Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234392e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3234392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          3Rv3tZ4QiMtRPOTrDg3fMbNqd+HdaQK07UtL3j+ZufA=
Subject key identifier:   1F:89:03:8C:82:E5:3F:C9:24:7A:06:E1:89:AE:97:C8:4D:6A:C9:4B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       4A3EE4A1E4DE89583DFD40BC803CEACBD74C4274
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234392e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 18:17:30 +0000
ROA not before:           Tue 04 Feb 2025 18:12:30 +0000
ROA not after:            Tue 03 Feb 2026 18:17:30 +0000
asID:                     18678
IP address blocks:        190.90.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3e:e4:a1:e4:de:89:58:3d:fd:40:bc:80:3c:ea:cb:d7:4c:42:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:30 2025 GMT
            Not After : Feb  3 18:17:30 2026 GMT
        Subject: CN=1F89038C82E53FC9247A06E189AE97C84D6AC94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:6f:8b:03:b7:57:da:d1:08:1a:8a:5f:66:
                    88:df:5c:7f:e4:18:19:be:20:a1:dd:ae:60:90:77:
                    7b:7a:35:6c:d1:ba:3a:d8:12:55:7c:87:c8:58:c4:
                    28:3f:48:79:93:6b:98:ef:80:15:bc:c1:62:c7:d2:
                    da:74:4a:ec:2b:b2:f7:29:9b:ef:0e:34:5e:f5:b2:
                    71:cd:91:2e:c8:5f:e8:2c:5f:5e:55:fc:c0:67:ee:
                    76:3a:15:0a:bf:35:7d:79:7b:e6:08:52:83:01:70:
                    18:f1:0b:27:25:68:7d:15:04:57:88:c1:ca:72:3e:
                    4e:f4:c2:21:60:cb:1a:32:6b:f8:49:a9:e6:aa:e3:
                    72:ef:1a:15:12:97:0c:be:bd:44:d4:ff:0d:9f:7f:
                    8b:cb:5f:27:0b:a4:80:3f:60:94:45:dd:15:b6:21:
                    ec:09:e3:28:9b:83:74:16:f0:f8:16:65:d9:5e:f2:
                    5b:bb:fb:38:59:89:7b:7f:59:f4:77:79:2e:84:4d:
                    80:34:fd:b6:b2:45:2a:ad:8f:a3:e8:79:31:73:7a:
                    19:21:11:a0:93:c2:16:6a:0a:aa:59:d6:d1:9d:05:
                    71:c2:a2:81:8d:8c:0a:d7:af:f6:ff:6a:b2:90:96:
                    1b:89:2d:41:18:5c:55:1e:a8:28:4a:9d:30:00:49:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:03:8C:82:E5:3F:C9:24:7A:06:E1:89:AE:97:C8:4D:6A:C9:4B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:ee:21:1c:33:40:d6:2b:1d:f8:52:c7:bd:6e:ba:1b:da:
         e7:3e:d4:cc:bf:97:0a:88:08:3f:4d:98:35:4f:68:ec:02:37:
         70:37:5a:e2:12:1b:52:27:d7:88:65:de:b8:a3:49:bd:74:a2:
         6d:df:a8:7c:0e:e8:65:ee:b3:ba:f1:a7:9f:ee:ec:73:f5:81:
         fe:b4:32:88:6f:9d:de:bd:d0:f6:7d:bb:5b:44:8e:f7:49:b6:
         d8:59:0d:1f:40:2d:34:7e:3b:f2:85:2c:56:9d:ca:e3:c2:ab:
         7d:54:fd:4c:e6:da:8a:fa:94:64:58:65:82:18:18:6d:13:b5:
         ce:70:ba:cf:60:0f:f9:44:bd:6b:e5:ae:dd:68:fa:25:36:82:
         45:55:72:bd:fa:4a:57:ac:9b:2c:42:b3:d2:b6:31:bf:02:7f:
         b0:56:4a:d6:bd:fa:fc:75:bc:4a:4e:d8:26:1f:4f:1d:88:df:
         4f:11:c6:cc:fb:b7:8d:23:31:e1:0f:90:f5:5b:d0:f1:cc:6d:
         6e:ab:f6:8a:01:26:ff:dc:a4:ce:6a:67:dc:b4:67:2c:55:06:
         a5:f2:26:0c:11:c4:d7:87:45:80:99:3e:7e:cb:d4:82:c5:c8:
         a7:a6:f6:d0:33:4f:4c:db:d7:22:65:de:8e:ac:10:1e:36:05:
         82:48:93:66
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSj7koeTeiVg9/UC8gDzqy9dMQnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMzBaFw0yNjAyMDMxODE3MzBaMDMxMTAvBgNV
BAMTKDFGODkwMzhDODJFNTNGQzkyNDdBMDZFMTg5QUU5N0M4NEQ2QUM5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpW+LA7dX2tEIGopfZojfXH/k
GBm+IKHdrmCQd3t6NWzRujrYElV8h8hYxCg/SHmTa5jvgBW8wWLH0tp0Suwrsvcp
m+8ONF71snHNkS7IX+gsX15V/MBn7nY6FQq/NX15e+YIUoMBcBjxCyclaH0VBFeI
wcpyPk70wiFgyxoya/hJqeaq43LvGhUSlwy+vUTU/w2ff4vLXycLpIA/YJRF3RW2
IewJ4yibg3QW8PgWZdle8lu7+zhZiXt/WfR3eS6ETYA0/bayRSqtj6PoeTFzehkh
EaCTwhZqCqpZ1tGdBXHCooGNjArXr/b/arKQlhuJLUEYXFUeqChKnTAASe6DAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUH4kDjILlP8kkegbhia6XyE1qyUswHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5a+TAN
BgkqhkiG9w0BAQsFAAOCAQEAOrLuIRwzQNYrHfhSx71uuhva5z7UzL+XCogIP02Y
NU9o7AI3cDda4hIbUifXiGXeuKNJvXSibd+ofA7oZe6zuvGnn+7sc/WB/rQyiG+d
3r3Q9n27W0SO90m22FkNH0AtNH478oUsVp3K48KrfVT9TObaivqUZFhlghgYbRO1
znC6z2AP+US9a+Wu3Wj6JTaCRVVyvfpKV6ybLEKz0rYxvwJ/sFZK1r36/HW8Sk7Y
Jh9PHYjfTxHGzPu3jSMx4Q+Q9VvQ8cxtbqv2igEm/9ykzmpn3LRnLFUGpfImDBHE
14dFgJk+fsvUgsXIp6b20DNPTNvXImXejqwQHjYFgkiTZg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:16 2025 by rpki-client