Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e203138363738.roa
File:                     3139302e39302e3139322e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          p+C1bTIlkGe6gQjCnyc9lkyzKBABeGvuKVgEdCNvJvI=
Subject key identifier:   74:4A:07:44:DE:82:19:E7:35:C7:41:D7:A7:FC:BF:54:D7:E0:36:46
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       799CD2B6275E1743DCBA42B5CA50C53B01ADB8F4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e203138363738.roa
Signing time:             Wed 05 Mar 2025 16:15:00 +0000
ROA not before:           Wed 05 Mar 2025 16:10:00 +0000
ROA not after:            Wed 04 Mar 2026 16:15:00 +0000
asID:                     18678
IP address blocks:        190.90.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9c:d2:b6:27:5e:17:43:dc:ba:42:b5:ca:50:c5:3b:01:ad:b8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 16:10:00 2025 GMT
            Not After : Mar  4 16:15:00 2026 GMT
        Subject: CN=744A0744DE8219E735C741D7A7FCBF54D7E03646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:27:88:2c:f8:a6:6a:27:ba:0f:b3:ac:53:
                    73:87:42:44:a5:87:03:a5:44:fd:1c:85:0a:f0:79:
                    67:68:8f:f4:f2:01:57:61:fd:b5:3e:16:e8:e1:f9:
                    75:b1:b7:d2:54:d5:0a:82:0f:b1:7a:62:20:c3:b0:
                    80:e4:d7:f4:72:f1:73:25:cd:0a:b2:18:66:63:52:
                    2b:7e:72:8d:de:4b:9c:bb:bb:40:0b:19:7d:d5:3b:
                    90:05:f9:d4:3d:f1:b7:a8:96:34:2e:a0:67:28:4d:
                    88:e1:75:71:56:aa:86:dd:2b:b7:7f:6c:75:c3:e5:
                    04:0c:90:81:69:b2:d1:16:da:0b:e8:3e:5f:7c:7f:
                    f5:cd:01:4d:72:d4:06:c0:e9:18:04:fa:15:ff:a2:
                    6b:cf:4f:ee:a0:d1:f1:1a:f8:4d:e6:37:9d:e7:a5:
                    14:af:79:05:17:1b:19:ba:5f:1b:d9:b1:6a:63:66:
                    d6:d5:92:aa:9d:1f:09:5a:4a:c1:b1:1d:16:f6:9a:
                    b6:1d:b1:a5:78:e6:a4:96:20:da:42:22:d8:1a:6d:
                    29:04:59:09:0b:22:ef:5c:5c:da:65:07:a1:7b:36:
                    25:5c:b4:f3:57:fa:e9:12:5e:fa:7f:1a:f3:db:c2:
                    bb:b2:f1:c0:d5:14:b4:8c:4e:2f:86:5b:c0:fb:e8:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:07:44:DE:82:19:E7:35:C7:41:D7:A7:FC:BF:54:D7:E0:36:46
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:ff:48:10:26:c6:55:93:01:6c:ba:3b:28:d1:2d:f3:91:
         db:d3:03:85:cf:7a:4f:49:7c:4a:3e:d2:c6:62:49:40:70:73:
         f8:9d:f0:2c:d5:9d:ce:8d:b9:08:74:dd:60:ef:33:73:0e:8f:
         1d:29:df:42:06:4b:67:bb:e3:ce:51:b7:22:22:c5:51:a5:63:
         80:1d:1b:84:34:bf:12:0f:cc:83:5e:0a:a4:5d:e3:69:59:48:
         fa:55:73:c7:27:7d:9e:82:49:2c:d1:3a:9b:d3:a8:0f:27:ce:
         b7:50:a1:a6:c2:7b:86:e0:ed:76:b6:19:b6:30:2b:4d:32:ba:
         56:ee:ac:50:be:fb:58:99:7e:57:f9:7c:b0:cb:e7:1e:ff:ec:
         91:fa:9c:05:c1:c0:7d:42:61:80:7c:63:ce:5d:5d:10:4f:66:
         63:29:4e:ea:68:0c:88:6b:f7:f4:cf:49:e4:8a:f6:db:b5:e2:
         94:57:1d:a7:9c:1b:c0:66:5c:c9:b9:b0:62:7e:9d:7f:07:6d:
         ea:0c:ca:aa:65:29:50:4e:89:99:8b:b3:f7:97:c5:db:73:39:
         de:c5:42:79:af:66:7f:86:54:51:44:d4:d2:49:06:93:81:07:
         b9:40:7d:dc:03:f4:0b:47:c1:01:74:8c:cd:d5:bf:02:48:fb:
         2e:14:67:a7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeZzStideF0PcukK1ylDFOwGtuPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMDUxNjEwMDBaFw0yNjAzMDQxNjE1MDBaMDMxMTAvBgNV
BAMTKDc0NEEwNzQ0REU4MjE5RTczNUM3NDFEN0E3RkNCRjU0RDdFMDM2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5CeILPimaie6D7OsU3OHQkSl
hwOlRP0chQrweWdoj/TyAVdh/bU+Fujh+XWxt9JU1QqCD7F6YiDDsIDk1/Ry8XMl
zQqyGGZjUit+co3eS5y7u0ALGX3VO5AF+dQ98beoljQuoGcoTYjhdXFWqobdK7d/
bHXD5QQMkIFpstEW2gvoPl98f/XNAU1y1AbA6RgE+hX/omvPT+6g0fEa+E3mN53n
pRSveQUXGxm6XxvZsWpjZtbVkqqdHwlaSsGxHRb2mrYdsaV45qSWINpCItgabSkE
WQkLIu9cXNplB6F7NiVctPNX+ukSXvp/GvPbwruy8cDVFLSMTi+GW8D76HRtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdEoHRN6CGec1x0HXp/y/VNfgNkYwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzOTMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL5awDAN
BgkqhkiG9w0BAQsFAAOCAQEAfsT/SBAmxlWTAWy6OyjRLfOR29MDhc96T0l8Sj7S
xmJJQHBz+J3wLNWdzo25CHTdYO8zcw6PHSnfQgZLZ7vjzlG3IiLFUaVjgB0bhDS/
Eg/Mg14KpF3jaVlI+lVzxyd9noJJLNE6m9OoDyfOt1ChpsJ7huDtdrYZtjArTTK6
Vu6sUL77WJl+V/l8sMvnHv/skfqcBcHAfUJhgHxjzl1dEE9mYylO6mgMiGv39M9J
5Ir227XilFcdp5wbwGZcybmwYn6dfwdt6gzKqmUpUE6JmYuz95fF23M53sVCea9m
f4ZUUUTU0kkGk4EHuUB93AP0C0fBAXSMzdW/Akj7LhRnpw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:36:53 2025 by rpki-client