Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33352e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e33352e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          dT9XZkpBRBWoXt4p68JByzzLnHjZGsqd568K0E2cf40=
Subject key identifier:   F6:FF:15:61:69:81:64:A3:1C:A1:B3:CA:EB:AE:BC:6D:8B:6E:7C:27
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       17BDB613A66E1F975DEAB49CD37708F52B8D0F10
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33352e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 18:00:36 +0000
ROA not before:           Tue 05 Mar 2024 17:55:36 +0000
ROA not after:            Tue 04 Mar 2025 18:00:36 +0000
asID:                     26619
IP address blocks:        190.90.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:b6:13:a6:6e:1f:97:5d:ea:b4:9c:d3:77:08:f5:2b:8d:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:36 2024 GMT
            Not After : Mar  4 18:00:36 2025 GMT
        Subject: CN=F6FF1561698164A31CA1B3CAEBAEBC6D8B6E7C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:4e:fe:8e:77:b9:58:87:7c:6f:b0:32:77:
                    51:6a:44:ff:62:b0:dd:c4:90:fe:39:0f:72:34:c8:
                    90:ea:f8:5d:05:e8:de:26:e5:81:64:c2:37:27:b8:
                    45:9a:1c:3f:21:a3:75:79:8a:63:28:0b:58:4b:2f:
                    0d:07:87:02:7f:5d:e6:11:8a:46:97:43:88:19:93:
                    40:26:53:7e:e7:bc:5d:4e:c3:48:a0:1c:a6:69:93:
                    37:60:3f:23:c8:06:da:f6:95:80:3c:68:e4:bb:52:
                    a6:91:43:d4:93:db:16:f4:4f:7a:d1:ad:f2:ef:d8:
                    b4:e6:ec:25:6c:11:7d:67:c4:47:93:32:ce:bc:24:
                    75:be:2b:14:2e:d3:b5:b1:48:2f:c9:54:2f:70:cd:
                    05:56:1a:b7:39:be:82:a2:21:33:63:36:d8:d6:f2:
                    18:64:53:ae:7f:c8:b7:89:90:fd:e9:6f:bf:d2:e9:
                    aa:46:8a:bb:20:5f:57:f3:e8:22:9c:4f:58:b8:4c:
                    58:29:69:a0:40:79:52:99:ec:b0:ff:ca:5b:3d:7e:
                    83:97:12:48:7c:3a:00:16:d2:09:e7:8c:d5:a8:c1:
                    d5:df:1a:bc:be:2c:99:04:ea:f9:e3:4d:03:51:b1:
                    04:fe:9d:c0:5b:78:93:85:72:06:30:94:92:30:70:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:15:61:69:81:64:A3:1C:A1:B3:CA:EB:AE:BC:6D:8B:6E:7C:27
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33352e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:65:07:25:ae:cd:47:03:77:f4:4e:ef:af:9a:35:dc:59:d9:
         44:8b:b5:2a:05:e7:1b:ba:a8:c3:28:5c:03:6e:00:e3:62:69:
         a6:3f:05:24:77:fb:69:0f:a7:46:8b:28:75:31:08:fe:a5:22:
         03:c3:76:c8:76:cb:08:7d:c8:28:a8:7d:df:38:bc:0b:4c:dc:
         f2:d6:da:ab:bb:5f:0c:15:59:c5:4f:7d:bf:d8:f2:28:0d:91:
         a1:2d:65:07:e0:6b:62:16:a9:4c:93:b0:a0:9b:ea:be:d0:0c:
         d2:7c:5b:73:31:dd:4e:c5:6a:0a:78:7d:dc:05:d6:f3:db:a2:
         2c:57:f9:3a:c3:0b:1d:c7:d4:10:4b:73:71:a3:a5:bf:d0:04:
         af:ea:7a:fd:e9:f8:1a:24:5a:bf:a3:d3:07:d2:4c:7d:56:ad:
         bb:ec:ca:a6:c5:ca:95:52:3e:2f:50:1b:d6:08:60:58:d1:29:
         f2:d5:d4:2d:b6:33:0c:cc:df:ce:23:62:fd:e5:ff:80:54:99:
         1e:03:fd:42:f8:86:2a:4b:01:ca:f9:e3:73:31:ef:bd:d6:16:
         cb:6d:f8:2a:01:57:51:01:0b:f6:4e:ea:7c:ad:35:1e:9d:ca:
         d6:4d:62:e8:0e:0b:cb:83:b8:fb:ac:ab:6c:2a:08:f0:a2:f0:
         bb:e3:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org