Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138382e302f32322d3234203d3e20323632353839.roa
File:                     3139302e39302e3138382e302f32322d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          cdrWS5XSswq5+k54zNIFNX0hnM2j5Y31JGrRUaTYjUo=
Subject key identifier:   01:B8:53:84:80:45:14:95:FC:8B:C9:DD:80:66:98:5D:A0:C2:B3:FD
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       4476F6D712AE189A11C50F5D673D380537F046EA
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138382e302f32322d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:21 +0000
ROA not before:           Tue 04 Feb 2025 18:12:21 +0000
ROA not after:            Tue 03 Feb 2026 18:17:21 +0000
asID:                     262589
IP address blocks:        190.90.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:76:f6:d7:12:ae:18:9a:11:c5:0f:5d:67:3d:38:05:37:f0:46:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:21 2025 GMT
            Not After : Feb  3 18:17:21 2026 GMT
        Subject: CN=01B8538480451495FC8BC9DD8066985DA0C2B3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:30:ff:4f:4e:74:35:77:ec:77:27:68:c7:
                    c1:8a:12:08:4b:75:3d:4b:ef:2d:a1:f2:5d:f6:ab:
                    64:26:91:7f:ea:fc:f5:2a:7c:a6:17:68:eb:49:e4:
                    97:aa:31:e4:c2:a5:73:ae:e4:7a:36:b0:89:c1:c0:
                    3b:be:81:8f:61:31:8b:e1:1a:91:9f:78:98:76:ae:
                    dc:cc:73:ff:1d:04:1b:ef:9a:2d:db:30:da:a2:45:
                    69:3d:6c:bf:6d:c4:35:c1:24:10:dd:71:95:50:6c:
                    3e:8c:0e:6b:e6:96:98:ad:76:0e:d3:cb:e1:43:9f:
                    97:a2:25:08:87:0e:eb:87:ea:1f:1a:d6:3b:2b:38:
                    79:21:01:0f:16:62:c6:50:d4:46:7c:f6:32:d6:ff:
                    a0:63:f9:16:4b:8a:9c:2b:6c:32:e0:c9:57:ac:f1:
                    c7:be:87:b9:16:24:54:81:3e:35:ae:81:00:6c:24:
                    aa:ae:bb:06:50:17:83:26:0f:8a:3d:f4:97:b1:d9:
                    6a:5e:57:73:6a:c2:59:d5:a5:0b:fa:0e:65:9c:35:
                    85:a2:7c:22:81:09:b6:db:c5:73:8e:95:09:be:13:
                    44:f3:e5:4c:dd:06:15:e9:88:d0:71:69:e0:f0:78:
                    36:0e:47:73:31:41:11:df:e2:22:9e:d7:63:9c:9a:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:53:84:80:45:14:95:FC:8B:C9:DD:80:66:98:5D:A0:C2:B3:FD
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138382e302f32322d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:1d:08:75:4e:19:f3:93:a2:73:48:b2:a6:e2:c5:01:45:9b:
         f9:f9:1b:2d:b5:2a:50:f9:b9:1a:e1:61:1a:a6:ff:8b:9c:16:
         66:ac:31:8a:2c:f2:e1:b0:36:8b:15:b2:ab:56:2e:30:8b:c0:
         ba:e5:57:b5:b7:67:44:f7:d6:81:20:58:59:37:72:f7:9e:e2:
         77:a1:37:f6:df:49:7b:ea:3e:ad:aa:21:90:d3:6e:e5:0c:f3:
         ea:3c:77:8f:64:d8:56:aa:3b:9f:1b:42:63:49:99:2f:c6:5b:
         2f:59:39:14:64:44:d3:24:e9:fa:c6:db:77:5b:ae:2f:fc:bd:
         db:d7:5f:ce:85:0a:1b:be:b3:b9:46:04:68:a0:01:67:49:c5:
         cd:c4:cb:e2:f9:fb:5a:b0:06:c5:8c:51:e8:2f:4f:3f:85:3c:
         0d:3a:07:27:ba:a6:a8:bb:a9:3a:52:5a:50:90:11:e5:9c:9f:
         f3:42:b0:a4:59:0f:7e:ef:8e:2d:91:3f:a6:f5:e7:dc:88:1d:
         d6:b3:86:e9:0c:49:11:be:7a:bf:25:4f:4f:66:ee:f2:b5:67:
         b7:35:91:7d:40:81:22:d0:b2:3c:4e:3e:bf:20:6e:06:99:11:
         13:d7:84:50:d0:c8:b0:5e:17:bd:d4:46:c5:8a:71:a3:dc:61:
         cf:20:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:37 2025 by rpki-client