Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139362e302f32332d3234203d3e203237383337.roa
File:                     3139302e39302e3139362e302f32332d3234203d3e203237383337.roa (raw, json)
Hash identifier:          WGMIja0z8YhSH1c6yDQJ6ceP++JnL2g0UcN2SDWXAVs=
Subject key identifier:   69:21:95:63:E8:4E:2E:95:44:7E:1D:13:BA:F8:8A:90:07:80:CC:6E
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3E3BA65C0C266616DBCDBD0DF142151195537C4E
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139362e302f32332d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 18:00:31 +0000
ROA not before:           Tue 05 Mar 2024 17:55:31 +0000
ROA not after:            Tue 04 Mar 2025 18:00:31 +0000
asID:                     27837
IP address blocks:        190.90.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3b:a6:5c:0c:26:66:16:db:cd:bd:0d:f1:42:15:11:95:53:7c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:31 2024 GMT
            Not After : Mar  4 18:00:31 2025 GMT
        Subject: CN=69219563E84E2E95447E1D13BAF88A900780CC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:fb:3d:5b:9e:52:cd:86:0d:1d:5c:5b:34:
                    ac:b8:37:bc:76:96:0d:07:84:5e:37:f7:9c:2f:09:
                    cb:aa:38:39:b9:79:d3:a6:46:98:09:24:23:be:85:
                    4a:2d:a7:86:5b:7e:0a:e2:89:3f:e3:0b:aa:9c:ff:
                    23:e3:bf:60:88:dd:79:34:e1:21:d7:3a:7c:a0:b4:
                    eb:8a:5f:94:3f:07:8a:a9:6d:e2:39:0c:ed:89:a7:
                    cc:a2:7a:63:57:74:23:6d:9c:cf:ee:c0:7d:0f:bd:
                    63:bb:dc:2c:d3:82:d6:a5:8a:29:fd:89:dc:b6:f5:
                    b2:e9:33:0d:2e:ff:de:e0:77:ff:fc:1e:e4:11:26:
                    fa:d2:ed:f5:78:ed:c5:66:16:f8:85:74:8f:48:ed:
                    b2:05:49:04:9a:59:aa:1f:de:12:31:c0:68:5f:ba:
                    d7:c5:42:22:ce:d8:67:2a:b2:d9:fd:e8:6c:dc:b9:
                    03:7a:fc:10:c4:81:8d:a2:6f:9a:81:88:4d:42:c0:
                    a6:0b:18:3c:3c:0b:34:77:38:0b:c6:26:d7:a2:3d:
                    64:90:ff:1b:b1:60:a9:b4:b9:1d:b0:82:73:71:31:
                    94:0a:5d:88:83:76:30:e0:de:c3:d4:2a:d2:50:e9:
                    c9:50:e0:25:66:04:a9:ab:5e:c2:01:f2:72:ed:52:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:95:63:E8:4E:2E:95:44:7E:1D:13:BA:F8:8A:90:07:80:CC:6E
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139362e302f32332d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:18:07:88:d9:fe:e6:f1:88:5c:ba:23:d8:04:0c:3a:ca:
         0c:2b:b8:7a:b0:e9:af:96:51:b4:d8:a8:09:15:79:89:85:72:
         47:96:0d:e8:b0:64:43:03:a9:5a:84:cd:47:33:24:2e:01:b4:
         33:35:3e:6f:42:f2:78:08:27:60:90:b1:eb:c4:ee:50:26:71:
         48:b1:ab:2b:90:20:86:fa:71:dc:03:6a:8c:33:84:d9:3f:f0:
         3c:12:19:0e:36:1c:08:58:f7:b3:95:ed:bf:db:79:b5:26:04:
         2e:11:ba:9d:80:79:3b:1e:32:40:91:00:96:a6:e4:63:e8:d6:
         ee:32:46:de:ac:de:ee:9f:af:c6:fb:83:99:73:58:84:cf:bd:
         41:de:b4:28:51:f0:f4:16:e9:c4:97:df:85:9a:1b:7c:d6:08:
         42:ed:89:88:10:00:09:de:42:8e:1b:f2:00:36:90:04:e5:52:
         a1:8b:81:e0:9a:85:40:d0:71:9e:16:57:2d:28:50:18:20:63:
         bf:1d:12:df:32:11:a0:cf:d2:94:89:4d:a0:db:5e:b6:1b:8b:
         8b:f0:4d:eb:e8:53:84:a5:ac:1e:5e:a6:ba:2d:8e:ce:74:dd:
         f9:59:6f:9d:9e:d2:c9:f5:11:1e:56:dd:bf:c0:88:9b:63:0b:
         a3:82:b2:8f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPjumXAwmZhbbzb0N8UIVEZVTfE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDAzMDUxNzU1MzFaFw0yNTAzMDQxODAwMzFaMDMxMTAvBgNV
BAMTKDY5MjE5NTYzRTg0RTJFOTU0NDdFMUQxM0JBRjg4QTkwMDc4MENDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vvs9W55SzYYNHVxbNKy4N7x2
lg0HhF4395wvCcuqODm5edOmRpgJJCO+hUotp4ZbfgriiT/jC6qc/yPjv2CI3Xk0
4SHXOnygtOuKX5Q/B4qpbeI5DO2Jp8yiemNXdCNtnM/uwH0PvWO73CzTgtaliin9
idy29bLpMw0u/97gd//8HuQRJvrS7fV47cVmFviFdI9I7bIFSQSaWaof3hIxwGhf
utfFQiLO2Gcqstn96GzcuQN6/BDEgY2ib5qBiE1CwKYLGDw8CzR3OAvGJteiPWSQ
/xuxYKm0uR2wgnNxMZQKXYiDdjDg3sPUKtJQ6clQ4CVmBKmrXsIB8nLtUhfJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaSGVY+hOLpVEfh0TuviKkAeAzG4wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzOTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5axDAN
BgkqhkiG9w0BAQsFAAOCAQEAissYB4jZ/ubxiFy6I9gEDDrKDCu4erDpr5ZRtNio
CRV5iYVyR5YN6LBkQwOpWoTNRzMkLgG0MzU+b0LyeAgnYJCx68TuUCZxSLGrK5Ag
hvpx3ANqjDOE2T/wPBIZDjYcCFj3s5Xtv9t5tSYELhG6nYB5Ox4yQJEAlqbkY+jW
7jJG3qze7p+vxvuDmXNYhM+9Qd60KFHw9BbpxJffhZobfNYIQu2JiBAACd5Cjhvy
ADaQBOVSoYuB4JqFQNBxnhZXLShQGCBjvx0S3zIRoM/SlIlNoNtethuLi/BN6+hT
hKWsHl6mui2OznTd+VlvnZ7SyfURHlbdv8CIm2MLo4Kyjw==
-----END CERTIFICATE-----
Generated at Fri May 3 14:51:19 2024 by rpki-client on console-fra.rpki-client.org