Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
File:                     3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          ZdqW9V4NeNlkXMiqRNFCuPoYG9850voVDnBhgTiIQl4=
Subject key identifier:   70:AE:6B:43:21:6D:FB:C7:6F:0B:64:1C:53:84:53:4D:F9:0C:B6:71
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5758506DF92AEB00107B4893725E9F326B2D5745
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:30 +0000
ROA not before:           Tue 04 Feb 2025 18:12:30 +0000
ROA not after:            Tue 03 Feb 2026 18:17:30 +0000
asID:                     262589
IP address blocks:        190.90.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:58:50:6d:f9:2a:eb:00:10:7b:48:93:72:5e:9f:32:6b:2d:57:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:30 2025 GMT
            Not After : Feb  3 18:17:30 2026 GMT
        Subject: CN=70AE6B43216DFBC76F0B641C5384534DF90CB671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:13:9e:cc:ef:c4:11:ea:d6:01:d1:73:10:
                    43:7d:02:78:6c:8a:62:bb:30:ce:34:db:b5:5f:ed:
                    43:cd:61:00:d3:f0:02:c2:36:b2:76:b4:9a:43:bd:
                    14:2d:b8:51:8f:19:bf:35:a0:4e:ed:fe:cd:73:0e:
                    41:d1:39:d0:20:1e:3c:39:3b:cb:0e:66:fd:45:14:
                    9e:ff:43:22:d4:6c:41:1c:97:1f:b2:0d:6d:96:66:
                    67:9d:5b:d6:af:43:59:74:39:ef:49:61:18:07:43:
                    96:81:a3:7b:7d:32:2b:34:4b:4a:e1:9e:98:50:4d:
                    a9:b9:dc:08:bc:8d:07:c8:72:41:c1:0d:72:95:3a:
                    7c:ba:85:b1:a7:f7:23:04:08:8a:76:d2:cc:6b:f6:
                    96:e3:ff:77:b8:3e:e7:c2:a1:11:59:2c:67:bf:c1:
                    dd:ab:7b:32:7a:1b:78:a3:36:25:46:fd:09:9b:95:
                    bb:ed:2a:91:e0:6e:f1:f1:2e:8f:9c:66:79:18:44:
                    d6:27:69:e9:9a:24:d2:53:ca:0a:a5:78:be:a4:2a:
                    b3:56:5a:10:9b:9c:cf:d7:4d:4b:06:0d:dd:28:99:
                    04:85:6f:d8:cb:a1:c3:1f:bb:00:e9:74:6b:3d:18:
                    2a:ce:42:95:d3:84:2f:21:f8:1e:93:32:2c:d6:d8:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:6B:43:21:6D:FB:C7:6F:0B:64:1C:53:84:53:4D:F9:0C:B6:71
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:e3:35:4e:d3:07:2f:81:2b:45:b7:9a:27:26:5a:ae:6a:
         21:96:be:62:b4:5a:4c:5e:fa:90:36:44:67:f7:59:ae:bf:a4:
         5a:d4:83:c1:3c:46:1f:49:53:ce:5a:0d:93:14:d3:7c:19:fb:
         df:a5:db:fc:81:3d:39:55:1d:14:79:03:7a:c9:ac:ee:4e:62:
         84:36:0b:d9:bc:bc:9d:23:eb:d0:b8:48:06:4c:42:ec:6c:b2:
         30:7a:97:73:ee:d5:d0:04:81:99:f9:de:fc:f4:fb:9e:3e:89:
         1e:45:7a:d1:99:64:63:00:76:e2:90:0e:f0:ce:08:36:0f:91:
         d7:5b:74:4b:0f:a2:55:ad:2c:cc:82:ed:0d:fd:de:b1:fd:26:
         57:af:18:78:40:19:01:b1:ca:9c:85:67:6f:a8:a7:a0:1b:b4:
         aa:9c:dd:4c:44:6c:3f:e2:c1:63:f9:b6:20:f9:d6:67:a2:64:
         3f:02:14:b6:58:bd:bb:90:ad:f0:0f:ca:16:c9:66:9a:32:b9:
         1d:7c:73:8e:20:bb:eb:88:90:f1:07:c0:2b:55:d5:46:db:c5:
         9e:3b:a6:4c:32:c2:85:d0:3f:80:8e:66:c9:e9:f3:a6:67:e5:
         27:4e:eb:f5:f4:db:b3:03:2c:6a:50:b4:03:91:fa:ea:0c:c9:
         a3:bb:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:24 2025 by rpki-client