Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32332d3234203d3e203236363139.roa
File:                     3139302e39302e3138322e302f32332d3234203d3e203236363139.roa (raw, json)
Hash identifier:          aLgUM7QH4Px1fjDcq36gFuhl9RjBlPRnHQdr61VIefE=
Subject key identifier:   CD:D5:88:53:FE:74:14:DE:CD:C8:2E:62:2D:05:87:0B:4D:56:27:00
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2E3EC55EE573D38DA6D0A1364632A51335F3747B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32332d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     26619
IP address blocks:        190.90.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3e:c5:5e:e5:73:d3:8d:a6:d0:a1:36:46:32:a5:13:35:f3:74:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=CDD58853FE7414DECDC82E622D05870B4D562700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:c1:98:2a:f4:76:33:3c:b3:be:32:17:11:
                    84:ff:19:b7:e3:21:7d:69:88:90:2f:cb:1f:f5:ac:
                    17:40:b6:d0:43:19:f1:9e:95:6b:3b:fc:c4:ed:c5:
                    e8:b6:e6:47:bb:18:0b:45:9c:b2:48:62:01:77:c5:
                    f5:c6:f6:81:69:c3:d8:27:d9:83:03:a0:10:2f:0b:
                    d1:31:6c:08:7b:8d:5c:5b:2e:94:e7:48:5e:72:85:
                    19:41:dd:bf:05:8c:51:76:25:4c:9d:9c:86:36:7e:
                    c9:21:2a:c0:5d:29:5c:1d:ea:b7:15:09:16:a2:06:
                    8c:02:d9:a0:85:19:1d:7e:12:d4:39:62:de:90:63:
                    8c:b3:6f:81:19:b5:b3:73:53:1f:76:d4:9b:9d:91:
                    1d:7b:59:0d:d5:66:1e:fb:08:a5:fc:7e:d9:b6:4f:
                    53:0e:fc:dd:f6:f7:fd:17:2a:be:f1:04:25:56:08:
                    6b:67:1f:01:9f:31:1a:86:3d:3c:eb:4f:e3:28:6c:
                    76:07:ca:1b:64:f6:88:83:0a:ea:57:80:05:7a:88:
                    a1:ef:0e:34:7d:5e:71:ee:dc:d4:0a:45:c2:70:80:
                    e6:69:5f:ea:fe:83:18:2f:53:20:d6:f5:d2:8c:b6:
                    9e:7b:48:06:49:78:cd:05:a9:bd:8a:d8:ac:e3:81:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D5:88:53:FE:74:14:DE:CD:C8:2E:62:2D:05:87:0B:4D:56:27:00
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32332d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:48:5b:d0:15:93:d2:46:a4:40:07:b0:22:c3:c4:4b:a5:dc:
         b4:1b:2a:14:c6:28:3d:f5:00:a7:2d:82:8d:2b:b6:5f:e1:e9:
         87:c8:5b:fb:cd:d8:36:ce:d7:e6:8f:55:b4:65:60:57:ee:e2:
         44:5f:32:1f:9b:81:14:49:cb:6b:36:96:d3:09:5a:a8:65:1b:
         0f:7e:8a:13:97:99:69:5f:9c:e4:a3:9a:d6:24:87:ef:e7:c3:
         16:ac:88:3f:5a:d8:09:03:4c:88:b4:be:9c:85:25:02:f1:f5:
         a3:7a:45:29:6b:47:59:dd:a8:82:e2:41:e6:6e:46:73:4c:78:
         e4:8a:a2:f1:85:45:a5:90:56:42:18:9c:f9:24:e5:99:49:80:
         44:bf:8e:4d:b7:81:be:de:67:56:e8:47:8c:9a:df:f8:03:de:
         42:2d:34:cc:72:3c:f0:9a:80:91:6f:6e:d8:95:44:02:32:b8:
         6c:d7:e1:a8:69:dc:39:4d:22:b2:a5:49:42:09:45:3f:9d:32:
         42:d6:ec:87:ed:47:af:45:3f:01:76:4f:9e:b7:a3:48:76:8f:
         e8:64:77:22:8d:58:3a:e1:65:af:5f:c8:8b:dc:02:17:fb:14:
         58:b7:5a:67:a0:88:c2:45:bf:6b:02:75:37:16:24:9f:3d:13:
         bd:e1:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org