Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34382e302f32322d3234203d3e203237383337.roa
File:                     3139302e39302e34382e302f32322d3234203d3e203237383337.roa (raw, json)
Hash identifier:          szAUjcyF+diOHJvA7r/lGXUZw/pffJp1nBz2Gjl2P4E=
Subject key identifier:   05:DB:E5:88:8C:80:4B:56:8E:A6:37:8E:55:C6:44:A0:99:E3:A1:08
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       32B6DF4A1E0DBAA302CDE2A0D0AFE96CD55B67A9
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34382e302f32322d3234203d3e203237383337.roa
Signing time:             Tue 04 Feb 2025 18:17:21 +0000
ROA not before:           Tue 04 Feb 2025 18:12:21 +0000
ROA not after:            Tue 03 Feb 2026 18:17:21 +0000
asID:                     27837
IP address blocks:        190.90.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b6:df:4a:1e:0d:ba:a3:02:cd:e2:a0:d0:af:e9:6c:d5:5b:67:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:21 2025 GMT
            Not After : Feb  3 18:17:21 2026 GMT
        Subject: CN=05DBE5888C804B568EA6378E55C644A099E3A108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:56:18:2e:fa:ad:47:95:48:00:84:71:17:64:
                    86:7c:a9:d9:05:76:a1:ed:74:c5:5b:02:39:14:86:
                    82:71:22:1f:d0:dd:21:3e:88:cf:30:c0:2f:60:db:
                    47:aa:9d:83:3c:07:96:e9:72:d7:34:68:79:d5:e1:
                    18:e4:da:5a:2a:5b:b6:6e:9a:95:c3:13:ab:d4:1d:
                    8b:82:3b:77:a5:1e:fa:d8:fe:80:a0:b0:d6:fc:cc:
                    e4:32:8a:61:d0:1a:ae:83:c3:43:89:73:44:a6:f1:
                    48:83:c0:a3:83:39:55:2a:dc:9c:18:3d:51:4b:e8:
                    07:7e:64:fa:74:75:87:0c:63:eb:8a:11:22:6f:bf:
                    39:36:2e:7a:e5:24:b0:87:fe:82:9a:08:c8:5c:3c:
                    58:31:b2:31:84:e0:24:aa:d6:4c:bd:87:40:54:61:
                    51:f0:67:75:71:7f:ca:6c:d3:a3:ce:d0:4c:c4:c7:
                    97:f8:49:fe:19:06:b9:4c:d7:77:09:89:a7:19:88:
                    da:4f:98:49:41:a5:ed:24:32:bf:90:5e:2e:06:b8:
                    05:7e:65:d3:f6:8f:e1:95:f3:d4:a1:e3:a2:41:60:
                    21:fa:7a:81:91:a0:fa:1e:a6:50:eb:38:ae:4a:38:
                    05:bf:a9:9d:cf:55:d5:32:09:dc:a1:53:70:59:d0:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:E5:88:8C:80:4B:56:8E:A6:37:8E:55:C6:44:A0:99:E3:A1:08
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34382e302f32322d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:68:78:65:d6:63:29:13:b0:d0:f2:6f:bb:1e:fc:68:1b:
         c6:1c:ed:5e:4c:91:a8:44:1f:df:5e:5b:8a:ec:88:e0:3e:b8:
         ea:69:34:8f:35:aa:1a:bb:95:15:aa:19:ee:7b:c0:c7:91:3d:
         35:78:51:18:55:37:53:2e:79:a1:3a:ff:67:66:f9:b9:c1:c3:
         28:32:dc:cf:02:41:f5:77:06:bf:37:75:15:b3:9a:c6:3c:f4:
         30:de:d9:f3:ee:3e:8e:e7:e3:76:59:2b:39:a9:bd:ad:9b:b8:
         35:0c:ad:31:b9:03:e5:f4:37:b6:34:c6:0a:0a:eb:4a:5d:91:
         7f:b1:c7:59:d4:b3:62:cf:37:dc:e5:b2:89:d0:43:48:aa:52:
         e1:44:f8:a9:5a:08:61:f6:5f:30:f8:dd:fa:3b:ac:5d:95:d1:
         9c:5b:ea:28:41:91:62:b9:46:17:07:9f:19:b3:b3:c1:c6:d7:
         f9:85:b5:ea:ba:e3:a4:0c:3f:91:dc:0f:79:a5:32:f1:c4:d0:
         44:e5:d2:8f:4b:a7:51:48:4e:d4:dc:ae:8c:42:c7:5c:03:d4:
         70:ff:79:22:ea:bb:c0:7a:32:74:80:cf:9a:da:6d:95:f0:3b:
         80:13:b9:c5:a6:0f:a3:f5:a0:d9:cd:9d:4a:85:85:2c:c0:4d:
         05:3a:7a:34
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMrbfSh4NuqMCzeKg0K/pbNVbZ6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMjFaFw0yNjAyMDMxODE3MjFaMDMxMTAvBgNV
BAMTKDA1REJFNTg4OEM4MDRCNTY4RUE2Mzc4RTU1QzY0NEEwOTlFM0ExMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoVhgu+q1HlUgAhHEXZIZ8qdkF
dqHtdMVbAjkUhoJxIh/Q3SE+iM8wwC9g20eqnYM8B5bpctc0aHnV4Rjk2loqW7Zu
mpXDE6vUHYuCO3elHvrY/oCgsNb8zOQyimHQGq6Dw0OJc0Sm8UiDwKODOVUq3JwY
PVFL6Ad+ZPp0dYcMY+uKESJvvzk2LnrlJLCH/oKaCMhcPFgxsjGE4CSq1ky9h0BU
YVHwZ3Vxf8ps06PO0EzEx5f4Sf4ZBrlM13cJiacZiNpPmElBpe0kMr+QXi4GuAV+
ZdP2j+GV89Sh46JBYCH6eoGRoPoeplDrOK5KOAW/qZ3PVdUyCdyhU3BZ0M3vAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUBdvliIyAS1aOpjeOVcZEoJnjoQgwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzQzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczODMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+WjAwDQYJ
KoZIhvcNAQELBQADggEBAHHpaHhl1mMpE7DQ8m+7HvxoG8Yc7V5MkahEH99eW4rs
iOA+uOppNI81qhq7lRWqGe57wMeRPTV4URhVN1MueaE6/2dm+bnBwygy3M8CQfV3
Br83dRWzmsY89DDe2fPuPo7n43ZZKzmpva2buDUMrTG5A+X0N7Y0xgoK60pdkX+x
x1nUs2LPN9zlsonQQ0iqUuFE+KlaCGH2XzD43fo7rF2V0Zxb6ihBkWK5RhcHnxmz
s8HG1/mFteq646QMP5HcD3mlMvHE0ETl0o9Lp1FITtTcroxCx1wD1HD/eSLqu8B6
MnSAz5rabZXwO4ATucWmD6P1oNnNnUqFhSzATQU6ejQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:37 2025 by rpki-client