Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231382e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39302e3231382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          2+nMsVBlFXiejPPCWLNag7uwxss0+kh81AcvVv2ghKg=
Subject key identifier:   87:AF:BC:4B:0D:3D:01:66:9B:6B:F7:60:4B:27:CA:5D:93:6D:E7:6E
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       75DC6CAA231A6761CDCF502732670F60567AAE45
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231382e302f32342d3234203d3e20323632353839.roa
Signing time:             Mon 10 Mar 2025 03:45:00 +0000
ROA not before:           Mon 10 Mar 2025 03:40:00 +0000
ROA not after:            Mon 09 Mar 2026 03:45:00 +0000
asID:                     262589
IP address blocks:        190.90.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:6c:aa:23:1a:67:61:cd:cf:50:27:32:67:0f:60:56:7a:ae:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 10 03:40:00 2025 GMT
            Not After : Mar  9 03:45:00 2026 GMT
        Subject: CN=87AFBC4B0D3D01669B6BF7604B27CA5D936DE76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:93:b0:ed:89:ac:10:dd:b1:27:45:1d:40:
                    ef:d2:f5:2b:a2:47:cf:ca:5e:35:5b:45:2e:46:25:
                    a8:04:4b:bb:72:7a:3f:58:09:85:10:e9:da:56:c3:
                    9a:83:e3:63:ed:59:20:82:d7:df:65:af:42:fe:58:
                    15:28:25:34:fd:08:e8:06:1f:17:e5:74:d3:67:d1:
                    f5:0b:52:d5:df:3e:68:5e:00:44:d6:bd:cd:70:62:
                    d3:60:b0:b7:52:c5:3f:be:af:b6:b1:36:4a:15:c9:
                    7c:10:5e:5b:f0:55:db:a6:ad:9f:aa:dc:94:df:6c:
                    2b:85:92:3e:d0:e3:b0:00:88:e7:b8:3c:67:fc:38:
                    63:77:7f:ce:b4:68:23:d5:58:bd:17:2c:ee:f6:6d:
                    ea:28:4c:c1:de:93:45:59:9f:87:c7:81:ab:e2:a9:
                    39:10:29:49:6f:af:7c:ba:ff:29:9d:95:61:cf:a2:
                    80:d5:08:02:b8:7f:c7:cb:1d:59:f6:dc:da:3c:d1:
                    bf:99:4f:15:5f:30:4c:03:6b:72:70:63:1d:0a:da:
                    70:ec:58:bf:b7:fe:ef:a3:d5:ce:f1:e8:14:5d:fe:
                    e8:cb:21:33:7e:1b:99:3b:01:5b:58:7c:a0:97:24:
                    0b:51:17:9b:b0:ca:e5:02:18:00:41:4f:7c:6f:73:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AF:BC:4B:0D:3D:01:66:9B:6B:F7:60:4B:27:CA:5D:93:6D:E7:6E
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:14:f0:86:fd:b1:de:06:43:b9:c6:ca:27:2c:03:db:ce:88:
         91:72:82:f5:ce:f2:09:e3:41:d1:22:a9:f6:88:be:64:32:75:
         dc:f6:1d:6e:f8:3a:78:4d:4d:21:b1:93:24:3a:4f:7c:5e:7a:
         48:ed:bd:c2:8f:93:f4:57:8f:62:0f:0d:b4:3a:21:af:e1:b3:
         95:b3:36:10:7e:7d:16:5f:09:81:dd:f4:d5:c9:0a:1c:5a:16:
         d3:e3:b7:2f:03:e0:92:3b:a7:1a:af:f2:e8:16:e3:70:74:d1:
         47:a1:94:9b:62:98:34:a6:27:d3:18:a9:cb:ea:9c:4f:78:87:
         08:a4:ef:97:23:d9:bc:35:cb:78:3d:c0:11:0d:88:b4:74:db:
         85:62:ef:3b:05:21:9a:67:ca:73:12:e1:b2:4f:e3:15:18:fe:
         02:f1:46:cf:f7:a1:42:e6:88:3e:a2:7f:92:98:62:44:eb:3a:
         e9:d1:d2:cc:8b:da:57:4e:be:d7:70:9b:25:52:75:34:48:b1:
         55:0c:39:cc:aa:f3:74:f8:fa:01:73:d1:9d:51:ba:7e:22:fa:
         89:99:0f:07:75:b0:1c:d5:49:5b:ea:08:f0:be:6a:91:af:e1:
         e0:b2:49:01:64:9d:65:9d:56:a0:70:7a:d2:a9:48:66:2c:29:
         85:05:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:23 2025 by rpki-client