Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34382e302f32322d3234203d3e203237383337.roa
File:                     3139302e39302e34382e302f32322d3234203d3e203237383337.roa (raw, json)
Hash identifier:          okl+6XaIH3b/whlNS4Zbp+WvYlNi80U9NtxouAxItXE=
Subject key identifier:   F6:C5:FC:52:A8:B5:49:4D:13:E1:5F:10:A3:BA:CF:36:8B:10:12:B7
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2ADA7F617345E2BBAAF7D83681DD8D837C07AFDA
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34382e302f32322d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 18:00:47 +0000
ROA not before:           Tue 05 Mar 2024 17:55:47 +0000
ROA not after:            Tue 04 Mar 2025 18:00:47 +0000
asID:                     27837
IP address blocks:        190.90.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:da:7f:61:73:45:e2:bb:aa:f7:d8:36:81:dd:8d:83:7c:07:af:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:47 2024 GMT
            Not After : Mar  4 18:00:47 2025 GMT
        Subject: CN=F6C5FC52A8B5494D13E15F10A3BACF368B1012B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:d3:4c:94:f0:45:4c:79:c4:56:aa:ba:2a:
                    69:ea:25:5a:aa:e4:f2:cd:92:e6:6f:71:61:05:15:
                    80:19:44:8c:8e:7b:c3:d8:63:5a:99:a9:6e:e0:2e:
                    3e:3f:37:5e:69:d7:c6:c3:61:02:ad:fa:bb:2f:25:
                    0a:3c:68:2b:b2:60:cb:de:f5:9e:78:c0:ff:c9:89:
                    af:91:02:4a:65:ae:9c:d1:ef:28:9e:48:5f:fc:ae:
                    2e:95:75:dc:4a:2f:52:db:66:fe:29:ee:a5:bc:a4:
                    54:9e:6f:86:9e:b1:71:08:2b:62:ac:4a:79:99:17:
                    8d:41:f0:63:44:1f:f3:3b:fd:ae:1d:8a:b4:87:4d:
                    19:3a:4f:e4:76:a1:23:ba:d0:f0:e5:f9:da:b1:83:
                    e1:ed:89:1a:1b:15:a3:cc:8c:d1:fb:c5:43:01:52:
                    36:a9:1b:0e:bd:6f:cc:e8:25:06:e2:6e:9d:da:f5:
                    c7:4d:3d:a2:16:5e:13:df:e7:cb:ac:f6:8a:c2:b4:
                    37:71:a5:1d:b2:e1:3f:c3:56:e0:90:38:bb:56:63:
                    ab:27:31:df:e3:72:a1:90:b7:c3:15:42:9f:f3:a8:
                    0a:f7:c5:9b:1d:4c:81:2b:7c:02:47:cb:9b:6d:87:
                    56:42:b1:ec:78:ad:1f:fb:76:63:23:ff:74:b0:46:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:FC:52:A8:B5:49:4D:13:E1:5F:10:A3:BA:CF:36:8B:10:12:B7
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34382e302f32322d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:b7:ea:79:07:71:1c:6b:b5:3d:88:e1:ee:36:1e:fc:4c:
         23:37:5d:a7:72:41:25:62:11:f8:b6:6a:85:37:14:f1:95:ef:
         33:1c:70:3f:20:73:58:b5:73:63:22:9a:56:3e:8c:bd:48:07:
         aa:44:3e:77:de:07:ad:41:85:88:c9:dc:de:2e:ba:6b:d7:21:
         ad:48:86:24:cc:98:95:a7:97:33:cc:e0:a9:aa:0a:51:ef:a1:
         22:3f:fe:ce:ff:5e:c5:98:f8:43:5d:dd:6a:a2:cd:c5:02:02:
         65:7d:83:45:f3:53:8f:22:af:bd:0e:08:76:c7:aa:42:93:e9:
         fe:7e:54:50:76:50:c7:f3:fd:b0:7a:a6:45:41:b4:df:46:81:
         4b:f8:a9:0c:14:ac:40:9e:31:0b:e9:6a:30:d1:1c:53:db:73:
         05:21:06:80:f0:14:57:7c:fb:ed:99:04:4f:9b:64:35:c1:49:
         d1:eb:6c:58:06:2f:82:f8:31:78:21:01:99:c1:34:84:d2:57:
         a4:f6:3a:01:9e:65:3b:ff:34:f1:22:8d:3f:16:ba:65:82:fc:
         d1:96:61:e3:13:78:98:38:8f:f0:1a:0f:f8:b5:67:b4:ff:76:
         59:5f:98:92:5f:ca:26:ce:f8:52:44:31:6f:f4:53:6a:aa:1b:
         f7:81:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org