Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa
File:                     3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          uFLROGuU8srdojd7WYCeAjyw3IQK8QOSIgbp6AIf5L8=
Subject key identifier:   07:7E:F2:45:BB:20:6D:06:4B:D2:85:83:2E:9B:EB:DF:85:D5:73:80
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0F35F61F56B22D1A8006852F12FE72C6CFCD8655
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa
Signing time:             Tue 05 Mar 2024 18:00:38 +0000
ROA not before:           Tue 05 Mar 2024 17:55:38 +0000
ROA not after:            Tue 04 Mar 2025 18:00:38 +0000
asID:                     264646
IP address blocks:        190.90.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:f6:1f:56:b2:2d:1a:80:06:85:2f:12:fe:72:c6:cf:cd:86:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:38 2024 GMT
            Not After : Mar  4 18:00:38 2025 GMT
        Subject: CN=077EF245BB206D064BD285832E9BEBDF85D57380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:ca:b9:be:cb:fc:d0:ed:f8:1f:ee:e5:68:
                    ad:13:b1:2f:39:93:3e:15:b9:4a:50:9d:ce:ec:98:
                    88:99:49:63:7b:b2:df:f5:1c:c6:d2:d1:6a:13:87:
                    3c:67:02:5b:be:eb:b2:7d:c3:1d:61:82:34:23:3f:
                    d3:92:5d:62:69:db:de:e5:67:6a:01:29:64:3b:9a:
                    58:f1:3b:a2:17:e3:c7:4f:fb:76:ef:f3:4c:54:76:
                    e3:82:52:3a:bd:2a:20:d2:07:74:d4:74:8a:08:3f:
                    10:4a:6f:01:67:bd:dc:11:b9:22:9c:b5:28:ad:90:
                    37:22:fb:0c:fb:03:5e:06:e7:09:cf:27:f7:ef:2c:
                    87:2a:6a:e9:2a:d7:a2:3d:6a:ad:1d:f0:85:35:e6:
                    69:b3:0a:26:d4:cd:4a:da:ac:c6:a7:fe:1f:24:a8:
                    c4:57:bf:94:58:8e:0f:a7:ef:6e:e4:7a:16:0d:8c:
                    ed:8b:5f:7c:89:42:1b:43:11:19:a6:23:fe:ff:dd:
                    ff:9e:e4:fb:f2:75:d5:2e:fe:9b:fa:92:7c:79:1b:
                    8d:d3:c3:cf:f4:e0:bf:6d:38:e7:e8:7a:af:50:f3:
                    8d:89:40:26:44:d7:d0:b0:a2:21:12:ed:1b:82:dd:
                    39:cf:9f:d6:60:03:d0:50:c9:cb:30:9a:d8:87:76:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:F2:45:BB:20:6D:06:4B:D2:85:83:2E:9B:EB:DF:85:D5:73:80
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:47:cc:de:da:4c:b2:83:5c:2f:df:57:f4:90:9e:0c:bd:
         dc:6e:7e:46:6a:09:42:b9:4c:98:22:b0:49:6c:ec:a8:9a:78:
         fc:2b:2a:20:a7:07:ef:65:98:ec:38:46:09:6e:4a:b7:d8:8a:
         9d:82:5a:24:ef:ed:2b:5f:2d:23:d0:3c:ac:c3:19:5a:e5:3e:
         b7:6d:8a:c2:a6:88:de:0d:91:18:fe:cd:d4:a8:f7:b5:13:6a:
         1a:08:1c:76:cd:55:dc:a4:be:72:59:d3:60:ae:0c:95:c4:c7:
         71:46:3f:b2:af:18:f1:b0:e5:3c:f9:d5:59:3f:51:a5:09:1f:
         4c:eb:a6:99:04:e9:e5:c0:eb:95:e7:ff:11:82:95:1d:67:19:
         5f:33:bd:29:23:07:56:db:69:b6:6f:ea:fb:45:c4:b0:bc:c6:
         19:57:69:8e:ec:6e:05:d4:b4:85:42:d7:99:af:e8:0a:c4:e3:
         79:4f:83:e8:aa:c2:9a:9e:10:01:ae:3f:ea:f9:cb:52:ec:e5:
         17:21:e0:83:bf:0c:cf:31:00:57:b9:71:7d:f5:40:e6:12:c8:
         ae:fa:20:7c:e1:b8:cd:f4:0d:31:43:bc:8c:26:4a:96:73:96:
         2d:72:2e:40:62:4e:bd:54:17:3a:fe:6b:27:6a:14:b4:d9:bc:
         c5:8a:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:39 2024 by rpki-client on console-fra.rpki-client.org