Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232382e302f32342d3234203d3e203237383337.roa
File:                     3139302e39302e3232382e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier:          iFzxDiEXh1yy6G4zGo3gMFIVDxJIu2049+kmJ2NHA2c=
Subject key identifier:   07:4C:F6:24:65:66:F2:21:48:45:46:A2:91:67:83:C8:D7:D6:E7:6C
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       67DE580C8675439DF7092BC771EBDFDF53DFBFAC
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232382e302f32342d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     27837
IP address blocks:        190.90.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:de:58:0c:86:75:43:9d:f7:09:2b:c7:71:eb:df:df:53:df:bf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=074CF6246566F221484546A2916783C8D7D6E76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:b5:88:69:b6:06:c1:05:b7:09:9d:ca:e0:
                    6b:29:44:cb:b2:72:4f:1e:64:ce:fa:b2:53:aa:ba:
                    51:2a:30:9f:ed:57:97:64:3f:5b:3c:c1:f4:5c:c7:
                    1d:dc:29:b8:b1:fe:73:62:da:94:9e:d9:19:bb:7c:
                    7c:b4:5c:29:06:9d:cd:b5:4a:66:bd:04:07:b7:df:
                    45:28:08:94:7e:67:95:94:ac:52:c5:54:2c:a3:98:
                    c5:60:dc:38:19:b8:3b:5d:8c:ee:f4:06:09:2a:df:
                    d7:c6:be:17:04:8b:25:3a:dd:59:48:3b:5a:41:7f:
                    47:04:a8:c3:b1:b8:cd:47:45:b7:a0:6a:92:c4:cc:
                    a9:d4:28:a6:4b:4b:56:13:e8:15:a5:5e:74:71:93:
                    0d:5d:17:43:ca:8c:24:5c:3f:05:c4:b4:c1:85:f2:
                    09:6e:22:2e:4d:fa:7e:f7:34:5c:07:be:55:68:98:
                    c2:55:0b:9f:3b:5f:36:3d:93:73:e3:74:63:34:97:
                    55:9c:30:b0:e3:c1:aa:ef:a2:fd:f5:bd:7e:93:20:
                    e2:34:b8:b4:da:59:ca:b3:09:75:68:82:a8:28:f8:
                    1d:e5:4c:84:40:a2:39:15:48:d3:94:20:3e:db:0b:
                    58:5e:12:35:1c:cd:d8:ad:eb:5b:37:c6:69:50:e5:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:F6:24:65:66:F2:21:48:45:46:A2:91:67:83:C8:D7:D6:E7:6C
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232382e302f32342d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:2a:36:3a:0a:b4:a0:6b:68:e2:61:23:f7:68:0e:ab:60:
         a0:73:18:47:dd:97:0b:12:7b:00:13:03:2b:36:1b:0f:1e:25:
         5e:c9:07:d4:6d:02:99:a8:8d:b5:71:08:48:f1:b5:35:25:64:
         e3:15:20:0f:16:04:27:9d:de:c2:d7:29:eb:00:a6:d0:88:55:
         51:06:3e:ac:da:cd:3f:82:ab:5f:21:d0:12:c6:34:63:3d:fd:
         9a:7c:f1:f8:1f:b7:b1:9b:f3:0a:52:6c:2b:15:cc:6f:6d:87:
         fc:d0:4e:96:8f:b7:bc:36:ca:39:be:47:42:07:26:80:83:d0:
         3e:80:5e:ee:ff:d5:33:2d:d6:34:fa:89:a4:5a:36:38:db:24:
         60:35:27:db:5c:5c:c8:52:40:11:14:a5:2d:1e:a9:a3:04:be:
         81:e3:9d:e8:44:33:9e:b4:c4:ef:b6:fc:99:a5:91:7c:e2:d7:
         34:9b:a4:25:19:20:e6:45:3a:7b:86:7f:ea:02:8d:1c:29:ae:
         3f:e5:fb:f0:86:b1:1e:8a:83:d1:10:d7:56:ec:ce:7d:af:88:
         ef:ad:b5:9a:b3:d0:50:c1:b0:66:77:8a:55:09:cf:df:93:79:
         14:ca:9e:9d:31:e9:29:46:f9:50:68:88:a4:1c:bb:fc:18:7b:
         0b:b2:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org