Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138312e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3138312e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          FW6qtQNkvO/gizQ94VqtDnDd8UAypDdmfLNrw1uudmg=
Subject key identifier:   4D:48:FB:20:71:41:FA:BA:B6:38:7A:64:EE:65:2F:9A:6B:99:8F:E6
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       18476E3BFB0DB2D7C8480701FF0A42BC8EBED7F7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138312e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     26619
IP address blocks:        190.90.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:47:6e:3b:fb:0d:b2:d7:c8:48:07:01:ff:0a:42:bc:8e:be:d7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=4D48FB207141FABAB6387A64EE652F9A6B998FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:b2:c4:20:d9:d4:2c:69:06:8c:42:4b:6c:
                    b7:d2:5b:a3:b3:03:65:3e:3a:e9:d5:4d:93:1c:a8:
                    17:93:24:6b:04:e3:7b:68:36:ff:0d:49:19:df:93:
                    29:ed:ce:db:6e:b7:a0:69:9d:0e:a0:ab:88:35:c2:
                    58:ab:a7:17:d3:86:c5:34:1b:d4:11:83:39:de:c7:
                    7d:07:fb:f5:51:01:88:e9:f3:44:7b:fd:8a:dd:6b:
                    a3:8c:b2:ad:60:18:e1:98:d2:0e:f2:f9:86:5d:de:
                    6a:37:fb:f5:65:02:46:03:54:01:e8:41:63:fc:b8:
                    52:95:7e:95:76:46:0d:e0:15:84:72:7f:c1:69:81:
                    2a:f1:ce:e2:33:81:cf:69:dc:62:71:f6:a3:72:65:
                    18:ae:ef:f2:f5:be:d8:78:9b:d1:44:f7:e6:bc:b0:
                    cb:f7:86:05:3b:9e:06:e6:10:7f:2d:0f:d5:0d:47:
                    81:f9:d6:6d:4a:d5:e3:ad:ec:45:eb:13:7e:58:c9:
                    66:66:70:34:8c:00:64:69:2a:16:f3:10:81:40:95:
                    5b:da:4b:70:e7:a8:9e:62:8c:07:7c:16:74:e6:a2:
                    1f:1d:08:2a:b5:41:23:1c:17:29:58:cd:d3:29:4a:
                    16:94:b4:bd:87:22:64:62:38:9d:f5:20:f7:43:09:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:FB:20:71:41:FA:BA:B6:38:7A:64:EE:65:2F:9A:6B:99:8F:E6
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138312e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:89:f6:90:73:19:79:3a:32:c9:28:40:6c:f5:78:a6:44:
         b9:25:9c:b4:5d:1a:7c:1a:39:4e:40:df:ff:9f:48:01:6b:12:
         d1:a4:3d:f5:59:15:eb:81:36:ce:87:a0:d1:e3:9d:f5:34:f0:
         6b:40:15:a1:c1:38:a9:2a:fa:f3:1f:bf:46:1f:dd:5c:26:e2:
         41:8b:3a:fd:50:3b:28:c7:44:87:d6:57:29:7b:4f:87:62:36:
         6b:20:22:c9:b2:bc:00:da:c1:d0:5e:86:05:9c:30:42:ee:83:
         ad:70:cb:61:0e:94:3b:62:75:74:ed:70:ec:73:4f:95:1e:ec:
         af:cf:1c:d9:49:8b:e3:66:8a:4d:ca:82:12:8c:77:76:a0:7a:
         5c:75:c8:d4:0c:31:76:9c:28:1a:c0:75:e2:90:02:36:af:7c:
         cb:67:b5:e7:1a:cb:02:67:88:59:68:5a:44:51:e2:a5:c0:62:
         83:0f:c4:69:a9:cb:86:69:34:89:ff:ba:1d:25:de:37:e6:00:
         92:d3:16:a6:c4:33:68:2c:be:45:11:48:8d:83:2f:5e:43:07:
         0c:d4:82:92:52:ce:3d:e2:28:32:3b:39:0f:28:10:92:bc:94:
         89:64:dd:58:d8:24:05:97:55:3a:54:73:69:ac:a5:8d:32:c6:
         69:f2:7b:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGEduO/sNstfISAcB/wpCvI6+1/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDAzMDUxNzU1NDNaFw0yNTAzMDQxODAwNDNaMDMxMTAvBgNV
BAMTKDRENDhGQjIwNzE0MUZBQkFCNjM4N0E2NEVFNjUyRjlBNkI5OThGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+7LEINnULGkGjEJLbLfSW6Oz
A2U+OunVTZMcqBeTJGsE43toNv8NSRnfkyntzttut6BpnQ6gq4g1wlirpxfThsU0
G9QRgznex30H+/VRAYjp80R7/Yrda6OMsq1gGOGY0g7y+YZd3mo3+/VlAkYDVAHo
QWP8uFKVfpV2Rg3gFYRyf8FpgSrxzuIzgc9p3GJx9qNyZRiu7/L1vth4m9FE9+a8
sMv3hgU7ngbmEH8tD9UNR4H51m1K1eOt7EXrE35YyWZmcDSMAGRpKhbzEIFAlVva
S3DnqJ5ijAd8FnTmoh8dCCq1QSMcFylYzdMpShaUtL2HImRiOJ31IPdDCSrXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTUj7IHFB+rq2OHpk7mUvmmuZj+YwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzODMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5atTAN
BgkqhkiG9w0BAQsFAAOCAQEAe1+J9pBzGXk6MskoQGz1eKZEuSWctF0afBo5TkDf
/59IAWsS0aQ99VkV64E2zoeg0eOd9TTwa0AVocE4qSr68x+/Rh/dXCbiQYs6/VA7
KMdEh9ZXKXtPh2I2ayAiybK8ANrB0F6GBZwwQu6DrXDLYQ6UO2J1dO1w7HNPlR7s
r88c2UmL42aKTcqCEox3dqB6XHXI1AwxdpwoGsB14pACNq98y2e15xrLAmeIWWha
RFHipcBigw/EaanLhmk0if+6HSXeN+YAktMWpsQzaCy+RRFIjYMvXkMHDNSCklLO
PeIoMjs5DygQkryUiWTdWNgkBZdVOlRzaayljTLGafJ70A==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org