Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
File:                     3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          +WypY6HNL5/xns3I7/dRnLkPqUY1PB+Xkuaumr/R7P8=
Subject key identifier:   8B:9F:E4:D4:8F:DC:BF:F0:67:C7:DE:73:B7:64:BA:7A:6E:3D:B9:6C
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       537130C6B5315082546448F7F6AE72E6C0680710
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:50 +0000
ROA not before:           Tue 05 Mar 2024 17:55:50 +0000
ROA not after:            Tue 04 Mar 2025 18:00:50 +0000
asID:                     262589
IP address blocks:        190.90.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:71:30:c6:b5:31:50:82:54:64:48:f7:f6:ae:72:e6:c0:68:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:50 2024 GMT
            Not After : Mar  4 18:00:50 2025 GMT
        Subject: CN=8B9FE4D48FDCBFF067C7DE73B764BA7A6E3DB96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:11:e7:33:02:bd:4f:9c:b3:d3:d7:67:8f:
                    b9:45:52:eb:4e:2d:76:92:66:1e:fe:2b:21:e1:22:
                    e0:e0:2a:27:26:36:bf:95:5c:77:9a:47:e2:8f:f3:
                    0c:8c:39:1b:f3:ee:6b:af:c5:a2:57:41:30:fe:6a:
                    63:22:4e:2e:42:be:69:4c:7e:3c:ea:f6:2c:ce:65:
                    f5:39:a2:36:9d:d8:73:95:5f:03:c6:30:53:b1:7e:
                    95:3d:a0:30:0d:bb:05:79:66:57:5e:a9:dc:93:ba:
                    6b:39:26:95:d6:87:70:3f:af:33:5b:fc:ad:20:02:
                    69:c9:87:57:67:dd:c3:4e:68:6e:79:68:ef:b2:3e:
                    61:92:36:15:86:59:0b:70:1e:ea:9f:7e:56:0b:32:
                    b0:cd:c8:35:6a:c8:70:53:47:72:3e:37:38:a6:86:
                    89:45:f7:2e:e2:02:00:65:c1:35:ea:f2:df:ed:d3:
                    98:e3:b0:e9:e0:b6:23:85:e0:48:cf:59:97:24:04:
                    e6:92:f2:9e:09:6d:82:57:78:5f:9a:82:71:33:60:
                    2a:89:57:fe:f2:79:ac:50:1a:4e:1e:a3:e9:db:82:
                    e2:53:27:ea:81:ae:22:cb:05:3e:9e:8c:f6:59:ff:
                    2d:43:36:0c:3e:b5:ab:b8:9b:06:aa:2f:6a:94:1a:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:E4:D4:8F:DC:BF:F0:67:C7:DE:73:B7:64:BA:7A:6E:3D:B9:6C
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:85:3c:37:6d:4d:c7:ef:03:24:14:ac:1d:46:f4:1a:c6:73:
         d1:c8:ef:b5:c1:02:aa:41:6f:cf:d0:26:35:98:2c:85:06:e8:
         d6:d3:a4:e9:3a:28:99:6b:ee:1d:bc:b7:22:04:bd:f0:ed:a9:
         8f:a4:8e:14:d7:e3:85:6d:6c:ae:73:4f:ec:ef:af:25:b1:d0:
         3d:ce:f7:7e:14:8c:58:13:30:a4:a5:db:19:2a:27:97:de:4e:
         82:56:de:db:2d:61:05:d0:e3:49:47:cc:c2:f9:36:dd:5d:77:
         25:6b:32:a3:3d:c4:a5:de:73:fe:4c:50:b9:bd:dd:8f:b9:75:
         20:83:41:f4:e7:d2:40:8f:4b:b0:b7:5b:1b:da:09:2e:a0:ac:
         61:43:eb:4d:3d:dd:54:a1:1c:c3:1e:bd:8a:7f:57:0a:5c:b9:
         55:29:83:b3:ab:e9:b5:1b:d4:02:59:25:3d:c0:77:21:ae:75:
         d8:06:21:78:10:be:36:1e:7f:2c:e0:85:3e:74:1c:b9:53:10:
         75:43:8e:1b:6d:da:bd:5e:0a:31:a8:30:1c:0c:d1:dc:da:f8:
         08:02:61:d6:e9:45:2d:00:1d:fc:e0:dc:6c:7e:f4:59:3b:4a:
         e6:4b:e6:d4:90:b5:e4:6c:1c:b5:cf:20:e8:b8:a9:9b:4e:aa:
         22:29:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:47:19 2024 by rpki-client on console-ams.rpki-client.org