Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31372d3234203d3e203138363738.roa
File:                     3139302e39302e3132382e302f31372d3234203d3e203138363738.roa (raw, json)
Hash identifier:          v062giP1EgN+NcAamCdTDM9kDiuGgl0XO3X48C179rc=
Subject key identifier:   03:07:4A:E3:5A:F5:AC:65:1D:88:B6:56:32:F1:4B:91:EA:73:05:27
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6538711E46A849484005C26FC0A9D5E4ED190245
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31372d3234203d3e203138363738.roa
Signing time:             Mon 10 Mar 2025 01:50:00 +0000
ROA not before:           Mon 10 Mar 2025 01:45:00 +0000
ROA not after:            Mon 09 Mar 2026 01:50:00 +0000
asID:                     18678
IP address blocks:        190.90.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:38:71:1e:46:a8:49:48:40:05:c2:6f:c0:a9:d5:e4:ed:19:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 10 01:45:00 2025 GMT
            Not After : Mar  9 01:50:00 2026 GMT
        Subject: CN=03074AE35AF5AC651D88B65632F14B91EA730527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:4d:45:f8:35:ea:2e:12:90:ed:cd:38:41:
                    dc:11:c6:37:d0:a7:7b:48:17:c1:5d:7c:12:59:9c:
                    02:b0:c0:58:26:00:c8:95:0c:c9:b8:70:b7:6a:8f:
                    ad:e7:78:3b:72:a8:b6:e2:96:ac:01:95:76:4f:db:
                    a7:6d:63:45:3a:2e:18:3f:5e:a4:f1:e8:bc:31:90:
                    cb:37:38:fa:a9:4d:e6:02:70:7b:64:f1:6a:d5:e8:
                    e4:74:88:e7:0d:09:cc:65:bc:15:95:8a:ee:94:9b:
                    05:1c:a0:45:8c:46:da:b1:23:e2:08:b8:ad:d5:d7:
                    f3:d9:e2:68:76:08:8f:10:82:69:97:3e:5c:c2:b2:
                    31:ef:e0:93:13:8d:4c:65:93:b2:0e:e3:d1:27:12:
                    dc:43:c8:4c:66:54:7f:33:b2:3b:e3:6e:bc:81:cc:
                    dd:15:0a:fc:f8:f3:b5:44:59:f5:77:ec:93:e0:a8:
                    68:9e:79:56:6d:c9:71:0f:63:0b:da:e7:cc:3a:69:
                    83:a5:b4:0e:cc:40:8b:91:c6:ee:3b:81:ae:25:90:
                    46:21:81:2b:7a:fe:58:ee:56:38:e3:3c:5c:9d:2a:
                    01:5b:db:16:c2:83:c0:1c:2d:a6:52:fc:79:e8:22:
                    7c:33:a1:20:14:c0:e5:b4:83:90:ba:52:5b:91:3e:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:4A:E3:5A:F5:AC:65:1D:88:B6:56:32:F1:4B:91:EA:73:05:27
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31372d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:b5:8e:43:e3:4c:11:2b:0b:cb:9b:7a:82:99:a9:a9:9e:
         a8:cc:ea:9f:91:59:21:91:ff:5c:bb:db:78:86:15:da:11:50:
         ac:5e:b0:68:8d:31:d6:51:15:d8:16:f3:b5:6b:e1:91:c8:7a:
         47:4d:96:26:56:c6:97:9b:1e:da:5e:32:29:30:ce:b2:63:a1:
         8d:44:ec:95:e3:36:08:e1:7f:5b:96:81:4b:02:dc:30:96:0d:
         1e:69:e8:aa:90:10:29:28:56:ef:04:c9:96:45:00:70:c6:c5:
         2e:c9:40:be:f9:b0:53:40:16:2f:05:b8:96:f7:01:50:c8:fb:
         68:5e:6b:40:b4:28:87:92:9c:e3:6b:12:f8:48:46:2b:48:c3:
         e9:9c:d6:25:29:ba:03:7a:61:bc:74:ed:d6:e2:d5:88:af:6a:
         82:25:36:02:9c:1c:35:68:b4:87:e4:c9:7a:27:9f:a9:b8:0f:
         e6:1f:0c:69:8d:eb:91:6d:ec:45:61:d9:ca:f8:0a:ce:56:d9:
         10:8f:49:06:3a:0a:bf:11:25:f7:ca:9f:16:9d:52:fd:2d:a7:
         91:67:24:95:c9:14:df:02:e3:ed:00:a2:87:e0:d0:f6:51:26:
         02:d9:e3:85:e2:e8:2b:c6:ed:c5:ac:85:b7:42:44:29:36:df:
         53:4b:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:46 2025 by rpki-client