Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133382e302f32342d3234203d3e20323634363436.roa
File:                     3139302e39302e3133382e302f32342d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          kXy4ttb9wH8fIYyAnTOFQZPjJAJWCZfMm6qXnJQJFls=
Subject key identifier:   AE:A7:6C:7F:DE:EB:9F:1D:FE:91:D1:FD:D5:FE:C0:61:26:11:AD:26
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3FB57FE75B3FC99A7864BCE6545E1967AC11854B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133382e302f32342d3234203d3e20323634363436.roa
Signing time:             Tue 04 Feb 2025 18:17:31 +0000
ROA not before:           Tue 04 Feb 2025 18:12:31 +0000
ROA not after:            Tue 03 Feb 2026 18:17:31 +0000
asID:                     264646
IP address blocks:        190.90.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:7f:e7:5b:3f:c9:9a:78:64:bc:e6:54:5e:19:67:ac:11:85:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:31 2025 GMT
            Not After : Feb  3 18:17:31 2026 GMT
        Subject: CN=AEA76C7FDEEB9F1DFE91D1FDD5FEC0612611AD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:a6:86:b1:17:5e:6d:a9:da:df:2a:ea:20:
                    e8:61:c2:ab:19:64:53:1d:f0:e0:61:bd:a9:20:cc:
                    cb:83:ca:6b:b8:04:3c:e2:7b:af:a4:66:63:0e:8e:
                    1b:4d:b1:75:a5:ba:10:34:63:a4:ed:20:c5:cd:1a:
                    91:54:b8:9b:63:cc:35:4e:07:3d:89:f2:45:e2:b9:
                    a1:0c:bd:f5:96:34:54:72:10:87:50:56:6f:7e:e4:
                    d4:ec:9c:7f:94:2d:e7:c5:9c:c6:f8:c5:a6:ee:67:
                    bd:78:d8:e5:4b:fe:1e:77:fa:fa:39:26:c7:dc:e0:
                    f3:11:6e:9f:37:2f:40:cd:77:39:c1:dc:24:93:43:
                    d8:26:cf:54:e1:ec:8b:e4:26:b7:e5:b1:5c:35:47:
                    8f:c7:4a:89:e1:27:c4:65:b8:89:b2:5d:b3:2e:a8:
                    9b:58:45:ed:7b:70:01:7a:4a:91:12:8f:cd:17:98:
                    f7:21:2b:8a:3f:92:48:ad:87:12:af:d2:d0:5e:25:
                    4b:fe:9d:83:34:e3:be:a2:f0:b1:82:34:6c:18:da:
                    ad:92:06:b8:2c:4c:5c:44:9c:d5:10:09:3c:d7:a6:
                    4e:6d:ed:d4:4c:8e:61:96:ab:ef:a3:3d:c8:89:d8:
                    c7:13:6b:00:3f:ef:fd:d1:63:a0:ec:81:89:37:cb:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A7:6C:7F:DE:EB:9F:1D:FE:91:D1:FD:D5:FE:C0:61:26:11:AD:26
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133382e302f32342d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:a6:19:b6:a0:c4:28:aa:2d:ec:3d:d8:a3:ea:b6:f8:98:
         fb:01:70:ce:40:f8:f4:5c:c7:32:da:69:1b:9a:b3:a4:45:4a:
         b4:be:1f:8d:ee:d7:81:85:8c:eb:0b:1b:72:85:16:09:c3:e6:
         21:4e:e2:06:90:b4:63:d0:4f:78:bc:34:85:b7:ec:91:f0:47:
         e9:21:22:ef:9b:c1:b6:a0:11:01:cd:ad:b3:2e:d5:b7:25:c2:
         50:73:2b:3e:71:a2:16:df:84:5b:8b:d5:14:58:d7:53:74:96:
         45:7a:11:24:34:4a:be:4d:81:67:98:60:dc:bf:72:ca:af:15:
         f1:ae:a6:5e:eb:f9:22:4d:3d:45:24:71:6c:30:cb:f8:e1:aa:
         dd:79:13:59:03:2e:57:33:6b:b1:38:ce:ac:a9:1c:8b:b9:45:
         53:72:4a:e5:81:7b:f7:ea:7f:c6:4a:2d:5e:ad:14:9d:40:93:
         01:13:c9:ba:82:57:dc:71:22:cb:60:91:32:e8:e3:b5:18:f6:
         d9:36:aa:4a:a6:cd:18:86:79:e0:03:1e:cd:71:78:b5:b4:b2:
         2a:86:47:65:17:64:3d:ca:79:8d:82:41:bb:ed:76:c5:82:50:
         d0:1e:3d:4f:0f:8c:9a:18:45:79:f1:e2:e6:0c:0e:99:a7:88:
         0f:47:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:09:34 2025 by rpki-client