Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33352e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e33352e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          Gvj8w4F6aEmCASWu0bspRS1xuqWk9C/TEGQ7J8V5D/0=
Subject key identifier:   49:CC:A5:C1:C2:86:56:6F:F9:8C:B4:B4:F1:56:57:33:52:38:8C:A1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2C8270F28354AA18CDAC5BB298D04DD3D8A539B2
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33352e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 04 Feb 2025 18:17:28 +0000
ROA not before:           Tue 04 Feb 2025 18:12:28 +0000
ROA not after:            Tue 03 Feb 2026 18:17:28 +0000
asID:                     26619
IP address blocks:        190.90.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:70:f2:83:54:aa:18:cd:ac:5b:b2:98:d0:4d:d3:d8:a5:39:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:28 2025 GMT
            Not After : Feb  3 18:17:28 2026 GMT
        Subject: CN=49CCA5C1C286566FF98CB4B4F156573352388CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:fa:75:7d:3b:6e:7e:8f:fa:bb:d9:3d:7f:
                    13:a8:b7:f9:a3:9e:5f:29:3b:61:66:67:6f:8e:21:
                    c4:17:0b:0d:ad:a6:e3:ee:1a:ea:49:2a:51:08:61:
                    94:ad:33:f2:db:1a:d8:a2:0d:09:1b:da:f2:95:de:
                    66:21:cd:84:59:3f:50:e9:ed:10:f5:a8:cf:9c:e8:
                    6d:cf:b3:66:69:95:c4:01:ed:fb:f4:7b:ef:59:84:
                    44:ef:e1:53:e8:79:c9:e2:b6:d0:12:50:a4:8f:29:
                    07:43:20:2a:8b:f1:7e:12:64:c3:cb:89:39:87:77:
                    6f:d7:e9:c1:f9:2f:ac:57:c2:95:56:91:cb:78:ff:
                    45:7c:b8:1e:d4:b0:3e:82:33:f8:30:d5:8c:8b:85:
                    13:18:c9:c0:39:e2:17:d9:63:c6:95:71:c7:1c:d9:
                    02:5f:e9:d9:e5:60:c6:43:3f:1b:aa:bc:72:37:02:
                    bd:1c:72:87:4c:de:63:97:70:4d:87:18:e5:14:07:
                    30:ac:4d:a7:16:f1:65:c0:06:a3:cf:2c:0c:f4:72:
                    d4:bc:4b:1b:c0:62:3c:4c:c9:17:3c:6f:f5:14:a4:
                    bd:4f:a4:47:19:d9:06:fe:36:88:38:ec:9c:dc:a6:
                    91:66:65:51:b5:02:d4:86:b0:b9:75:9e:0d:d0:f5:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:A5:C1:C2:86:56:6F:F9:8C:B4:B4:F1:56:57:33:52:38:8C:A1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33352e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:60:5f:5e:8c:12:06:95:6f:90:f1:f3:32:40:3c:0a:1c:
         f4:3e:21:93:f0:13:e8:99:6c:fd:b5:83:07:61:0d:4b:ae:cf:
         ac:78:6e:e0:1e:44:2b:7c:52:71:ae:cf:44:55:17:e5:94:4a:
         0d:a3:6f:42:75:49:d8:89:79:36:02:49:ce:73:a9:0e:38:d2:
         ad:43:14:02:78:ec:58:51:fb:94:53:03:81:32:7e:d4:70:ae:
         7c:19:9e:91:fd:13:2b:cd:af:45:25:69:3a:68:22:cf:ce:71:
         7d:16:63:9a:83:f1:b8:65:ae:98:ff:42:9b:50:2a:1d:5d:fd:
         01:79:f5:48:6e:0e:8d:41:a9:b8:36:af:e9:ab:ec:28:33:a6:
         74:2f:5e:76:ae:a7:9d:d3:e8:58:bd:36:bd:af:cd:d6:ff:87:
         d9:17:07:0f:7a:0c:0f:cc:98:53:5a:d9:0f:41:c0:b1:10:13:
         03:de:b6:20:1c:ae:08:c2:1a:0e:99:69:e4:7f:c5:8d:7e:bf:
         fd:ae:5b:7f:2e:b1:73:b2:83:c0:47:c1:1d:10:4d:f2:3d:44:
         33:07:3c:66:ae:d7:22:6d:b4:d3:f0:6d:91:a6:6e:cf:59:23:
         a1:51:63:24:62:f2:74:33:53:59:b4:d5:5c:d5:dc:5a:72:0a:
         dc:30:67:c6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULIJw8oNUqhjNrFuymNBN09ilObIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMjhaFw0yNjAyMDMxODE3MjhaMDMxMTAvBgNV
BAMTKDQ5Q0NBNUMxQzI4NjU2NkZGOThDQjRCNEYxNTY1NzMzNTIzODhDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFI/p1fTtufo/6u9k9fxOot/mj
nl8pO2FmZ2+OIcQXCw2tpuPuGupJKlEIYZStM/LbGtiiDQkb2vKV3mYhzYRZP1Dp
7RD1qM+c6G3Ps2ZplcQB7fv0e+9ZhETv4VPoecnittASUKSPKQdDICqL8X4SZMPL
iTmHd2/X6cH5L6xXwpVWkct4/0V8uB7UsD6CM/gw1YyLhRMYycA54hfZY8aVcccc
2QJf6dnlYMZDPxuqvHI3Ar0ccodM3mOXcE2HGOUUBzCsTacW8WXABqPPLAz0ctS8
SxvAYjxMyRc8b/UUpL1PpEcZ2Qb+Nog47JzcppFmZVG1AtSGsLl1ng3Q9R/9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUScylwcKGVm/5jLS08VZXM1I4jKEwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzMzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+WiMwDQYJ
KoZIhvcNAQELBQADggEBABKsYF9ejBIGlW+Q8fMyQDwKHPQ+IZPwE+iZbP21gwdh
DUuuz6x4buAeRCt8UnGuz0RVF+WUSg2jb0J1SdiJeTYCSc5zqQ440q1DFAJ47FhR
+5RTA4EyftRwrnwZnpH9EyvNr0UlaTpoIs/OcX0WY5qD8bhlrpj/QptQKh1d/QF5
9UhuDo1Bqbg2r+mr7CgzpnQvXnaup53T6Fi9Nr2vzdb/h9kXBw96DA/MmFNa2Q9B
wLEQEwPetiAcrgjCGg6ZaeR/xY1+v/2uW38usXOyg8BHwR0QTfI9RDMHPGau1yJt
tNPwbZGmbs9ZI6FRYyRi8nQzU1m01VzV3FpyCtwwZ8Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:08 2025 by rpki-client