Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137322e302f32322d3234203d3e20323632353839.roa
File:                     3139302e39302e3137322e302f32322d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          jDth0H63CLdT6zNf1q3DT3iXLMFcgadSPMdBlb5BU0U=
Subject key identifier:   7D:E6:51:9A:EF:6A:B8:95:1D:50:42:4F:5F:7D:06:79:CC:77:A6:C7
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       583B04EBD86BD2FF94A05D69872B10DC55836476
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137322e302f32322d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:35 +0000
ROA not before:           Tue 05 Mar 2024 17:55:35 +0000
ROA not after:            Tue 04 Mar 2025 18:00:35 +0000
asID:                     262589
IP address blocks:        190.90.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3b:04:eb:d8:6b:d2:ff:94:a0:5d:69:87:2b:10:dc:55:83:64:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:35 2024 GMT
            Not After : Mar  4 18:00:35 2025 GMT
        Subject: CN=7DE6519AEF6AB8951D50424F5F7D0679CC77A6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:16:eb:22:57:a7:12:97:9f:df:04:14:cd:
                    24:05:e8:06:5e:3c:17:86:ab:ad:fb:94:e5:e1:cb:
                    9a:2b:6f:b3:84:a9:39:f7:74:f9:03:cf:60:b5:c6:
                    e2:7a:40:ee:27:db:31:73:7f:59:69:4f:6f:ea:da:
                    e4:bf:2d:2c:d1:38:64:2d:cf:e7:19:2b:77:51:a4:
                    98:2b:48:31:e4:0a:75:34:af:19:f9:21:83:9e:d0:
                    22:ab:46:89:9a:9b:f3:ec:09:75:74:19:40:32:f0:
                    46:26:1b:15:4a:c5:b9:11:2e:da:aa:06:40:ad:25:
                    b4:38:4c:22:fb:dc:62:44:14:5b:35:99:fa:95:71:
                    0c:e5:a3:9e:22:15:35:d7:3d:bd:ba:1f:45:f5:01:
                    54:80:9d:b8:15:42:e4:93:7e:f7:f1:63:6b:87:e9:
                    ef:a6:dd:e5:31:c5:44:8a:90:33:56:6c:93:df:77:
                    9e:b5:f5:8f:cb:8c:5d:8d:8a:ac:ee:fa:32:44:11:
                    ed:12:af:a4:0d:0f:a0:ed:56:fc:a0:8e:63:b6:94:
                    55:f8:66:64:b7:b3:39:7d:48:c0:25:46:69:65:13:
                    62:ac:d3:a8:ce:37:34:f1:4b:ad:e5:fc:cb:7e:f8:
                    ae:8a:ae:ba:7e:12:d1:7d:c6:47:20:c8:84:5e:aa:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:51:9A:EF:6A:B8:95:1D:50:42:4F:5F:7D:06:79:CC:77:A6:C7
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137322e302f32322d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:12:c0:a2:42:84:c1:67:65:c6:53:47:dc:92:0c:fe:b5:
         14:69:d5:01:87:df:fc:43:90:ed:42:71:a1:85:68:70:e6:f7:
         7b:1e:f0:66:70:cc:73:d1:a4:e3:80:e8:77:2a:b8:5b:fe:44:
         3a:28:f2:6e:4e:c9:f6:21:80:12:56:f3:13:40:a9:e1:e3:c4:
         52:9d:4e:ae:4f:13:35:e1:71:38:8f:5e:4d:a9:58:35:33:8e:
         bf:58:0d:7f:13:17:af:4b:df:fc:25:53:47:c2:91:a3:35:c8:
         49:2e:85:62:2b:dc:65:ba:b7:e3:55:f2:e7:d0:3d:eb:18:f1:
         d3:25:ad:71:cc:e3:2a:bd:74:4e:22:76:64:ab:85:71:b7:45:
         8c:f1:60:78:ad:d9:e5:c4:75:d4:41:91:06:ce:d7:9a:ec:b4:
         1b:68:de:60:f4:f6:4a:66:14:a8:63:49:b5:26:1a:4a:77:5b:
         db:a2:58:d6:73:1c:e6:79:c0:4f:27:6a:11:db:97:2e:3d:8e:
         b2:1a:69:94:d6:b0:89:43:0c:a7:d6:88:37:30:f3:01:d6:d2:
         f6:86:46:0f:95:b9:a0:ed:32:51:ba:d5:9f:bd:eb:d9:af:fa:
         ca:c7:8d:02:b5:04:08:00:fc:c5:21:9b:b5:28:1f:09:62:8a:
         1c:3d:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org