Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133302e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3133302e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          2qe3Ljf8GCVDxU5fk0ghPMMADV9axuWDkXSWhY2UmHE=
Subject key identifier:   A0:9A:2A:18:F5:A9:68:E0:CE:ED:1D:A2:75:9D:B2:1B:50:1D:AA:6A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       776C92C6587BD9B9AF6F4100F43754DBCB216FC9
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133302e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:46 +0000
ROA not before:           Tue 05 Mar 2024 17:55:46 +0000
ROA not after:            Tue 04 Mar 2025 18:00:46 +0000
asID:                     18678
IP address blocks:        190.90.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6c:92:c6:58:7b:d9:b9:af:6f:41:00:f4:37:54:db:cb:21:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:46 2024 GMT
            Not After : Mar  4 18:00:46 2025 GMT
        Subject: CN=A09A2A18F5A968E0CEED1DA2759DB21B501DAA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:48:a1:ef:39:bc:f4:2a:57:2d:7d:6f:a0:
                    98:09:86:88:23:6d:82:b6:70:8b:07:1d:32:50:ee:
                    d6:15:e2:ac:95:a5:e0:79:20:8c:bf:73:c6:37:3d:
                    fb:a6:32:34:55:62:36:a1:61:bd:9b:88:9f:d6:75:
                    e0:7c:c5:4c:07:e4:d6:27:b8:62:66:9c:e7:82:a5:
                    88:ac:8b:9e:3b:9b:c6:d6:4c:f0:4f:3c:2c:e1:a9:
                    0a:16:b7:64:ab:40:b6:ce:c2:fc:a2:f9:e4:2c:d1:
                    c1:cb:84:b7:0e:71:8e:e9:29:b5:1a:f7:1d:45:15:
                    bd:fd:f7:8b:19:13:3b:16:6e:04:b7:14:2f:77:ad:
                    d2:fd:de:67:5f:85:ae:21:97:e6:46:7b:35:c9:60:
                    92:09:86:6a:57:ce:e1:82:e6:cd:a9:6c:b4:36:20:
                    86:80:ae:3c:3f:3f:52:8c:67:4b:bc:33:0d:27:59:
                    d9:47:09:25:9f:3d:b5:94:1a:4c:9c:93:0b:77:7b:
                    98:6f:b1:92:5a:93:32:21:9a:20:75:88:78:c3:ca:
                    b4:17:d4:74:ab:e1:1e:7a:fb:da:e0:c3:27:30:58:
                    52:c0:fb:3b:cd:e8:5b:91:59:d0:58:01:e3:bc:ff:
                    68:8a:67:d1:72:7c:79:cc:37:0f:4d:a0:dd:36:cf:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:2A:18:F5:A9:68:E0:CE:ED:1D:A2:75:9D:B2:1B:50:1D:AA:6A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133302e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:ec:83:db:69:e9:c4:8c:47:2a:fa:71:3e:77:03:fe:18:
         74:f8:85:1e:77:fb:81:ac:cd:18:c1:e7:74:aa:5a:29:ef:f3:
         53:19:49:bb:33:85:60:ff:aa:ab:ef:ba:e3:48:d0:8b:c5:60:
         cf:7f:79:c8:03:45:c9:f9:4b:56:e0:ba:7b:b1:5a:74:7f:6c:
         8f:39:bf:d0:2b:22:73:70:43:b5:a5:f9:a0:26:44:8d:d0:79:
         90:1e:af:e6:d1:c2:1f:61:3a:86:c2:9a:27:1c:1f:47:2b:a7:
         e0:7c:6e:59:b1:ba:ee:64:70:f4:a3:34:21:8b:bf:a4:29:17:
         44:ac:17:73:73:f0:51:bb:f6:73:ff:e7:24:9d:05:46:2c:b3:
         3a:43:49:ba:76:9e:fd:b4:70:f2:b1:b4:17:08:15:ff:3b:29:
         12:d0:54:f5:e1:a2:75:fe:11:53:06:1b:b7:cb:e9:05:99:95:
         55:d2:b5:ca:b1:5d:f8:fa:4e:d9:03:be:2c:da:ab:78:1e:5c:
         8b:2b:d6:cc:21:ce:f7:91:2e:d2:ac:51:f1:f6:bc:14:58:ad:
         fc:8f:1d:db:d4:ad:bf:c5:dd:ba:4d:1f:38:b6:1d:cd:88:cb:
         57:71:96:65:8b:67:c2:e3:67:a3:06:f8:01:6d:26:4c:dd:62:
         ff:be:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:52 2024 by rpki-client on console-ams.rpki-client.org