Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31382d3234203d3e203138363738.roa
File:                     3139302e39302e3132382e302f31382d3234203d3e203138363738.roa (raw, json)
Hash identifier:          l5UnLcKCPoCfRt+iy6Lb2E99JFE+IZAEUAEtB2HO1m0=
Subject key identifier:   71:DA:F2:B3:65:C2:F1:1B:82:97:54:C6:82:7D:30:71:F8:3E:AD:21
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5DD78FCC9D23596574AE1F5172DE5E9DB2939C7D
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31382d3234203d3e203138363738.roa
Signing time:             Wed 05 Mar 2025 15:55:00 +0000
ROA not before:           Wed 05 Mar 2025 15:50:00 +0000
ROA not after:            Wed 04 Mar 2026 15:55:00 +0000
asID:                     18678
IP address blocks:        190.90.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d7:8f:cc:9d:23:59:65:74:ae:1f:51:72:de:5e:9d:b2:93:9c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 15:50:00 2025 GMT
            Not After : Mar  4 15:55:00 2026 GMT
        Subject: CN=71DAF2B365C2F11B829754C6827D3071F83EAD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:0a:0d:fd:61:33:22:fa:f2:25:95:b2:7f:
                    db:21:02:e1:a7:3b:db:0a:b0:57:97:6e:37:42:f2:
                    c3:40:10:83:2d:77:8c:98:31:3c:37:06:0e:f4:48:
                    d6:d0:5d:12:8b:7f:57:c5:68:84:a7:97:f0:b9:c4:
                    f4:ee:e4:1e:19:b7:33:ce:57:e9:1d:39:01:dc:0b:
                    3e:3a:e6:7e:db:9f:86:e7:c7:88:a7:36:a7:97:0a:
                    e4:27:72:8b:2d:d5:14:56:e7:9e:da:ba:f4:5a:36:
                    13:12:72:f0:ad:41:99:22:58:3b:96:e6:e8:f2:4c:
                    9f:5f:bc:e1:e5:81:9e:82:fc:cb:64:80:f7:2d:ac:
                    00:eb:5e:bd:5e:ff:26:25:c2:af:8b:7d:15:b0:81:
                    d7:30:9f:ba:86:fa:08:80:b1:4e:02:39:56:e1:8f:
                    cf:ac:67:57:e2:42:be:39:c2:fd:a8:3a:84:dc:3b:
                    4d:6e:fe:48:33:c1:c7:7b:ed:46:21:ab:c5:aa:bd:
                    25:c4:68:8c:f2:61:1f:e2:b7:c8:b2:c3:6d:fc:90:
                    4a:de:3c:aa:75:d5:c9:0a:5a:0d:f1:a9:7d:49:f0:
                    f3:2e:4c:5a:40:6d:9e:2d:ce:6e:a9:c6:1a:cb:1e:
                    80:24:b3:1f:bb:73:c7:bc:f2:73:d2:0a:f1:eb:35:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:F2:B3:65:C2:F1:1B:82:97:54:C6:82:7D:30:71:F8:3E:AD:21
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3132382e302f31382d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:11:a8:e4:13:58:36:68:ed:a5:83:98:a0:ba:d5:ae:d3:
         f4:4d:57:bf:cf:c5:46:54:8e:31:4f:47:c9:5f:76:0a:6b:e6:
         dd:3a:18:38:c1:78:e9:13:ba:b5:9e:28:03:f9:59:90:55:3b:
         27:7e:7f:21:eb:58:e9:ec:09:93:6d:d3:5b:39:36:7a:85:de:
         2d:ef:1d:a8:eb:12:95:db:cd:43:bc:43:55:6c:ac:8b:8a:07:
         8f:03:fa:e8:d4:04:c3:83:ee:6f:b7:73:63:1c:50:bf:0e:3f:
         5a:c6:e1:3c:dc:1c:17:32:ee:2b:3a:17:e3:8b:c1:dd:da:9c:
         cf:91:ee:5c:ce:1d:50:a2:4f:fa:04:21:cd:89:fb:9b:2e:9b:
         da:c7:aa:cd:f0:fa:6d:73:75:b9:a6:64:96:d2:cc:b6:86:61:
         46:6d:18:cc:b4:b6:b4:89:53:d6:06:94:05:af:b8:88:2a:84:
         6c:bc:f1:21:b4:3f:06:f5:08:0e:5e:9c:d9:ee:8f:dc:2a:3f:
         5f:5d:70:f1:d6:12:b2:0d:a1:44:5f:1b:3c:f5:06:5f:17:a0:
         f4:d9:d8:b0:fa:9a:9a:0e:d8:a2:82:71:4a:fb:0c:6a:b1:30:
         df:a7:cf:1a:7b:d2:21:25:fe:b0:5b:38:17:29:54:17:65:c3:
         34:fd:13:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXdePzJ0jWWV0rh9Rct5enbKTnH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMDUxNTUwMDBaFw0yNjAzMDQxNTU1MDBaMDMxMTAvBgNV
BAMTKDcxREFGMkIzNjVDMkYxMUI4Mjk3NTRDNjgyN0QzMDcxRjgzRUFEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtcgoN/WEzIvryJZWyf9shAuGn
O9sKsFeXbjdC8sNAEIMtd4yYMTw3Bg70SNbQXRKLf1fFaISnl/C5xPTu5B4ZtzPO
V+kdOQHcCz465n7bn4bnx4inNqeXCuQncost1RRW557auvRaNhMScvCtQZkiWDuW
5ujyTJ9fvOHlgZ6C/MtkgPctrADrXr1e/yYlwq+LfRWwgdcwn7qG+giAsU4COVbh
j8+sZ1fiQr45wv2oOoTcO01u/kgzwcd77UYhq8WqvSXEaIzyYR/it8iyw238kEre
PKp11ckKWg3xqX1J8PMuTFpAbZ4tzm6pxhrLHoAksx+7c8e88nPSCvHrNSA/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcdrys2XC8RuCl1TGgn0wcfg+rSEwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzMjM4MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr5agDAN
BgkqhkiG9w0BAQsFAAOCAQEAP58RqOQTWDZo7aWDmKC61a7T9E1Xv8/FRlSOMU9H
yV92Cmvm3ToYOMF46RO6tZ4oA/lZkFU7J35/IetY6ewJk23TWzk2eoXeLe8dqOsS
ldvNQ7xDVWysi4oHjwP66NQEw4Pub7dzYxxQvw4/WsbhPNwcFzLuKzoX44vB3dqc
z5HuXM4dUKJP+gQhzYn7my6b2seqzfD6bXN1uaZkltLMtoZhRm0YzLS2tIlT1gaU
Ba+4iCqEbLzxIbQ/BvUIDl6c2e6P3Co/X11w8dYSsg2hRF8bPPUGXxeg9NnYsPqa
mg7YooJxSvsMarEw36fPGnvSISX+sFs4FylUF2XDNP0Tbg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:47 2025 by rpki-client