Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
File:                     3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          zeu0l/Qd4SBxr3TeRLDS2o0G2sggTcNmgAUAj91unbM=
Subject key identifier:   14:6E:E6:CD:E7:FD:CA:83:6A:14:9F:7E:87:E2:49:CC:D1:0D:16:8E
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2B092EAD79736C644EF98101215BDEB5AF030888
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:44 +0000
ROA not before:           Tue 05 Mar 2024 17:55:44 +0000
ROA not after:            Tue 04 Mar 2025 18:00:44 +0000
asID:                     262589
IP address blocks:        190.90.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:09:2e:ad:79:73:6c:64:4e:f9:81:01:21:5b:de:b5:af:03:08:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:44 2024 GMT
            Not After : Mar  4 18:00:44 2025 GMT
        Subject: CN=146EE6CDE7FDCA836A149F7E87E249CCD10D168E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:2a:cf:0d:60:18:1c:28:5c:7f:8b:6d:81:
                    51:5c:cd:9f:fb:a4:40:0c:ce:c2:31:38:76:18:d8:
                    52:f5:68:f0:73:30:7a:9d:df:24:2a:05:10:65:9f:
                    c9:98:c8:0f:74:9a:c3:22:8b:be:d9:ad:4f:7f:cd:
                    6e:d2:94:55:7e:93:c8:0e:e2:1f:a4:f4:f2:d4:8b:
                    a3:a1:d2:71:f3:5c:c9:18:be:69:15:18:24:ec:c2:
                    d8:3a:4b:d7:3f:7d:58:aa:8f:b1:a0:97:82:95:11:
                    f2:3e:e9:a6:61:f1:39:f3:70:59:ba:08:03:71:cd:
                    5e:4c:f4:51:03:f5:39:15:13:68:04:21:ef:f5:a1:
                    b4:22:e7:eb:6a:e7:4a:7d:32:c0:87:86:c1:4e:7d:
                    f6:60:d4:19:cc:9c:eb:ad:d5:22:39:2a:a8:8e:1b:
                    84:79:de:60:2c:48:dc:c0:c3:ef:af:53:53:c8:75:
                    57:a9:5a:7a:84:ea:86:fd:c3:6c:69:03:ab:3c:a5:
                    0a:f0:9c:f7:78:d2:b6:f6:55:16:88:24:ea:a5:fc:
                    41:48:3e:a6:57:1c:e6:93:6c:27:e4:31:63:e6:a8:
                    ee:bf:e2:1d:fe:c6:ad:8f:d7:86:88:f4:b4:f4:40:
                    dc:50:45:fb:f2:0e:2f:38:c8:e6:3f:21:c5:5f:d9:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6E:E6:CD:E7:FD:CA:83:6A:14:9F:7E:87:E2:49:CC:D1:0D:16:8E
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:a5:10:37:2e:0c:2b:3d:34:7a:91:bd:0e:4c:90:9d:4a:01:
         ca:21:8c:b1:c2:bf:86:a5:94:c6:f8:63:05:81:53:cd:17:87:
         8c:fc:63:77:af:ec:44:f8:2a:b2:8d:13:0c:0e:5d:98:10:5d:
         52:f9:9e:9a:3a:0f:12:6a:76:36:da:2e:80:3d:ad:b9:1d:1d:
         ac:12:cf:48:c8:ac:57:be:e7:58:78:05:a4:64:a5:7b:d2:d8:
         fb:6e:34:6d:5c:b8:f4:c1:ec:93:b4:96:b2:72:b5:79:d8:62:
         63:ea:39:27:a5:b0:fa:16:01:19:50:9e:56:a0:54:e7:83:1a:
         d8:83:47:c1:23:b4:78:76:cd:1e:66:1a:04:d8:c7:75:18:7d:
         a7:cf:c7:74:bd:9e:25:20:95:35:9b:90:b2:f1:59:ee:2a:17:
         88:15:0c:c5:a8:17:3b:60:87:78:1b:5d:01:3b:27:aa:33:0a:
         37:85:7c:e4:4b:83:82:e8:e9:b0:ae:1a:6b:62:c2:b9:ae:96:
         35:21:48:d9:89:f8:ec:2c:30:49:64:aa:75:f1:79:e7:fd:ed:
         a7:84:db:a9:8b:e5:46:5a:21:c2:a3:ab:a5:33:51:74:8d:e8:
         54:eb:63:fd:2c:1c:fc:10:8c:67:58:d4:a5:a2:e0:2d:5d:93:
         c4:e4:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org