Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137302e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3137302e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          GvHSEe4PD7qBLTAc4lJGt3FVnEAxfMBFNDmJ1v8rbsg=
Subject key identifier:   BF:76:C7:88:F5:EC:3E:1E:36:71:86:66:22:E2:E7:29:FB:C9:7B:99
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3DF2949B29F35C8F3414D56377C5439F9168EA62
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137302e302f32342d3234203d3e203236363139.roa
Signing time:             Wed 05 Mar 2025 15:20:00 +0000
ROA not before:           Wed 05 Mar 2025 15:15:00 +0000
ROA not after:            Wed 04 Mar 2026 15:20:00 +0000
asID:                     26619
IP address blocks:        190.90.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f2:94:9b:29:f3:5c:8f:34:14:d5:63:77:c5:43:9f:91:68:ea:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 15:15:00 2025 GMT
            Not After : Mar  4 15:20:00 2026 GMT
        Subject: CN=BF76C788F5EC3E1E3671866622E2E729FBC97B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:77:a7:c6:7c:91:40:c9:05:1c:f3:59:0f:
                    bf:c6:b0:24:54:6e:b0:0d:38:b2:90:2f:55:55:97:
                    bb:d0:39:b6:3e:6a:45:96:32:40:04:f3:04:a4:02:
                    c8:86:3e:39:26:23:6c:0e:d9:cd:82:44:47:1f:41:
                    d9:7d:ba:fb:5d:3f:51:44:a1:52:24:9e:3d:75:1a:
                    fc:9b:f1:b6:e4:cd:00:28:2b:cd:9a:1d:f6:d5:2b:
                    fa:6a:f4:86:e9:45:ca:a8:6b:2f:33:f4:6a:03:87:
                    b5:37:0c:a8:95:90:d2:80:55:e3:c2:e4:18:28:ab:
                    70:76:8d:3d:64:84:8f:18:c8:4b:9e:ec:72:67:84:
                    a1:8b:eb:d9:80:c1:52:e0:3c:d3:86:97:4d:a4:3d:
                    1a:21:b6:6b:32:c2:61:69:b4:fe:af:16:5d:ea:d3:
                    cf:c3:b6:ef:31:9a:ac:f9:54:fa:38:ea:cc:50:77:
                    91:a8:0a:b6:96:3f:af:b2:08:9c:89:1f:60:43:dd:
                    01:b6:62:93:f7:23:c5:ca:f4:86:fa:ba:02:f8:07:
                    bb:e7:66:30:53:5f:c5:91:1d:f5:14:7a:35:00:34:
                    d7:af:9a:57:1e:e7:ae:95:d0:7e:df:4e:90:e1:da:
                    2f:42:82:a1:0f:07:46:02:f0:2f:d4:b4:6c:00:e6:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:C7:88:F5:EC:3E:1E:36:71:86:66:22:E2:E7:29:FB:C9:7B:99
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137302e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:bd:1a:6b:29:92:cb:55:f0:17:a4:36:e3:55:e2:29:af:
         65:97:23:8b:51:5f:50:95:4c:16:4d:9b:aa:1e:67:37:50:62:
         a5:1a:e1:fd:88:28:75:9e:a0:c0:b6:38:04:68:f4:32:e7:20:
         c0:d5:1a:86:3f:f6:45:15:2f:f8:4f:37:c6:21:4f:dd:cd:f9:
         4b:ee:0a:59:ac:20:d8:80:69:71:f6:3d:6b:65:0a:90:cf:52:
         c7:d4:c9:3b:1a:7a:39:7a:cc:78:19:11:9c:a9:5c:01:1b:78:
         7c:8f:d6:e6:13:3a:3a:01:38:e1:ab:95:8b:84:8d:6f:53:8e:
         83:b1:92:12:ab:46:25:22:47:79:9e:4d:77:ad:40:7c:de:e6:
         9f:cc:1c:a0:2f:ef:c5:e6:06:cc:b1:0c:ba:7d:21:0d:df:91:
         c5:a5:dd:cd:68:79:97:69:6b:ba:a4:a1:65:5d:12:ea:0c:38:
         12:91:12:38:96:ce:19:16:07:48:65:37:eb:aa:08:90:37:54:
         6d:af:85:34:06:a7:31:56:4a:fc:5d:16:74:ea:99:da:ef:bc:
         e9:16:7b:aa:cc:a6:23:47:1d:75:b3:b5:ce:36:cd:e2:e9:9a:
         47:2f:da:2a:24:d8:57:af:2b:50:d4:96:3d:20:0f:f2:78:d9:
         2a:7b:38:31
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPfKUmynzXI80FNVjd8VDn5Fo6mIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMDUxNTE1MDBaFw0yNjAzMDQxNTIwMDBaMDMxMTAvBgNV
BAMTKEJGNzZDNzg4RjVFQzNFMUUzNjcxODY2NjIyRTJFNzI5RkJDOTdCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJB3enxnyRQMkFHPNZD7/GsCRU
brANOLKQL1VVl7vQObY+akWWMkAE8wSkAsiGPjkmI2wO2c2CREcfQdl9uvtdP1FE
oVIknj11Gvyb8bbkzQAoK82aHfbVK/pq9IbpRcqoay8z9GoDh7U3DKiVkNKAVePC
5Bgoq3B2jT1khI8YyEue7HJnhKGL69mAwVLgPNOGl02kPRohtmsywmFptP6vFl3q
08/Dtu8xmqz5VPo46sxQd5GoCraWP6+yCJyJH2BD3QG2YpP3I8XK9Ib6ugL4B7vn
ZjBTX8WRHfUUejUANNevmlce566V0H7fTpDh2i9CgqEPB0YC8C/UtGwA5sXPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUv3bHiPXsPh42cYZmIuLnKfvJe5kwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzNzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5aqjAN
BgkqhkiG9w0BAQsFAAOCAQEAUbO9GmspkstV8BekNuNV4imvZZcji1FfUJVMFk2b
qh5nN1BipRrh/YgodZ6gwLY4BGj0MucgwNUahj/2RRUv+E83xiFP3c35S+4KWawg
2IBpcfY9a2UKkM9Sx9TJOxp6OXrMeBkRnKlcARt4fI/W5hM6OgE44auVi4SNb1OO
g7GSEqtGJSJHeZ5Nd61AfN7mn8wcoC/vxeYGzLEMun0hDd+RxaXdzWh5l2lruqSh
ZV0S6gw4EpESOJbOGRYHSGU366oIkDdUba+FNAanMVZK/F0WdOqZ2u+86RZ7qsym
I0cddbO1zjbN4umaRy/aKiTYV68rUNSWPSAP8njZKns4MQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:41:36 2025 by rpki-client