Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e20323632353839.roa
File:                     3139302e39302e3135322e302f32322d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          cKjKr40wF3tlWAkJPVKJjRN6C5MsPN3oYpXXbzb2Vv0=
Subject key identifier:   6A:DA:37:0D:A2:B0:E4:BE:C1:82:29:EE:2F:71:49:8B:82:5E:4B:1B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2264F12D0982AE417444F6D3BFD7BFD65179F1EB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:28 +0000
ROA not before:           Tue 04 Feb 2025 18:12:28 +0000
ROA not after:            Tue 03 Feb 2026 18:17:28 +0000
asID:                     262589
IP address blocks:        190.90.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:f1:2d:09:82:ae:41:74:44:f6:d3:bf:d7:bf:d6:51:79:f1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:28 2025 GMT
            Not After : Feb  3 18:17:28 2026 GMT
        Subject: CN=6ADA370DA2B0E4BEC18229EE2F71498B825E4B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:68:7d:93:39:ed:8e:ce:c0:39:04:c2:c1:
                    a7:3b:4e:73:58:7b:b9:7f:25:dd:8d:9e:33:d7:39:
                    40:6c:cd:e7:61:a8:09:ad:b1:a9:86:0a:53:4b:ef:
                    d0:06:a1:d7:5a:d8:f6:f1:52:cf:2c:1d:b4:f1:77:
                    9a:65:fd:ba:ec:ec:7e:d6:b2:3f:1a:d8:34:ff:d2:
                    69:e2:cc:ff:f1:d8:5d:03:52:10:24:5f:b3:87:a5:
                    49:67:65:16:ed:5f:ac:f2:ab:c0:11:37:a1:4a:53:
                    1d:db:d7:88:c2:bb:db:af:3f:aa:be:6a:ac:2e:51:
                    28:b8:86:e5:de:43:fc:27:93:03:af:28:1a:80:cd:
                    fb:77:d5:ca:b1:73:f0:bc:c3:64:ba:8c:ac:e0:71:
                    5a:57:0d:51:36:f4:58:fd:c0:35:14:cb:07:61:e1:
                    93:b5:66:ed:ea:c7:d7:ce:9e:30:11:d7:6d:d7:ac:
                    26:17:04:9d:7e:5b:00:e0:76:12:1b:69:8a:ee:04:
                    24:0b:a0:3c:90:6e:5e:40:68:db:b9:e6:37:9e:69:
                    91:da:88:0d:55:a7:30:5b:77:3f:3b:2e:b5:13:07:
                    06:c9:d2:19:1f:2d:ae:2b:b5:40:c5:fa:55:e6:75:
                    6c:e1:fc:d3:ec:bc:4f:b7:36:b2:39:89:9c:f2:7c:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:37:0D:A2:B0:E4:BE:C1:82:29:EE:2F:71:49:8B:82:5E:4B:1B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:68:b6:36:78:2a:d8:c3:6e:09:f6:e2:a6:a1:37:8b:07:39:
         db:97:f7:b8:bf:a4:b1:da:23:01:5f:01:f5:e5:e8:fb:4e:98:
         e2:eb:5b:c1:88:c4:95:b2:8f:fb:1d:11:b8:aa:58:a4:4a:db:
         8c:dc:d9:d0:9c:db:c8:18:d0:46:0e:9b:15:3d:09:44:4b:e9:
         5d:69:43:76:6c:9f:1a:7e:f7:cc:2c:e3:02:c6:8e:f0:59:19:
         a5:86:f4:cc:60:31:30:0a:dd:c6:ab:ca:9e:32:1f:a1:7f:28:
         a7:b5:81:a7:55:bb:74:c6:15:a0:00:de:0d:8d:b3:7b:0d:07:
         d6:5c:0a:e9:e1:26:b3:0f:49:ef:91:20:39:61:89:28:f9:84:
         0d:d6:62:a7:42:b1:6e:32:5c:79:e5:4c:5a:b0:da:2c:f1:b3:
         c0:fb:d2:c8:96:7a:6e:cc:7e:8f:97:52:77:bd:21:b3:56:b6:
         a9:df:8b:2f:0c:97:51:bd:47:4d:24:fe:08:56:44:43:96:7e:
         8d:79:18:9d:61:ce:41:3c:59:d6:ae:a8:d8:51:d2:4a:3b:32:
         27:96:8f:a3:3d:d8:b7:b7:1b:6e:ca:34:c6:06:65:ea:32:1b:
         7c:d6:51:4f:31:98:c5:38:3a:38:92:7d:c0:4f:f0:72:02:bc:
         1a:7a:76:0b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUImTxLQmCrkF0RPbTv9e/1lF58eswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMjhaFw0yNjAyMDMxODE3MjhaMDMxMTAvBgNV
BAMTKDZBREEzNzBEQTJCMEU0QkVDMTgyMjlFRTJGNzE0OThCODI1RTRCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OWh9kzntjs7AOQTCwac7TnNY
e7l/Jd2NnjPXOUBszedhqAmtsamGClNL79AGodda2PbxUs8sHbTxd5pl/brs7H7W
sj8a2DT/0mnizP/x2F0DUhAkX7OHpUlnZRbtX6zyq8ARN6FKUx3b14jCu9uvP6q+
aqwuUSi4huXeQ/wnkwOvKBqAzft31cqxc/C8w2S6jKzgcVpXDVE29Fj9wDUUywdh
4ZO1Zu3qx9fOnjAR123XrCYXBJ1+WwDgdhIbaYruBCQLoDyQbl5AaNu55jeeaZHa
iA1VpzBbdz87LrUTBwbJ0hkfLa4rtUDF+lXmdWzh/NPsvE+3NrI5iZzyfIiPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUato3DaKw5L7BginuL3FJi4JeSxswHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvlqY
MA0GCSqGSIb3DQEBCwUAA4IBAQCEaLY2eCrYw24J9uKmoTeLBznbl/e4v6Sx2iMB
XwH15ej7Tpji61vBiMSVso/7HRG4qlikStuM3NnQnNvIGNBGDpsVPQlES+ldaUN2
bJ8afvfMLOMCxo7wWRmlhvTMYDEwCt3Gq8qeMh+hfyintYGnVbt0xhWgAN4NjbN7
DQfWXArp4SazD0nvkSA5YYko+YQN1mKnQrFuMlx55UxasNos8bPA+9LIlnpuzH6P
l1J3vSGzVrap34svDJdRvUdNJP4IVkRDln6NeRidYc5BPFnWrqjYUdJKOzInlo+j
Pdi3txtuyjTGBmXqMht81lFPMZjFODo4kn3AT/ByArwaenYL
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:56 2025 by rpki-client