Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138342e302f32332d3234203d3e203236363139.roa
File:                     3139302e39302e3138342e302f32332d3234203d3e203236363139.roa (raw, json)
Hash identifier:          jrWGVGAr5+X4Amj+4+Kuxwb5id/c96V9utccJuTNvhk=
Subject key identifier:   92:5D:4D:30:0E:21:78:4D:EF:CE:0F:16:F9:57:94:AF:0C:B0:1C:AE
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       44F6365070FBAF0CC453888C0FA3DDF3F2176B62
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138342e302f32332d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:46 +0000
ROA not before:           Tue 05 Mar 2024 17:55:46 +0000
ROA not after:            Tue 04 Mar 2025 18:00:46 +0000
asID:                     26619
IP address blocks:        190.90.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f6:36:50:70:fb:af:0c:c4:53:88:8c:0f:a3:dd:f3:f2:17:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:46 2024 GMT
            Not After : Mar  4 18:00:46 2025 GMT
        Subject: CN=925D4D300E21784DEFCE0F16F95794AF0CB01CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:21:ff:ec:14:0e:d4:12:4d:e1:c1:0b:bb:
                    0a:b1:f1:45:e0:69:df:23:21:f9:30:ad:27:23:b3:
                    d8:aa:2b:4f:f3:73:22:7e:9c:ec:e6:e8:f4:ac:e8:
                    42:f5:8f:de:3b:40:a0:54:81:8d:64:d6:13:fc:49:
                    23:4b:a7:ad:f7:b1:52:bc:21:d5:09:f5:86:66:c8:
                    52:95:f2:25:a3:da:06:55:f9:26:d1:23:bc:11:22:
                    7f:77:37:9a:f8:32:7a:c9:18:8a:86:44:39:70:ae:
                    6a:85:bd:c0:f0:cf:20:7e:b0:7b:14:2f:21:d7:27:
                    70:c3:19:a3:87:ba:8f:03:61:3c:a6:9d:f3:12:92:
                    db:b7:c2:84:4a:99:87:4c:9f:8a:0f:b9:c2:0e:74:
                    af:7b:01:55:5f:0e:d9:61:17:22:d9:58:85:1a:23:
                    7a:fc:20:73:d4:d6:8b:32:94:bd:70:4f:88:f2:53:
                    45:a1:e3:90:a6:51:2b:fb:e3:18:d0:b7:01:7f:63:
                    35:1e:72:89:56:46:ba:b1:3f:bd:3c:b7:f7:3b:d5:
                    32:03:28:4b:82:a3:88:c7:08:c2:61:6b:6d:1f:ef:
                    83:b8:03:e9:8a:1f:36:5c:39:16:21:49:6c:60:6f:
                    81:54:1e:3e:52:ec:41:ff:fd:42:e1:48:37:8a:72:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5D:4D:30:0E:21:78:4D:EF:CE:0F:16:F9:57:94:AF:0C:B0:1C:AE
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138342e302f32332d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:81:39:5d:14:93:01:5e:82:98:96:af:bb:46:8a:5f:d9:
         8c:da:3f:58:7a:81:4d:1f:e3:9b:46:4d:8f:73:cf:7e:fe:dc:
         37:93:87:a2:0d:2a:44:e0:1d:dc:71:92:ce:50:c3:e0:41:05:
         13:bb:6e:07:d4:6c:0c:05:5c:b2:1a:bf:57:c1:12:01:96:ec:
         d0:3d:97:9a:77:c0:4b:92:0e:c5:51:7a:ec:b5:a9:78:df:80:
         a2:57:fa:34:5f:a3:cb:98:64:12:12:23:4d:d4:a3:81:5b:bb:
         b6:24:39:f3:87:ec:07:c9:2a:13:dd:46:25:ff:44:df:fa:b5:
         5f:dd:5f:8b:1b:1d:1a:70:ac:22:b1:3c:57:f6:8b:ec:0c:8e:
         7c:6d:9e:e9:4b:cc:2f:90:23:bb:08:09:97:72:62:89:b8:f8:
         41:50:4e:1a:8f:e9:f8:e0:2a:90:5c:ce:26:61:a7:63:4a:c1:
         98:91:75:6f:36:d8:69:ec:f6:59:05:90:a5:2b:01:55:81:6c:
         17:45:1e:8a:0e:2c:5e:50:fd:32:0d:7d:87:3e:05:17:58:bd:
         d1:d6:24:ab:df:6d:e8:79:89:88:ad:82:4d:fb:de:15:89:e4:
         0b:2f:6a:c2:2f:27:f3:db:03:95:18:59:b1:32:ea:9b:ee:88:
         5f:1b:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org