Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33322e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e33322e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          e8HB2tJ78edoh+CSwL2NA8s4UO7IIX+Y5L97keg01uw=
Subject key identifier:   F7:CD:B2:B6:F5:4A:94:53:03:6A:B8:0B:CB:6F:1A:3F:57:29:53:FC
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       33756A353CF0F1D218836BB716B63A675D6358DC
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33322e302f32312d3234203d3e203138363738.roa
Signing time:             Thu 13 Feb 2025 14:35:00 +0000
ROA not before:           Thu 13 Feb 2025 14:30:00 +0000
ROA not after:            Thu 12 Feb 2026 14:35:00 +0000
asID:                     18678
IP address blocks:        190.90.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:75:6a:35:3c:f0:f1:d2:18:83:6b:b7:16:b6:3a:67:5d:63:58:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 13 14:30:00 2025 GMT
            Not After : Feb 12 14:35:00 2026 GMT
        Subject: CN=F7CDB2B6F54A9453036AB80BCB6F1A3F572953FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:61:d2:75:a2:1a:2b:e2:a4:a0:ca:97:c2:
                    40:f1:85:b4:73:b8:ad:78:e2:bd:4d:f2:6c:f2:57:
                    e5:8f:d6:91:be:7c:16:4d:63:4b:da:8a:82:9b:5c:
                    56:86:ed:7e:eb:0a:4a:bf:3b:98:7d:8e:bc:c4:60:
                    02:3d:3f:d6:14:6a:ea:a9:47:17:76:97:0f:79:7b:
                    0a:de:2b:0c:55:c3:79:f0:a8:0a:6e:cd:67:e9:0b:
                    c7:4a:87:ff:31:a9:f1:db:ec:bb:6e:d8:a5:b9:93:
                    49:bd:38:cd:9e:45:32:50:d8:71:a8:cf:ca:55:75:
                    f6:fe:cf:5d:51:6e:bd:73:2f:73:8f:77:dc:90:82:
                    f3:0c:45:35:24:7d:9a:12:28:4c:c6:6c:ab:51:40:
                    1b:f5:f4:bd:80:89:ae:6f:ed:c1:02:b3:c7:1e:b8:
                    4c:a4:3c:3a:f2:19:e6:87:80:31:ff:02:77:d4:7c:
                    68:d7:3b:65:06:0a:64:13:5f:72:4b:e1:e2:ca:80:
                    42:10:32:c1:5a:f7:0d:ef:d1:67:a2:77:96:5b:94:
                    d4:34:16:7c:ea:be:27:71:23:23:64:d7:b6:88:51:
                    65:84:32:a1:2d:ba:49:25:a9:b2:7f:6f:2a:39:38:
                    97:29:aa:fe:27:43:15:5a:76:f7:1f:ea:bf:2b:65:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:B2:B6:F5:4A:94:53:03:6A:B8:0B:CB:6F:1A:3F:57:29:53:FC
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33322e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:d3:e6:bf:99:66:5d:00:cb:d4:be:f5:43:a4:f9:9d:8b:e0:
         67:46:7a:0e:37:bb:c7:12:05:a5:f6:61:81:c3:44:36:dd:2c:
         b6:79:b8:47:32:11:13:64:6d:cd:17:8d:86:be:8b:a5:09:fc:
         5c:f5:fa:38:cd:84:75:e1:87:3c:b7:48:80:2a:fa:74:e1:53:
         dd:05:de:ed:b3:ef:e9:cf:27:0e:f8:ad:12:28:ce:4c:69:91:
         c6:44:45:f3:b7:f6:ee:78:6b:fc:90:f1:75:f2:60:bc:28:f7:
         63:84:7b:e8:ca:20:8b:4d:c7:0f:d2:33:9e:e5:b7:9f:b2:0a:
         ec:4d:2c:7a:c8:52:79:70:74:a0:8f:c2:18:b0:1e:e0:16:3b:
         75:f6:99:5e:76:6f:18:ca:66:45:ff:f9:fc:a6:5c:a8:5a:79:
         06:0c:36:26:16:d3:3c:4f:61:e2:f4:14:4a:9a:81:c7:b9:ab:
         85:43:f0:e5:8f:7d:7e:f2:3e:e2:60:34:9b:7e:7f:14:af:b0:
         d5:72:11:3e:41:0c:4c:2c:ad:dd:4b:9c:5f:17:38:1a:8e:e7:
         b0:b0:28:46:b3:51:8c:db:34:95:c0:ce:1a:b5:b3:8b:0b:00:
         40:3a:cd:b4:60:e1:9e:99:5c:bc:ba:14:f9:e9:91:1e:7f:97:
         e9:c2:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:05 2025 by rpki-client