Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137302e302f32332d3234203d3e203236363139.roa
File:                     3139302e39302e3137302e302f32332d3234203d3e203236363139.roa (raw, json)
Hash identifier:          mTV3/QGu2wyu76dw7JlLbVg3HqMfy3fRJV0u4jULaPE=
Subject key identifier:   89:F7:B0:BD:92:85:EF:E3:BD:FB:3F:DA:55:B1:90:D1:08:C2:8C:5A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       46CB2286B58A3E7A9FA8C55BAA842CC3A49F89C8
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137302e302f32332d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:31 +0000
ROA not before:           Tue 05 Mar 2024 17:55:31 +0000
ROA not after:            Tue 04 Mar 2025 18:00:31 +0000
asID:                     26619
IP address blocks:        190.90.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cb:22:86:b5:8a:3e:7a:9f:a8:c5:5b:aa:84:2c:c3:a4:9f:89:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:31 2024 GMT
            Not After : Mar  4 18:00:31 2025 GMT
        Subject: CN=89F7B0BD9285EFE3BDFB3FDA55B190D108C28C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:d5:93:05:ec:4d:b7:61:92:1a:6c:d8:45:
                    2d:28:88:8a:36:b3:96:86:7b:3a:a8:b8:f2:98:6a:
                    d3:af:49:95:df:fd:75:da:f4:ec:7c:ea:3d:49:b8:
                    0d:56:57:2c:c9:44:ea:87:12:99:07:3d:85:31:e7:
                    81:dc:d6:b4:16:43:3e:55:d0:7a:71:48:26:cb:21:
                    d3:df:23:e7:8f:3d:e3:d3:d9:71:30:95:8e:43:12:
                    30:8e:d1:f4:60:ec:23:13:b3:92:5f:56:b7:ad:e4:
                    e7:71:54:6f:71:f1:4e:05:50:c7:fb:21:5f:d3:d4:
                    d0:ef:c7:92:45:71:6e:20:22:99:aa:56:79:2b:2a:
                    d8:2e:c9:b6:17:cf:1d:45:14:09:90:52:67:ad:6f:
                    75:71:3d:93:48:3f:96:92:37:55:92:e7:9d:ab:2f:
                    40:be:e5:da:d5:89:57:b0:fd:ff:35:ca:b0:b9:e0:
                    04:e5:e9:f3:ed:6a:4c:b5:43:6a:ed:0b:71:88:3e:
                    1f:cb:a1:bc:1b:3c:04:64:2f:2c:09:ca:13:1b:d4:
                    33:52:d0:8d:55:7e:67:75:5a:f9:ba:5d:34:4e:77:
                    bd:41:8c:21:f2:83:bb:5b:67:10:39:b6:68:b6:b2:
                    6c:78:a7:d8:7c:e3:85:fa:41:6f:08:e2:93:c7:56:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:B0:BD:92:85:EF:E3:BD:FB:3F:DA:55:B1:90:D1:08:C2:8C:5A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137302e302f32332d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:3e:18:8b:4c:0e:fb:0b:55:ce:87:a9:1f:ea:ae:15:c0:
         a9:39:be:67:c2:e8:97:75:f0:94:b3:f0:b5:a5:30:49:db:31:
         b5:81:e1:fc:09:8e:6b:6f:d9:5b:b2:08:b5:2b:fd:7b:71:cb:
         ec:5d:b4:eb:be:8d:3b:a7:29:8e:aa:01:80:e7:be:67:6a:4e:
         18:99:8d:51:cb:da:87:51:ff:f7:e4:04:03:11:9c:f0:71:20:
         68:c8:72:c2:15:c1:45:8b:b7:16:52:ed:82:94:19:3a:c4:e6:
         b9:68:bf:1f:4e:83:33:b7:ed:1b:7f:ed:72:65:54:04:97:9c:
         68:06:c7:0a:cb:c4:88:85:7c:52:e1:85:bf:58:66:0b:5c:29:
         4b:2e:38:84:d1:8e:c2:2e:a5:c9:97:09:ac:2d:01:9e:d4:31:
         b5:43:b2:5f:04:36:f0:0a:ba:09:10:8c:95:7e:b3:6e:58:15:
         48:3c:f4:cb:64:06:36:76:e7:f8:f5:e3:84:1d:61:51:9b:ad:
         5d:41:ca:c4:6a:ff:8d:97:d7:fb:d2:27:86:75:d7:35:50:a4:
         b6:ce:d9:79:94:ce:c0:8a:54:08:15:96:7b:e4:81:bb:99:74:
         40:a8:89:2c:11:22:05:b0:ce:11:6d:9d:63:c2:62:9f:b8:5a:
         dc:f2:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org