Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa
File:                     3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa (raw, json)
Hash identifier:          GUs93IzRg4GadsTtLcXPfWDsKxx3LKeuINQ4e6hsmmU=
Subject key identifier:   CD:7C:FA:9A:B1:BA:00:7A:44:21:E1:18:94:43:22:34:F2:85:AC:7A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       142F652A9BCA11DFB125191974E49956439B682B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa
Signing time:             Mon 15 Jul 2024 15:10:00 +0000
ROA not before:           Mon 15 Jul 2024 15:05:00 +0000
ROA not after:            Mon 14 Jul 2025 15:10:00 +0000
asID:                     266832
IP address blocks:        190.90.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2f:65:2a:9b:ca:11:df:b1:25:19:19:74:e4:99:56:43:9b:68:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jul 15 15:05:00 2024 GMT
            Not After : Jul 14 15:10:00 2025 GMT
        Subject: CN=CD7CFA9AB1BA007A4421E11894432234F285AC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:66:13:fd:92:0e:23:02:de:f9:25:df:28:
                    d3:dd:84:10:13:d9:af:57:9b:66:8e:8d:b2:bf:46:
                    4e:b4:9f:4f:4a:3f:72:82:b3:b0:34:a2:49:27:c1:
                    c6:dc:2e:2a:e0:c2:a0:dd:77:1c:42:5a:d3:1c:1f:
                    41:6e:af:b2:37:3c:64:80:2d:cd:f8:f0:fd:a4:f6:
                    6a:1e:c3:43:6d:e6:3b:0e:ad:8b:55:25:32:a4:a4:
                    22:1b:e5:db:4e:a9:71:59:f6:82:35:82:91:d5:19:
                    20:94:d0:66:e4:60:7c:8a:bb:3b:22:d9:79:79:49:
                    de:ce:ca:0c:cd:c4:12:cf:34:29:55:95:07:ef:b4:
                    da:7c:ee:ed:c1:20:f4:80:9f:b0:61:4a:0b:44:6e:
                    aa:3f:96:af:fa:5f:e4:1a:22:34:a4:70:4b:69:2e:
                    0c:24:cd:36:6b:bb:dd:44:ac:0f:9e:cf:bd:d3:1f:
                    6a:29:dd:3b:17:44:7c:7d:6a:9c:66:46:f7:c9:98:
                    fc:9b:8c:b1:1c:e3:95:32:26:47:d8:ab:70:99:a0:
                    de:95:ef:35:b3:a9:88:ca:7f:47:6b:2a:75:e4:d1:
                    d8:0a:ef:08:ba:dc:aa:02:cd:48:50:6b:21:ec:de:
                    4f:30:60:8a:e7:94:60:43:d5:7a:f2:91:80:78:67:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:FA:9A:B1:BA:00:7A:44:21:E1:18:94:43:22:34:F2:85:AC:7A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:58:a3:72:5c:f8:34:2f:ae:9c:b9:86:af:ed:6c:51:fa:
         9a:c2:48:67:9f:f1:8c:4d:e7:d1:86:c0:4b:2e:ce:a4:eb:dc:
         d2:b3:7b:36:75:16:04:c4:3d:ea:fc:f8:82:88:2e:d7:47:00:
         2f:c6:e9:be:60:a8:6d:d8:7f:6d:7b:bc:ae:19:8b:5c:52:22:
         34:44:0a:ef:a7:7d:c6:39:9e:94:c1:74:91:d9:65:da:3f:37:
         10:9a:78:96:29:5a:33:07:f9:6c:54:99:e3:5c:ce:1d:18:eb:
         94:6f:21:75:2b:43:bc:25:1d:b3:71:7c:d0:e3:1e:00:17:a6:
         8b:15:92:be:71:59:0a:10:6d:c9:db:20:cc:c6:45:ad:a2:28:
         4e:94:4d:2b:89:f2:f8:cd:4d:42:b5:51:a9:34:29:a4:00:11:
         eb:97:04:6a:e8:2c:5e:ee:92:a2:7e:02:e6:5d:d7:d6:ab:3a:
         88:11:3d:39:b7:b3:c6:2a:3d:bc:c1:c1:7c:8e:e6:a4:ba:5c:
         95:75:8d:d3:12:e4:d1:ff:ae:e3:86:d3:f2:de:dc:7f:f8:b5:
         1c:e0:6d:15:dd:41:9a:82:67:10:84:b7:25:09:0d:cd:be:96:
         39:3e:af:6f:5b:ce:ca:a4:21:40:43:bc:2b:ce:47:cd:b4:a7:
         58:2b:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:47:19 2024 by rpki-client on console-ams.rpki-client.org