Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32352e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e32352e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          0WiOeRaQ0Xa5maLkNT43u0QWnQGqHPPETUSXtg0MpEE=
Subject key identifier:   8D:04:96:BE:C2:EB:D1:18:2F:08:4C:77:13:F9:34:A3:96:9B:FA:92
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       643C0C6AB5B9441EF48E06517598BAD8B86CC0D4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32352e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     26619
IP address blocks:        190.90.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3c:0c:6a:b5:b9:44:1e:f4:8e:06:51:75:98:ba:d8:b8:6c:c0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=8D0496BEC2EBD1182F084C7713F934A3969BFA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:01:a2:f1:23:76:97:aa:22:eb:f2:1c:c8:
                    de:41:41:5d:0b:53:6b:d7:38:bd:d5:33:11:dc:28:
                    5e:41:63:75:9b:cc:e7:14:88:b7:a5:c6:52:aa:f7:
                    fb:9a:37:a1:48:ed:a3:f2:b1:b3:9f:f5:a3:8e:a7:
                    d7:7c:5f:a6:03:28:05:00:78:5a:b3:28:19:f1:83:
                    ec:68:9d:e0:a2:02:cc:5b:e0:9f:4d:e9:44:53:22:
                    23:50:94:83:33:00:f2:8c:6c:de:07:e3:84:b8:dc:
                    af:7b:08:84:e3:58:47:fd:8e:fa:5f:2c:9a:11:e9:
                    ae:2f:10:57:99:02:d2:8f:11:e7:09:39:c0:db:e9:
                    52:1c:54:db:71:54:de:af:cb:58:13:1f:13:51:e6:
                    59:58:35:97:f6:0e:8e:05:10:8d:c7:a4:16:a5:3c:
                    95:69:08:01:3d:f8:dd:96:5b:29:2e:a6:b6:1d:8d:
                    9b:11:9b:a4:67:b2:49:49:6c:7d:7d:f7:0e:e5:30:
                    a2:6b:bf:53:73:f5:9a:2d:23:f6:76:07:73:0f:82:
                    7a:07:a0:de:10:04:f5:3f:b0:dd:a2:be:54:74:91:
                    97:d2:68:e3:f7:82:44:ba:0f:5a:d0:d6:98:d7:01:
                    c4:e6:89:60:76:1b:7c:4a:c2:16:82:4d:5f:d5:32:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:04:96:BE:C2:EB:D1:18:2F:08:4C:77:13:F9:34:A3:96:9B:FA:92
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32352e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:8c:8d:2c:7f:20:6a:b8:37:50:89:da:d5:6d:ca:d2:92:
         ec:d1:49:0c:f8:7e:af:e4:3c:42:67:ff:36:97:9f:8e:20:8e:
         11:0a:3f:63:ce:38:01:b9:48:20:2f:7a:b1:5c:1c:6d:70:32:
         32:fe:91:da:4b:89:b7:e1:6d:c8:2c:33:b2:b9:61:1d:df:6e:
         8d:ee:d9:54:b2:b8:bc:86:26:d9:59:1f:fd:8c:8d:de:6d:4c:
         e9:83:36:7f:07:65:a6:92:84:03:f2:9a:64:5a:28:0c:c7:fe:
         da:d6:78:ad:df:c3:00:09:f5:d4:7d:97:f4:d8:75:21:fb:b4:
         5c:c7:3f:04:16:17:10:41:98:5e:33:b7:f3:62:ac:37:f9:bc:
         61:f7:58:19:67:5c:4e:9a:cc:76:12:3d:e5:a9:a8:87:35:4a:
         c6:b0:45:db:87:4a:8e:63:c9:83:0b:7c:d5:e8:88:70:df:fa:
         d6:4b:23:aa:61:3c:b5:9d:f7:6b:bc:a1:0a:e0:0b:82:85:16:
         ec:ae:b3:b6:1b:55:a3:39:c6:37:0a:d6:f6:5a:22:6d:66:a2:
         1b:af:31:33:01:d4:f8:cc:77:1d:85:a4:30:0e:00:fa:cc:ef:
         43:b4:7a:a2:55:d6:12:fd:1a:98:64:91:d0:12:e7:e1:5a:85:
         3c:77:2e:71
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZDwMarW5RB70jgZRdZi62LhswNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDAzMDUxNzU1MzJaFw0yNTAzMDQxODAwMzJaMDMxMTAvBgNV
BAMTKDhEMDQ5NkJFQzJFQkQxMTgyRjA4NEM3NzEzRjkzNEEzOTY5QkZBOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9QGi8SN2l6oi6/IcyN5BQV0L
U2vXOL3VMxHcKF5BY3WbzOcUiLelxlKq9/uaN6FI7aPysbOf9aOOp9d8X6YDKAUA
eFqzKBnxg+xoneCiAsxb4J9N6URTIiNQlIMzAPKMbN4H44S43K97CITjWEf9jvpf
LJoR6a4vEFeZAtKPEecJOcDb6VIcVNtxVN6vy1gTHxNR5llYNZf2Do4FEI3HpBal
PJVpCAE9+N2WWykuprYdjZsRm6RnsklJbH199w7lMKJrv1Nz9ZotI/Z2B3MPgnoH
oN4QBPU/sN2ivlR0kZfSaOP3gkS6D1rQ1pjXAcTmiWB2G3xKwhaCTV/VMvj7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUjQSWvsLr0RgvCEx3E/k0o5ab+pIwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+WhkwDQYJ
KoZIhvcNAQELBQADggEBABOyjI0sfyBquDdQidrVbcrSkuzRSQz4fq/kPEJn/zaX
n44gjhEKP2POOAG5SCAverFcHG1wMjL+kdpLibfhbcgsM7K5YR3fbo3u2VSyuLyG
JtlZH/2Mjd5tTOmDNn8HZaaShAPymmRaKAzH/trWeK3fwwAJ9dR9l/TYdSH7tFzH
PwQWFxBBmF4zt/NirDf5vGH3WBlnXE6azHYSPeWpqIc1SsawRduHSo5jyYMLfNXo
iHDf+tZLI6phPLWd92u8oQrgC4KFFuyus7YbVaM5xjcK1vZaIm1mohuvMTMB1PjM
dx2FpDAOAPrM70O0eqJV1hL9GphkkdAS5+FahTx3LnE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org