Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135362e302f32322d3234203d3e203236363139.roa
File:                     3139302e39302e3135362e302f32322d3234203d3e203236363139.roa (raw, json)
Hash identifier:          i09L1P1F9BSap1ACx206lzMa7W1RM6B3/vTshZh+6Is=
Subject key identifier:   E8:4E:FF:9C:43:61:71:26:D7:FE:04:32:13:58:F1:AA:A8:71:C8:86
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5C555445BC8C9BDCDB00512B7B4BD650CFD3905A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135362e302f32322d3234203d3e203236363139.roa
Signing time:             Tue 04 Feb 2025 18:17:26 +0000
ROA not before:           Tue 04 Feb 2025 18:12:26 +0000
ROA not after:            Tue 03 Feb 2026 18:17:26 +0000
asID:                     26619
IP address blocks:        190.90.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:55:54:45:bc:8c:9b:dc:db:00:51:2b:7b:4b:d6:50:cf:d3:90:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:26 2025 GMT
            Not After : Feb  3 18:17:26 2026 GMT
        Subject: CN=E84EFF9C43617126D7FE04321358F1AAA871C886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:83:a3:67:93:03:ba:b3:52:4b:6f:9f:4e:
                    48:09:8b:38:7c:5b:d0:a5:af:ad:6f:18:f9:7a:e5:
                    05:15:8d:47:91:6e:90:64:23:75:5f:cb:91:80:d5:
                    fd:13:b2:df:fb:20:2b:68:f9:4c:76:c1:eb:ed:0d:
                    e0:8d:85:b3:79:8e:9d:29:ef:4c:e6:6f:cb:3d:fb:
                    74:b9:e8:4f:1e:2b:9a:9f:b1:2d:f3:ff:f7:c8:7c:
                    a3:df:3d:2b:b7:a0:e0:85:d9:51:56:dd:2a:fa:67:
                    f5:4e:de:cc:d6:ef:6d:25:b9:b8:85:48:56:54:16:
                    1f:1b:f3:9b:05:ce:e6:5f:cf:bb:9e:fc:4b:75:bf:
                    08:c6:45:c0:34:ba:2e:cc:7d:c0:06:f2:03:68:be:
                    fb:91:6b:ed:3b:65:b4:24:7d:4b:c0:51:fe:8b:e2:
                    d0:92:79:4b:a0:54:ad:10:ee:b2:4b:88:9e:4f:70:
                    30:6a:76:c8:28:59:4b:48:35:a1:f3:61:09:93:91:
                    47:41:22:5a:f0:cb:db:cc:6e:5f:37:a1:9a:fb:5f:
                    04:b0:71:dc:2b:eb:ec:ff:59:40:84:a9:89:de:a9:
                    3d:f9:94:81:54:01:c5:a1:74:60:fe:bd:60:e4:20:
                    8a:60:f8:1c:b7:a8:8c:17:46:3d:c4:5e:a1:7f:a3:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:FF:9C:43:61:71:26:D7:FE:04:32:13:58:F1:AA:A8:71:C8:86
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135362e302f32322d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:24:1f:bb:90:ba:27:9b:15:9d:98:0a:25:08:27:0e:1e:
         19:5d:a6:8a:7b:97:d1:68:e7:17:1e:d4:d3:a1:dd:bc:8b:bc:
         ee:07:0e:b0:29:09:98:1c:b9:7b:70:e0:da:c8:9f:e4:14:77:
         9d:ae:45:6e:d0:96:28:04:83:88:7c:2a:5e:a1:27:79:d8:3a:
         28:5b:87:a1:c0:ac:ac:08:62:28:d6:70:bf:0c:8d:de:bf:e3:
         d0:12:d7:7d:73:b4:85:e6:5b:e3:55:c1:30:56:1c:2e:ee:3b:
         79:f7:f2:b0:4a:10:25:ad:4c:7f:82:c6:6f:21:c7:61:cd:23:
         44:d7:8f:be:5c:0f:52:98:11:49:f8:58:af:e9:39:79:da:4a:
         51:34:b3:bf:cf:70:bc:4d:11:a0:f9:ed:e7:da:ab:ee:17:74:
         64:69:5a:28:18:5b:58:70:27:36:d9:69:e9:ef:d2:d0:f4:ae:
         59:05:a8:2b:79:c1:33:3b:9e:f7:ba:07:f9:3f:62:02:fc:77:
         ab:8a:88:7d:5a:e3:39:49:7d:21:f9:f9:c1:70:e9:92:7b:71:
         e4:26:c2:cf:16:59:0f:0b:7e:a6:9a:27:f6:f2:e5:1d:0d:30:
         c8:31:f9:09:a2:64:be:a8:2a:c0:89:89:64:bd:0c:64:77:14:
         78:6f:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:07 2025 by rpki-client