Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231392e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39302e3231392e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          vqD8jQUMeRomP6XMxY40XDeJYY20r0QKkLfYq/lhKgg=
Subject key identifier:   7D:B8:CC:13:14:B8:3F:28:5A:AD:72:A4:30:2B:6C:11:4B:2A:01:24
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       16FA92613D050BECFE1DE783AB64063CAC6D48F1
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231392e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:17 +0000
ROA not before:           Tue 04 Feb 2025 18:12:17 +0000
ROA not after:            Tue 03 Feb 2026 18:17:17 +0000
asID:                     262589
IP address blocks:        190.90.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fa:92:61:3d:05:0b:ec:fe:1d:e7:83:ab:64:06:3c:ac:6d:48:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:17 2025 GMT
            Not After : Feb  3 18:17:17 2026 GMT
        Subject: CN=7DB8CC1314B83F285AAD72A4302B6C114B2A0124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:44:2c:d5:08:55:eb:32:29:57:57:1c:82:
                    ca:1a:60:c8:db:e2:85:c7:0e:0f:91:a9:eb:fb:6a:
                    17:40:fe:42:35:80:92:0b:87:7e:7d:ad:44:ed:00:
                    40:39:68:12:f6:24:91:4e:b2:aa:3f:db:1d:54:35:
                    fc:1e:29:ab:9e:60:76:ec:d2:b9:8b:85:ab:ca:c9:
                    b6:b4:bb:8a:fd:21:bd:e5:00:5a:b9:39:b9:e9:6d:
                    2b:b9:51:ba:a0:c5:30:d9:77:2b:52:bb:70:7a:c6:
                    26:93:19:41:5c:6f:53:12:64:57:3f:a6:00:97:b7:
                    76:71:ec:c9:7c:7f:b4:f3:23:44:5b:43:d5:25:35:
                    f1:b8:ae:26:e5:dc:08:6d:9b:2c:3b:16:46:a6:98:
                    96:42:93:26:a1:82:8c:1b:fe:7f:5c:a0:a7:9e:f2:
                    ed:d7:30:a1:34:9d:cb:fa:6f:c2:d8:84:22:4c:45:
                    da:83:e6:e2:14:7e:e6:df:7c:e0:3f:ea:85:0d:7a:
                    13:a4:37:2c:9b:2b:e9:4d:b5:f9:73:a3:1d:e2:7d:
                    f1:53:e6:a9:e9:c3:d2:2c:70:42:be:92:15:60:27:
                    e3:81:3f:38:e2:7a:db:75:49:5a:51:da:74:f1:99:
                    32:a6:8d:c7:98:b9:d1:f2:c6:e5:c1:96:c9:bb:c2:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:CC:13:14:B8:3F:28:5A:AD:72:A4:30:2B:6C:11:4B:2A:01:24
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231392e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:47:24:33:db:02:e0:d8:b3:17:20:60:47:5a:5f:fa:17:
         5c:1a:8a:47:65:09:b5:5d:ca:de:bd:9d:d4:4e:76:98:cd:65:
         db:c3:2e:95:26:dc:b6:61:7c:21:ab:29:6e:7d:f7:66:50:80:
         3f:5b:4f:f3:38:b4:6b:09:f9:a8:1e:c0:a1:71:a2:14:f4:35:
         61:46:86:18:a7:10:d5:fb:ad:22:99:b1:6f:71:1f:9a:fc:78:
         ac:7a:6d:37:62:99:3a:26:44:d8:fe:62:51:18:d6:9b:f6:92:
         e2:99:c6:1d:d6:a9:b4:e2:4b:a9:2e:a5:1a:9e:ea:88:d5:92:
         ce:9f:ca:57:15:dc:16:49:4e:c4:79:ae:bf:38:e3:68:05:f8:
         de:82:bb:9f:96:48:80:82:23:e1:42:05:5e:85:aa:46:d1:33:
         80:f7:a0:40:c0:72:bd:c5:26:85:d6:53:65:c4:7d:c8:c3:f2:
         9f:c4:08:e9:7d:a4:d2:b6:fc:54:38:a4:8e:a2:23:99:48:4f:
         bd:d7:76:5c:ae:51:ba:50:98:d9:cf:fa:76:09:2c:a7:8e:aa:
         f3:d5:90:cf:53:2b:7a:97:f4:c1:e7:fa:da:a7:d9:80:57:fb:
         e9:41:51:c7:81:60:98:55:8e:7b:f4:ac:9f:62:a0:8d:85:e4:
         53:a2:d0:25
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFvqSYT0FC+z+HeeDq2QGPKxtSPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMTdaFw0yNjAyMDMxODE3MTdaMDMxMTAvBgNV
BAMTKDdEQjhDQzEzMTRCODNGMjg1QUFENzJBNDMwMkI2QzExNEIyQTAxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorEQs1QhV6zIpV1ccgsoaYMjb
4oXHDg+Rqev7ahdA/kI1gJILh359rUTtAEA5aBL2JJFOsqo/2x1UNfweKaueYHbs
0rmLhavKyba0u4r9Ib3lAFq5ObnpbSu5UbqgxTDZdytSu3B6xiaTGUFcb1MSZFc/
pgCXt3Zx7Ml8f7TzI0RbQ9UlNfG4ribl3Ahtmyw7FkammJZCkyahgowb/n9coKee
8u3XMKE0ncv6b8LYhCJMRdqD5uIUfubffOA/6oUNehOkNyybK+lNtflzox3iffFT
5qnpw9IscEK+khVgJ+OBPzjiett1SVpR2nTxmTKmjceYudHyxuXBlsm7wsURAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfbjMExS4PyharXKkMCtsEUsqASQwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzMTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvlrb
MA0GCSqGSIb3DQEBCwUAA4IBAQCIWkckM9sC4NizFyBgR1pf+hdcGopHZQm1Xcre
vZ3UTnaYzWXbwy6VJty2YXwhqyluffdmUIA/W0/zOLRrCfmoHsChcaIU9DVhRoYY
pxDV+60imbFvcR+a/Hisem03Ypk6JkTY/mJRGNab9pLimcYd1qm04kupLqUanuqI
1ZLOn8pXFdwWSU7Eea6/OONoBfjegruflkiAgiPhQgVehapG0TOA96BAwHK9xSaF
1lNlxH3Iw/KfxAjpfaTStvxUOKSOoiOZSE+913ZcrlG6UJjZz/p2CSynjqrz1ZDP
Uyt6l/TB5/rap9mAV/vpQVHHgWCYVY579KyfYqCNheRTotAl
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:36 2025 by rpki-client