43:85:0D:EC:9B:D7:3F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132342e302f32342d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:2a:03:09:35:05:0c:ad:99:a4:6e:c1:90:66:58:a6:56:
         4e:6f:bb:30:1a:34:79:64:d3:26:f3:6c:cd:4f:8f:75:0d:0b:
         74:06:e8:87:67:26:52:ff:85:1b:0d:29:45:45:f3:06:c9:b7:
         8d:f9:99:d0:8b:dc:09:d9:df:c9:10:44:36:9c:53:98:7d:d1:
         b7:c6:83:77:e7:b9:5c:a0:26:4d:46:53:2d:7d:3d:09:b2:8c:
         86:32:e6:44:1a:50:db:f0:fb:aa:f4:90:0b:c9:3f:68:b5:27:
         35:1c:7d:5e:63:0e:ce:3f:5a:18:2d:55:a1:06:ae:d3:ca:12:
         e8:9b:e6:c6:b5:ba:32:b0:5d:84:59:16:92:89:64:e3:03:a5:
         7f:80:99:8b:a1:2e:17:f3:3f:71:07:5a:8e:51:66:99:e4:23:
         a1:e4:43:bd:5a:02:14:70:3a:0e:4e:8d:e1:68:18:33:59:d1:
         f7:91:db:2d:56:7f:e2:01:02:0f:7b:79:af:11:54:73:a6:c1:
         e3:93:8e:bc:a5:ba:55:5c:0e:d7:f0:d8:6a:69:29:8a:fd:84:
         0f:cf:07:45:40:f0:73:cc:91:8e:8b:f6:5a:bc:38:6c:17:2d:
         4c:fe:7c:37:24:30:fa:6a:b4:a2:45:40:f1:0c:6e:78:bc:f8:
         56:d5:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org