Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138382e302f32322d3234203d3e203138363738.roa
File:                     3139302e39302e3138382e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          HRXe6OiX+JmxxGpwjWBAnWFCVT7+rtIwMryXHU7Yta0=
Subject key identifier:   D4:07:DF:FE:F2:AF:D5:B0:19:6B:8C:8A:96:B4:B1:0E:20:87:21:6C
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7D4F7DF8D33CD90932C7A65D8F4EAE939850D2E9
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138382e302f32322d3234203d3e203138363738.roa
Signing time:             Wed 05 Mar 2025 15:55:00 +0000
ROA not before:           Wed 05 Mar 2025 15:50:00 +0000
ROA not after:            Wed 04 Mar 2026 15:55:00 +0000
asID:                     18678
IP address blocks:        190.90.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4f:7d:f8:d3:3c:d9:09:32:c7:a6:5d:8f:4e:ae:93:98:50:d2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 15:50:00 2025 GMT
            Not After : Mar  4 15:55:00 2026 GMT
        Subject: CN=D407DFFEF2AFD5B0196B8C8A96B4B10E2087216C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:b9:3c:f8:3d:20:d2:09:a6:0e:33:65:e1:
                    32:ec:01:3a:2a:fd:35:4d:44:46:f8:19:99:53:e0:
                    2f:ee:5f:3e:e2:76:1c:73:56:13:c7:72:3c:0a:7a:
                    eb:c1:81:c9:14:32:ec:62:23:ce:1b:d0:68:98:7f:
                    54:29:a4:37:8f:60:a9:f7:b1:07:aa:10:47:d9:3e:
                    50:9d:b4:73:82:c9:78:ef:08:a6:60:6c:61:54:66:
                    db:cf:08:8b:26:28:c8:72:ce:f1:1d:4b:ac:c0:f6:
                    8a:78:22:65:ad:09:5a:79:a6:53:3b:67:cc:d8:b1:
                    48:16:44:68:73:ff:40:ef:88:c1:98:6f:04:db:16:
                    eb:dc:c1:59:a9:a4:7d:8b:7e:ed:0d:37:24:42:af:
                    db:ae:68:02:64:41:03:21:58:25:41:dc:b7:db:9b:
                    59:ef:bb:3a:d3:53:58:b7:7b:7c:a0:9d:ac:80:32:
                    d3:a1:48:af:92:49:ee:42:5b:3e:cf:1e:f8:c8:b6:
                    01:e9:9b:22:d9:05:f7:0f:8f:1a:8c:8d:a7:e7:57:
                    7a:1c:63:74:9f:79:4c:ba:0f:b2:c4:83:a7:c2:5d:
                    7f:8f:ea:96:98:6b:ea:36:4a:dd:b5:03:d3:09:67:
                    ed:ec:e4:9f:43:3a:f4:e8:e6:82:f1:19:8f:10:16:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:DF:FE:F2:AF:D5:B0:19:6B:8C:8A:96:B4:B1:0E:20:87:21:6C
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138382e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:55:8b:37:96:65:33:3b:f5:c6:a4:24:65:90:14:5a:42:
         58:48:3f:27:cd:ef:65:fc:51:52:1d:28:b8:b6:a6:84:57:99:
         1a:5f:22:57:f9:46:7e:f9:9f:c6:6b:fb:a2:16:b4:20:b7:b1:
         57:38:3c:4d:f4:b2:78:9e:8a:83:01:08:f6:52:1e:1b:bc:b3:
         fc:85:c7:6c:cd:8d:60:33:59:6b:66:69:e2:fb:c3:ec:a5:ee:
         8c:dd:ee:c4:d6:7e:18:3f:8f:c0:4f:72:31:66:9c:5a:0c:bc:
         4c:a3:2b:02:af:de:ad:aa:c0:e3:d4:f1:fe:c0:4b:ef:34:a2:
         05:7a:73:ed:0d:1b:82:04:2b:1c:ef:cb:ac:51:63:38:c9:92:
         1e:98:78:0b:32:31:45:2f:b0:f9:89:44:ba:79:00:b2:42:44:
         6b:da:01:0c:de:b5:14:7f:6a:a3:d3:b4:4c:41:18:40:76:1e:
         6c:a6:b0:10:2e:a2:fe:98:b3:3b:f7:22:26:76:f8:ac:e5:8c:
         14:5f:19:75:18:52:9a:d5:dd:2d:49:c0:8e:99:5d:c0:d8:5d:
         45:c7:38:74:3c:1e:ac:b0:9d:a5:6d:cc:4b:67:b8:71:f8:7e:
         9d:d3:a7:e8:32:c8:eb:97:53:e2:27:4f:4a:1f:e6:67:bf:23:
         25:6e:bd:bf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfU99+NM82Qkyx6Zdj06uk5hQ0ukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMDUxNTUwMDBaFw0yNjAzMDQxNTU1MDBaMDMxMTAvBgNV
BAMTKEQ0MDdERkZFRjJBRkQ1QjAxOTZCOEM4QTk2QjRCMTBFMjA4NzIxNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOurk8+D0g0gmmDjNl4TLsAToq
/TVNREb4GZlT4C/uXz7idhxzVhPHcjwKeuvBgckUMuxiI84b0GiYf1QppDePYKn3
sQeqEEfZPlCdtHOCyXjvCKZgbGFUZtvPCIsmKMhyzvEdS6zA9op4ImWtCVp5plM7
Z8zYsUgWRGhz/0DviMGYbwTbFuvcwVmppH2Lfu0NNyRCr9uuaAJkQQMhWCVB3Lfb
m1nvuzrTU1i3e3ygnayAMtOhSK+SSe5CWz7PHvjItgHpmyLZBfcPjxqMjafnV3oc
Y3SfeUy6D7LEg6fCXX+P6paYa+o2St21A9MJZ+3s5J9DOvTo5oLxGY8QFmcPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1Aff/vKv1bAZa4yKlrSxDiCHIWwwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5avDAN
BgkqhkiG9w0BAQsFAAOCAQEANR1VizeWZTM79cakJGWQFFpCWEg/J83vZfxRUh0o
uLamhFeZGl8iV/lGfvmfxmv7oha0ILexVzg8TfSyeJ6KgwEI9lIeG7yz/IXHbM2N
YDNZa2Zp4vvD7KXujN3uxNZ+GD+PwE9yMWacWgy8TKMrAq/erarA49Tx/sBL7zSi
BXpz7Q0bggQrHO/LrFFjOMmSHph4CzIxRS+w+YlEunkAskJEa9oBDN61FH9qo9O0
TEEYQHYebKawEC6i/pizO/ciJnb4rOWMFF8ZdRhSmtXdLUnAjpldwNhdRcc4dDwe
rLCdpW3MS2e4cfh+ndOn6DLI65dT4idPSh/mZ78jJW69vw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:39 2025 by rpki-client