Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31372d3234203d3e20323632353839.roa
File:                     3139302e39302e3132382e302f31372d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          FveQ0wNyFw3iu9pRQ3a0WbPZxXnH1JsTkPjni++E7QU=
Subject key identifier:   03:1B:A9:DD:27:87:47:CC:33:41:0F:34:A1:4D:2A:5F:A3:59:6C:B1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       590825656546E7215A4064855E03B43B625470BF
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31372d3234203d3e20323632353839.roa
Signing time:             Mon 15 Jul 2024 16:05:00 +0000
ROA not before:           Mon 15 Jul 2024 16:00:00 +0000
ROA not after:            Mon 14 Jul 2025 16:05:00 +0000
asID:                     262589
IP address blocks:        190.90.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:08:25:65:65:46:e7:21:5a:40:64:85:5e:03:b4:3b:62:54:70:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jul 15 16:00:00 2024 GMT
            Not After : Jul 14 16:05:00 2025 GMT
        Subject: CN=031BA9DD278747CC33410F34A14D2A5FA3596CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:ad:11:72:24:4d:ee:e7:e0:95:6b:5e:a8:
                    24:00:63:fa:5c:a5:05:64:a3:5c:dc:6f:00:77:ba:
                    df:e8:89:3f:d7:86:81:04:48:43:e3:ec:36:d2:41:
                    37:35:79:34:c4:1d:54:1e:88:73:fe:4b:d4:88:50:
                    ec:41:30:d6:f9:16:09:2e:25:f3:ff:5a:4c:39:e3:
                    fd:b0:5f:8e:45:56:82:e3:14:34:7b:ac:0a:a9:45:
                    d7:f6:5e:1f:b2:0e:27:4f:7a:a7:04:1f:8e:43:d1:
                    cf:22:6a:ae:1d:d0:44:55:3d:94:8a:2a:73:41:95:
                    6a:73:21:98:6f:76:e2:b5:ad:46:92:9d:3a:bc:27:
                    01:06:86:c7:92:10:86:2d:ff:83:af:1a:44:24:ba:
                    6b:67:c7:29:33:3c:b9:bc:d0:ec:6f:a1:8c:7e:ea:
                    27:25:3a:32:21:ed:58:5a:e7:5a:88:16:1d:32:fa:
                    08:9e:8f:94:b4:eb:89:6b:4e:d2:4e:20:1d:ec:19:
                    ac:85:81:52:65:5e:ad:7d:0e:bb:14:6d:a9:45:15:
                    54:da:e1:9e:bc:f6:6d:fd:51:3b:b8:53:24:5e:e5:
                    a9:0a:43:72:e4:ad:73:1f:58:76:75:51:1c:70:0d:
                    74:e0:a2:f0:a1:7e:cc:41:44:4e:78:63:a0:69:18:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1B:A9:DD:27:87:47:CC:33:41:0F:34:A1:4D:2A:5F:A3:59:6C:B1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31372d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:62:5f:47:25:ac:80:22:59:95:f7:97:84:78:80:dc:76:
         bc:37:56:34:cb:24:4e:a4:cf:79:30:7e:3a:aa:d3:d8:33:49:
         8a:c8:c7:2e:f3:12:78:9b:89:55:b7:a9:91:f4:ba:dd:31:5b:
         33:3d:03:6b:7f:d3:5e:6a:51:13:50:1f:af:12:55:76:ce:75:
         6b:6d:e6:2b:2f:25:59:db:3b:9b:3a:c9:60:1c:b0:ea:3a:c5:
         a1:f4:2e:65:f1:fa:35:c8:33:4f:fa:8b:ff:09:48:d5:4c:80:
         d3:a1:5a:6a:17:24:72:da:4b:66:02:bc:9d:23:f7:27:fb:fa:
         d8:30:b4:1e:5e:e9:2e:bc:34:b8:48:52:dc:77:20:52:33:0f:
         6f:f5:d4:9f:04:0e:72:02:6d:17:75:2c:b4:44:8b:f5:c1:16:
         76:39:6e:ff:be:e4:74:c0:22:12:73:d4:ee:6d:86:36:8a:dc:
         a5:0f:10:28:66:33:59:95:6f:69:93:43:78:9b:15:be:b8:db:
         23:b5:41:e6:dd:61:95:dd:ce:af:37:15:ac:8a:1d:90:8a:65:
         f0:b6:5a:05:ad:d3:b0:bb:83:43:65:d8:cd:a3:f6:95:d3:2b:
         75:07:35:bc:2e:2f:74:ba:52:de:b6:f7:df:83:0e:5f:2b:6c:
         b5:ff:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:47:19 2024 by rpki-client on console-ams.rpki-client.org