Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234362e302f32332d3234203d3e203237383337.roa
File:                     3139302e39302e3234362e302f32332d3234203d3e203237383337.roa (raw, json)
Hash identifier:          SOckEnleWV3/FDnOob2uWMCQz+ftubl2CMqCMyMS8ls=
Subject key identifier:   02:84:F5:FE:42:31:2E:20:6C:89:AD:87:F9:98:1D:60:C8:40:9C:F3
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5ED81C2463C4C11F0D2DD332CB4B0DC4ECBD9CA6
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234362e302f32332d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 18:00:31 +0000
ROA not before:           Tue 05 Mar 2024 17:55:31 +0000
ROA not after:            Tue 04 Mar 2025 18:00:31 +0000
asID:                     27837
IP address blocks:        190.90.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:1c:24:63:c4:c1:1f:0d:2d:d3:32:cb:4b:0d:c4:ec:bd:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:31 2024 GMT
            Not After : Mar  4 18:00:31 2025 GMT
        Subject: CN=0284F5FE42312E206C89AD87F9981D60C8409CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:a1:23:ac:91:06:01:de:0f:6d:74:7a:8f:
                    ed:53:e5:31:00:57:c7:1f:0b:3c:5b:9b:ca:d6:64:
                    f1:4e:68:76:3d:18:c5:8b:35:26:dd:ef:a2:3e:6c:
                    75:75:3f:03:ef:34:25:47:4d:41:e2:77:ad:e0:35:
                    48:c7:8c:10:dc:74:c9:a4:ee:ff:0a:88:25:9d:ba:
                    a1:60:23:75:4f:66:06:f4:69:a8:b5:70:b2:7b:fb:
                    25:39:4d:fd:23:31:d8:cd:6d:d1:8c:72:14:cb:f1:
                    d0:9d:18:bd:b2:04:26:45:b0:e3:a0:82:fc:af:5f:
                    f5:06:3f:97:14:e8:52:02:29:88:df:c7:df:53:83:
                    2c:65:05:13:07:9a:45:7a:61:eb:0c:be:45:6d:09:
                    6d:66:f9:30:b2:b6:f4:95:2c:bc:db:7c:95:5d:9c:
                    d9:74:94:c3:82:cb:87:71:46:64:4f:54:d4:00:58:
                    c3:3b:de:c2:cf:c2:7c:a0:d3:61:a4:24:97:81:a0:
                    63:a4:24:94:47:db:a8:4b:64:3a:a9:38:e3:90:4c:
                    9d:bc:1a:1f:86:cc:4b:fe:1d:18:73:cc:03:14:59:
                    d7:38:37:fd:9f:4b:5d:cc:3c:f2:f2:a2:4d:74:ae:
                    79:a3:bb:f5:36:8d:f9:c4:66:38:5f:60:8b:62:34:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:84:F5:FE:42:31:2E:20:6C:89:AD:87:F9:98:1D:60:C8:40:9C:F3
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234362e302f32332d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:8b:c8:fe:74:da:61:2c:82:0f:ce:de:c9:5b:5b:3a:80:
         f5:36:05:09:3a:8e:18:49:ec:cd:7e:52:ce:83:3d:3a:35:63:
         66:1c:bd:02:f2:8f:46:88:9f:b7:10:54:e9:15:96:5f:f0:98:
         c3:9b:b9:c9:45:cc:ea:7f:df:1d:bd:56:47:16:a7:41:b9:03:
         ee:a4:c1:54:06:2e:8d:a0:06:01:6f:f4:5b:54:4e:ce:3a:99:
         9f:b0:34:ab:2f:cc:d5:79:8d:a2:d3:89:22:00:66:bf:6f:c5:
         3f:b8:02:1c:ec:bf:6e:98:e4:7b:03:07:16:c9:19:8c:f3:45:
         bc:ff:d4:be:0f:44:ce:7f:c9:99:1f:f1:1a:97:9c:94:8c:7b:
         f4:dc:83:73:39:52:3d:68:27:f8:50:96:46:cf:17:92:7a:60:
         9f:56:a5:33:b2:5e:af:7f:b5:8a:1f:2b:31:8e:bf:b5:b6:45:
         01:70:09:a4:92:e8:c4:d3:af:e0:ec:e7:8e:9a:69:28:b5:6d:
         94:98:1c:b4:62:8e:f4:06:ef:a1:b2:e2:1c:a7:46:59:25:9e:
         bd:0c:2c:9b:60:af:fd:de:62:e0:f8:d2:6a:33:1a:1e:3e:19:
         6d:70:b0:5b:5a:92:ea:a2:37:14:dc:ef:cc:99:81:9f:33:ed:
         00:29:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:19 2024 by rpki-client on console-fra.rpki-client.org