Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa
File:                     3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          XMj7qKhhQRPqvtMR32vmD8WeqjZDIoygl/wNVeb82XA=
Subject key identifier:   57:07:68:9B:15:60:59:B3:01:BC:D6:B2:80:BC:F1:E4:0E:7B:BF:AB
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       1986F650C6722ABCAF131C4A3B3F583A2376AC57
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:40 +0000
ROA not before:           Tue 05 Mar 2024 17:55:40 +0000
ROA not after:            Tue 04 Mar 2025 18:00:40 +0000
asID:                     262589
IP address blocks:        190.90.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:86:f6:50:c6:72:2a:bc:af:13:1c:4a:3b:3f:58:3a:23:76:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:40 2024 GMT
            Not After : Mar  4 18:00:40 2025 GMT
        Subject: CN=5707689B156059B301BCD6B280BCF1E40E7BBFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:75:6b:0c:eb:4e:27:cd:77:67:b9:69:f8:
                    16:4c:71:4b:35:f7:a6:43:5a:28:a0:bb:a6:84:cb:
                    e1:30:e2:ed:73:02:6e:8e:d2:fe:61:66:60:95:1a:
                    47:10:a7:2e:68:20:84:a9:db:ae:04:50:f5:c0:32:
                    16:00:cb:fd:18:a0:c5:c5:7d:10:e2:67:fa:da:eb:
                    dc:2f:d4:dc:30:c2:fb:80:e0:bf:89:23:36:6f:8e:
                    d2:ab:a8:22:07:81:11:9b:99:4c:3b:26:83:c9:ab:
                    ae:9d:51:50:fc:13:8e:04:73:6d:b5:44:ee:87:c7:
                    b2:49:ff:f3:46:32:ae:3c:2e:38:20:41:b5:b9:d7:
                    12:75:58:85:b6:2d:da:46:b8:93:04:bf:5e:a3:cb:
                    00:6c:55:85:c7:09:41:d9:e1:c7:ae:dc:75:6d:e1:
                    80:33:65:e6:08:58:1c:bf:25:d1:4b:6a:52:2f:68:
                    13:9b:ca:ca:4b:20:ac:a7:c0:57:62:46:54:03:81:
                    c6:12:44:a3:a0:e0:97:b6:c8:b7:c9:e6:2f:f3:42:
                    cc:4a:e2:b6:cf:de:df:0a:22:93:54:a5:67:f4:b2:
                    21:87:f2:20:17:dd:5a:4b:24:65:0d:06:0f:4f:74:
                    44:70:bd:11:0c:c3:ca:b4:f3:d4:65:ee:b8:87:81:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:68:9B:15:60:59:B3:01:BC:D6:B2:80:BC:F1:E4:0E:7B:BF:AB
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:70:f1:ee:2b:65:74:93:52:90:e5:cd:d5:ff:a4:f0:b6:
         da:69:ee:77:da:89:bf:ff:34:70:19:65:17:5e:e5:2c:bb:bd:
         c6:c6:3f:3d:ec:6a:4b:34:cf:b2:c6:f9:81:8c:67:d9:e3:55:
         bb:73:0f:d7:f7:8d:b6:ec:82:35:c8:5c:84:f0:bd:0e:f6:e8:
         53:30:52:88:0c:05:ba:6f:b6:5c:1b:01:98:1c:d3:ec:01:51:
         32:11:85:6d:cf:8e:28:28:22:34:73:5e:d5:04:46:ed:99:7c:
         24:d9:80:30:d7:e3:b0:5d:a6:70:d5:f9:a3:f0:c8:d5:93:65:
         b5:43:35:7e:db:9d:c8:66:b4:d1:c3:ee:fc:7b:0f:82:67:19:
         df:a2:27:6e:51:2e:af:14:84:5c:e2:ac:df:15:81:d2:e7:c4:
         6c:99:cc:44:6f:b9:c1:ad:cf:ce:8e:7a:a4:39:25:70:85:17:
         6f:fd:4f:be:49:55:b0:58:53:7f:22:fd:a8:1b:a7:67:a5:54:
         a9:c1:d7:d8:f3:23:f9:64:ed:92:dd:2e:1f:40:51:e1:98:c3:
         01:ae:3b:36:e2:fc:f5:52:73:6b:fb:eb:82:5e:07:ca:3c:ce:
         29:e3:d3:8d:33:29:28:28:f2:23:7a:74:fd:0e:cb:dd:87:8a:
         82:b7:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:39 2024 by rpki-client on console-fra.rpki-client.org