Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39302e33382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          gJmtUUPMUiOIwvlo0ftR9oyrHfJ97zyGUSiFiXzCC6Q=
Subject key identifier:   2A:7E:20:51:D1:50:F7:0C:5E:DD:CE:8B:43:F0:B4:DE:E2:57:73:F5
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0E581CE72EFD690EF48424C354EAC531BA7A6D17
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 25 Feb 2025 20:15:02 +0000
ROA not before:           Tue 25 Feb 2025 20:10:02 +0000
ROA not after:            Tue 24 Feb 2026 20:15:02 +0000
asID:                     262589
IP address blocks:        190.90.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:58:1c:e7:2e:fd:69:0e:f4:84:24:c3:54:ea:c5:31:ba:7a:6d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 25 20:10:02 2025 GMT
            Not After : Feb 24 20:15:02 2026 GMT
        Subject: CN=2A7E2051D150F70C5EDDCE8B43F0B4DEE25773F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:86:38:1e:1b:16:06:78:cd:93:1b:2b:78:
                    31:6a:c0:af:9d:32:79:d3:c0:c2:af:6e:e4:cf:00:
                    e3:24:37:58:df:7b:59:1b:28:46:b8:b2:85:44:10:
                    6c:7a:46:36:6f:7e:91:5f:03:16:75:94:55:90:98:
                    dc:85:3e:ef:fe:17:60:52:c5:c7:66:94:a3:b0:c9:
                    8f:1e:1e:97:cd:a6:b5:17:5b:24:53:fa:95:cf:2c:
                    58:ab:f2:02:20:4b:05:52:37:06:af:13:61:e8:0c:
                    b8:f6:df:fe:09:8d:d3:ac:74:a8:07:bd:9a:e6:6f:
                    f9:37:08:bf:1c:55:d0:06:59:4d:8c:ff:51:35:52:
                    ff:dd:27:83:9c:6c:00:6a:1c:2f:2c:98:bc:10:40:
                    61:9b:ea:b2:32:4f:1a:a8:5c:dd:dd:7b:6f:02:eb:
                    94:d2:bc:37:20:63:71:da:e7:22:3a:dc:93:9d:c4:
                    8a:f4:a0:5a:b3:78:06:98:14:d6:80:33:88:71:db:
                    e3:62:93:10:2a:be:b0:09:2d:1f:39:29:4a:94:b3:
                    58:ea:e9:bb:28:34:86:04:11:c0:a4:96:39:ca:4f:
                    67:92:dd:38:e7:31:32:7d:3d:85:40:78:5f:82:8b:
                    67:37:79:59:94:a5:81:a6:89:91:6f:bd:11:af:9f:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:20:51:D1:50:F7:0C:5E:DD:CE:8B:43:F0:B4:DE:E2:57:73:F5
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:72:a2:4e:bd:d1:65:ca:fe:ed:0f:f5:d7:3d:99:18:8a:
         d6:f2:33:f0:78:38:3b:5e:2e:f6:56:87:5d:98:dd:4e:ad:44:
         a8:4d:b1:d3:d0:0b:de:2b:22:cf:c0:fa:c1:3d:37:a4:4e:88:
         23:75:f1:3e:12:11:1c:c9:38:a1:21:d3:37:58:94:20:2d:d9:
         2a:a3:08:05:9c:12:76:5b:8d:ff:e8:05:6f:06:77:1a:a4:28:
         6c:9f:4c:7d:49:ad:a2:c5:78:95:c0:7a:06:93:59:73:40:5d:
         a4:b3:7e:28:25:4b:86:34:eb:b8:dd:e4:d0:0b:57:15:02:e9:
         7a:c5:8e:1d:44:c3:d3:90:90:60:a5:d0:e0:88:fd:7e:9d:24:
         e1:1f:75:a1:91:d6:ff:46:89:50:28:67:28:65:25:3c:1c:de:
         90:34:b9:39:e5:b8:a3:fe:db:c4:cc:6e:50:af:80:3e:a7:84:
         54:5b:04:7c:75:63:4b:89:39:53:5a:d0:b2:bd:a3:a9:fd:a2:
         43:27:2e:e2:7f:ac:d1:39:8c:31:0b:27:55:9e:f8:e9:f3:46:
         72:6c:f8:f8:ce:d3:b6:76:a1:e6:b3:0f:72:71:7a:44:41:47:
         da:c1:ec:90:cb:97:35:a6:05:57:d6:ca:41:bd:23:18:dc:6a:
         a1:c9:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:23 2025 by rpki-client