Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa
File:                     3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          XLvNQVCI6rre12GQez+8Z0aDd90a9LHQbhjA8jZRKa8=
Subject key identifier:   C8:8C:BC:2D:E0:86:93:01:67:E5:C4:47:C9:52:EF:88:EA:89:70:56
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2CAAA33748DEC0C716198186F63AEDF5B3C0F5D2
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     262589
IP address blocks:        190.90.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:aa:a3:37:48:de:c0:c7:16:19:81:86:f6:3a:ed:f5:b3:c0:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=C88CBC2DE086930167E5C447C952EF88EA897056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:14:30:5d:71:b3:d2:f5:a7:5e:9e:ec:e5:
                    d4:91:0c:e4:22:ac:15:0c:7b:6a:36:7b:0f:18:7e:
                    98:d7:5d:f1:da:6d:93:b7:b1:e1:cf:6c:4d:51:da:
                    2d:3e:71:32:da:43:d1:4b:cb:3e:79:e8:9a:85:ad:
                    17:a0:68:3d:e1:98:59:82:37:03:41:8c:55:cd:aa:
                    2d:17:5c:d3:e1:46:cd:62:e9:99:3f:b0:06:3a:aa:
                    b0:50:6e:f6:48:7a:1b:de:0a:68:b6:cb:a0:43:31:
                    ba:75:69:f8:ed:ac:6b:7d:f4:c9:de:dc:bb:56:42:
                    d8:c4:f3:03:bb:b1:a1:3a:be:d9:46:64:86:8e:d7:
                    29:0c:9f:3b:66:be:07:f4:70:21:a8:0d:e9:51:ee:
                    13:07:a7:b4:1d:06:ef:c4:11:ea:33:0f:ca:f6:8e:
                    ae:0d:8a:98:89:36:fa:13:69:97:a6:be:86:9f:d9:
                    c3:31:2b:1c:54:9a:b0:3b:b6:22:4c:c5:aa:82:b0:
                    eb:6c:a3:82:2f:a9:0e:01:54:b3:e1:72:1b:aa:f0:
                    94:3e:68:06:1f:44:7d:8a:ec:30:9a:a8:4b:98:24:
                    52:8c:9d:ee:17:05:64:30:77:29:8d:0b:96:b7:ba:
                    1d:23:23:e5:45:15:4b:e7:6e:84:d5:53:77:1c:a5:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:BC:2D:E0:86:93:01:67:E5:C4:47:C9:52:EF:88:EA:89:70:56
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:d4:a4:24:38:73:a5:7e:c7:19:f6:91:3d:44:ce:a6:07:
         e8:68:8a:cd:fc:0f:29:ac:c1:f3:fc:87:3b:43:b5:d4:b2:ac:
         3d:f3:79:f2:f6:84:14:60:28:da:32:0a:6e:bc:d5:2f:fe:c1:
         de:91:9e:53:9e:23:30:41:26:73:b3:fd:a3:86:11:2f:0f:d3:
         62:08:67:69:fc:88:0a:39:0c:7e:c6:b6:1f:78:56:77:99:76:
         36:92:82:5c:f9:90:81:c3:21:f0:fb:d4:56:39:8d:d1:71:fe:
         f1:1e:2c:11:d5:41:4c:99:88:b5:76:df:b1:76:dd:f2:55:b0:
         92:94:6a:b6:87:7c:a1:ac:61:db:16:9a:4a:a9:81:cc:5b:ce:
         94:e7:5c:90:ee:8d:91:d7:25:60:71:54:5b:b7:2e:7a:a7:ce:
         b3:71:e1:39:50:a1:ba:65:0d:c9:85:ab:6d:e3:e3:d4:28:19:
         a4:73:e5:89:21:2d:5e:1a:7d:05:45:80:ee:a8:3f:78:e3:5a:
         1b:46:a5:c6:85:19:e7:d0:e6:67:07:5c:c9:e3:55:1b:52:d2:
         24:b7:8d:64:d9:b5:50:43:e7:f9:c1:f0:62:73:04:2f:c7:2a:
         8c:90:22:0d:85:9f:cc:5a:84:b3:e9:ab:4f:75:b0:8c:19:b3:
         9a:2b:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:34 2024 by rpki-client on console-ams.rpki-client.org