Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32362e302f32332d3234203d3e203236363139.roa
File:                     3139302e39302e32362e302f32332d3234203d3e203236363139.roa (raw, json)
Hash identifier:          dpGrI/aqd9WhLeU/zwzHJHlwvTHsx4mN/s6hV21dzfE=
Subject key identifier:   4A:3C:B3:07:2D:76:A0:AA:C4:1A:91:D4:01:9D:C7:9B:43:B3:30:81
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       075763E2FFD7CCADAD79433E70B429829CE880B6
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32362e302f32332d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:35 +0000
ROA not before:           Tue 05 Mar 2024 17:55:35 +0000
ROA not after:            Tue 04 Mar 2025 18:00:35 +0000
asID:                     26619
IP address blocks:        190.90.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:57:63:e2:ff:d7:cc:ad:ad:79:43:3e:70:b4:29:82:9c:e8:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:35 2024 GMT
            Not After : Mar  4 18:00:35 2025 GMT
        Subject: CN=4A3CB3072D76A0AAC41A91D4019DC79B43B33081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:87:eb:7f:c4:e1:fd:f1:6b:a4:3f:b0:a0:
                    8b:39:c7:7a:72:fd:15:e7:e6:b6:d4:af:8a:bc:8c:
                    07:20:19:cb:e7:8d:61:00:f3:13:cf:70:1a:b2:67:
                    18:8d:79:5c:a2:f6:c0:65:b8:a7:12:52:55:bf:eb:
                    9d:68:5f:5c:8c:74:d6:8e:23:e3:60:a7:13:2e:78:
                    3b:69:f2:dc:eb:1c:f0:c9:b5:c6:7e:a3:0c:19:63:
                    1d:db:87:b9:17:2c:4e:ea:7f:ea:ce:92:dc:f7:57:
                    47:1c:dc:78:ba:e3:e2:96:fd:0c:f8:2a:51:13:30:
                    2c:ee:22:a4:14:5f:70:ff:ed:e7:d9:16:89:71:79:
                    46:9f:3e:20:da:c4:3f:06:04:bd:cf:2c:cb:78:40:
                    8c:94:83:cc:f1:b5:02:8f:a2:83:e4:a0:b7:fd:4a:
                    54:75:29:28:c2:5b:e1:77:6f:c0:99:53:d3:6c:be:
                    23:bd:1e:15:39:54:c2:19:9b:07:8e:34:7e:16:51:
                    c7:5b:00:20:9e:2e:e2:ee:16:84:ca:4e:a2:9c:06:
                    9b:de:8e:12:ac:7f:69:11:94:00:cb:5e:f0:0a:5e:
                    c1:cf:00:d9:d0:57:09:e4:06:fa:00:b7:ae:76:01:
                    e5:bb:ed:00:b2:7e:fd:a1:fc:fa:0d:38:00:e8:fb:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:B3:07:2D:76:A0:AA:C4:1A:91:D4:01:9D:C7:9B:43:B3:30:81
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32362e302f32332d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:de:4b:76:f3:59:32:68:9e:1a:0f:09:07:5e:b2:8d:ef:d0:
         8f:ea:50:ef:57:06:f9:07:b8:4f:27:e1:50:97:e7:5b:66:bb:
         b8:f6:4d:52:b4:c6:2c:36:eb:f1:1e:68:19:ba:14:a6:17:99:
         6b:73:d4:a8:cf:66:75:d8:37:71:1a:c3:79:e9:2e:3d:c4:98:
         77:3f:77:98:9a:0e:d7:fc:ed:e3:da:3f:08:10:8d:5d:c1:80:
         24:94:1c:9a:c0:9f:f0:17:ec:7e:1d:21:ce:4d:bc:e7:87:45:
         19:e6:e2:f0:2f:f1:9a:92:2b:ed:09:c3:89:91:af:a9:ff:7e:
         ba:0f:20:39:5c:4e:58:8b:49:f9:93:e8:8c:a3:45:b5:0d:a5:
         6d:b8:8b:f6:ad:86:f0:63:75:1f:6b:4c:da:af:b8:7c:24:64:
         23:a5:7a:22:20:0a:5d:60:a8:53:d1:f8:eb:fb:e6:b7:a8:b1:
         c2:48:e6:dd:1b:dd:b6:ba:bc:8d:67:99:b3:25:52:f5:f0:0c:
         4e:c5:bd:e6:71:88:1c:c0:73:e2:60:b3:48:6c:bf:5b:1b:9c:
         14:04:49:3a:10:c9:98:65:a6:6a:34:46:01:82:0a:3e:e2:2e:
         6c:28:9c:b1:19:eb:58:f2:5f:cf:59:4c:32:37:b8:ab:62:94:
         c4:3f:75:6e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUB1dj4v/XzK2teUM+cLQpgpzogLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDAzMDUxNzU1MzVaFw0yNTAzMDQxODAwMzVaMDMxMTAvBgNV
BAMTKDRBM0NCMzA3MkQ3NkEwQUFDNDFBOTFENDAxOURDNzlCNDNCMzMwODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uIfrf8Th/fFrpD+woIs5x3py
/RXn5rbUr4q8jAcgGcvnjWEA8xPPcBqyZxiNeVyi9sBluKcSUlW/651oX1yMdNaO
I+NgpxMueDtp8tzrHPDJtcZ+owwZYx3bh7kXLE7qf+rOktz3V0cc3Hi64+KW/Qz4
KlETMCzuIqQUX3D/7efZFolxeUafPiDaxD8GBL3PLMt4QIyUg8zxtQKPooPkoLf9
SlR1KSjCW+F3b8CZU9NsviO9HhU5VMIZmweONH4WUcdbACCeLuLuFoTKTqKcBpve
jhKsf2kRlADLXvAKXsHPANnQVwnkBvoAt652AeW77QCyfv2h/PoNOADo+9cNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSjyzBy12oKrEGpHUAZ3Hm0OzMIEwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzNjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+WhowDQYJ
KoZIhvcNAQELBQADggEBAHDeS3bzWTJonhoPCQdeso3v0I/qUO9XBvkHuE8n4VCX
51tmu7j2TVK0xiw26/EeaBm6FKYXmWtz1KjPZnXYN3Eaw3npLj3EmHc/d5iaDtf8
7ePaPwgQjV3BgCSUHJrAn/AX7H4dIc5NvOeHRRnm4vAv8ZqSK+0Jw4mRr6n/froP
IDlcTliLSfmT6IyjRbUNpW24i/athvBjdR9rTNqvuHwkZCOleiIgCl1gqFPR+Ov7
5reoscJI5t0b3ba6vI1nmbMlUvXwDE7FveZxiBzAc+Jgs0hsv1sbnBQESToQyZhl
pmo0RgGCCj7iLmwonLEZ61jyX89ZTDI3uKtilMQ/dW4=
-----END CERTIFICATE-----
Generated at Sat May 4 19:57:39 2024 by rpki-client on console-ams.rpki-client.org