Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32342e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e32342e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          ab5bX/pPc4r2SkXbxOu5m0JuQzBa3KkN4Tble+aBCw4=
Subject key identifier:   6E:3E:BC:40:F6:6D:AA:3A:75:56:4C:07:CC:31:54:28:CA:3F:B9:2F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6010801B38988F0E4F3448219A92AE8E5AD138F1
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32342e302f32312d3234203d3e203138363738.roa
Signing time:             Thu 13 Feb 2025 14:35:00 +0000
ROA not before:           Thu 13 Feb 2025 14:30:00 +0000
ROA not after:            Thu 12 Feb 2026 14:35:00 +0000
asID:                     18678
IP address blocks:        190.90.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:10:80:1b:38:98:8f:0e:4f:34:48:21:9a:92:ae:8e:5a:d1:38:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 13 14:30:00 2025 GMT
            Not After : Feb 12 14:35:00 2026 GMT
        Subject: CN=6E3EBC40F66DAA3A75564C07CC315428CA3FB92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:76:a5:70:ec:02:a5:e3:cd:68:98:0c:f2:47:
                    fd:79:dc:ac:36:cc:4b:9d:6a:47:99:27:31:d1:44:
                    91:ff:a6:93:b3:e9:20:9a:47:f9:b2:8b:26:d3:13:
                    22:cd:e2:b3:8d:d9:8f:55:f9:f9:a9:84:e3:da:a4:
                    b0:fd:be:91:a8:c3:72:09:04:2d:7c:8f:c3:54:46:
                    fa:df:8d:19:c9:8b:e5:a9:f9:6b:73:55:f0:3c:ed:
                    59:f5:19:43:86:25:9d:b0:f4:54:2c:d4:1d:99:4c:
                    fd:ad:1f:3b:13:2f:c6:6e:3a:28:58:55:f3:7f:42:
                    a2:e7:c8:9b:7e:19:6b:89:42:80:60:b6:32:7c:35:
                    e8:36:c3:b2:45:4d:97:ff:56:4f:95:af:50:7d:1f:
                    7a:97:58:6b:d1:92:b7:2c:12:14:02:b0:88:b4:6f:
                    e1:bf:c6:a0:7f:7e:a7:7c:8b:09:88:f6:95:6a:08:
                    93:9d:f1:5e:a9:47:de:4b:a5:e5:77:33:bb:ba:32:
                    55:f0:c9:ad:f8:5f:f2:87:68:e1:f9:c0:e9:55:37:
                    50:de:7b:cd:af:bc:21:38:64:2a:d8:0d:06:04:25:
                    ca:9f:f5:43:40:88:f1:23:77:20:41:0e:f9:d1:2d:
                    1c:5e:44:cc:5f:81:31:94:ee:05:43:3d:8d:56:05:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3E:BC:40:F6:6D:AA:3A:75:56:4C:07:CC:31:54:28:CA:3F:B9:2F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32342e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:83:d6:84:46:b6:af:54:70:97:c2:9f:90:d5:ff:00:f4:
         4a:4a:8c:ab:7d:a4:2d:55:9f:ee:4b:ab:5c:9f:86:fd:cf:45:
         3f:b9:c7:e5:be:e5:31:47:54:07:dd:e2:89:7f:7b:ca:ba:f8:
         87:62:44:28:e5:04:77:8e:c5:84:a1:a7:d8:95:ce:18:36:c3:
         14:31:6d:44:3d:df:e3:42:5e:87:6d:ea:eb:b1:58:e6:63:25:
         62:ad:ff:6b:69:aa:dc:65:43:6e:d2:57:fb:1b:de:f7:90:9c:
         ec:67:c0:46:aa:39:8f:d6:98:63:ea:d5:f6:7a:66:42:90:65:
         5f:da:34:56:b5:50:ae:5f:84:c6:5b:96:7c:bb:d2:43:f1:a1:
         d5:89:cc:4d:84:9c:70:66:37:96:6b:2f:b6:db:7f:de:85:b1:
         e3:42:69:d4:08:b8:91:b1:1f:bb:19:3d:d6:0a:01:9f:38:0a:
         ee:5d:ef:3e:8c:a6:44:fe:4c:cb:8a:e6:56:5b:0c:e5:07:e9:
         51:cd:5c:87:4a:b5:66:49:ec:31:6a:c6:64:46:28:7b:e2:60:
         a7:a8:54:6b:0e:b2:af:c8:8c:d3:2d:0b:c4:0f:2a:c0:30:f8:
         31:50:58:d7:d5:41:04:73:e8:36:0e:c8:74:1d:ba:b6:de:78:
         d5:47:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:12 2025 by rpki-client