Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36302e302f32322d3234203d3e203138363738.roa
File:                     3139302e39302e36302e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          lOALYlkP+6R+BSKLu4wywqq7pqpPLwCCGa7MulMOiJU=
Subject key identifier:   6B:63:07:2C:23:BA:6A:54:CF:F2:60:DB:EF:82:F4:EA:A8:C3:69:0D
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7EC83BE188FAFE8015A1D899CD7E5190B9B97099
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36302e302f32322d3234203d3e203138363738.roa
Signing time:             Thu 13 Feb 2025 15:45:00 +0000
ROA not before:           Thu 13 Feb 2025 15:40:00 +0000
ROA not after:            Thu 12 Feb 2026 15:45:00 +0000
asID:                     18678
IP address blocks:        190.90.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c8:3b:e1:88:fa:fe:80:15:a1:d8:99:cd:7e:51:90:b9:b9:70:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 13 15:40:00 2025 GMT
            Not After : Feb 12 15:45:00 2026 GMT
        Subject: CN=6B63072C23BA6A54CFF260DBEF82F4EAA8C3690D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:d1:2e:03:96:b0:1f:a2:67:2b:5d:ee:0c:
                    94:81:ad:3e:6b:c4:4d:9d:20:75:96:cc:9a:d7:ee:
                    c3:88:b4:38:e3:19:09:43:60:c1:e1:8e:6d:0d:69:
                    92:f3:87:7f:c0:4a:00:46:ad:73:6f:61:c6:27:97:
                    84:d1:18:eb:5f:fd:03:72:ad:27:74:e6:ad:73:43:
                    42:04:cc:c6:01:49:ca:63:7e:70:81:2d:49:62:73:
                    42:f0:7f:19:fc:c4:6b:07:17:4a:c4:92:c6:77:6a:
                    45:1f:b7:9c:29:3e:a8:cb:5b:83:69:96:b7:79:49:
                    d2:83:b9:43:88:dd:a7:12:ba:4b:d5:94:53:49:f0:
                    61:bb:43:ff:59:50:f4:d8:34:0e:14:92:b6:71:bb:
                    34:09:36:a6:f4:f3:88:83:e2:06:f8:2b:cc:a1:7e:
                    77:a8:22:d2:01:6d:ac:51:fa:d6:ad:8e:dc:9c:0c:
                    f4:ac:74:0a:09:61:c8:12:ce:67:be:aa:ce:13:48:
                    c5:23:91:80:1d:4a:67:72:ca:83:7e:7f:af:ff:8b:
                    14:d4:d0:fc:ac:31:d9:8f:fa:07:c9:2d:52:b1:96:
                    c9:0f:18:22:a7:8d:a7:9e:7f:aa:fb:22:3b:6b:5c:
                    9c:3f:98:44:75:54:ee:1a:3e:9f:4a:25:1f:c1:68:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:07:2C:23:BA:6A:54:CF:F2:60:DB:EF:82:F4:EA:A8:C3:69:0D
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36302e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:35:de:7e:da:ac:5e:17:41:fe:2b:1b:8a:fb:9e:ea:03:
         bf:f3:59:3f:ec:27:b6:31:ba:fa:de:57:96:3c:8e:47:85:2d:
         76:43:89:37:6f:c0:04:c9:c4:3a:c0:ef:77:cb:ba:3e:ce:e2:
         ed:10:d1:32:91:34:a6:52:ad:f3:2d:b1:90:16:69:12:2b:8c:
         3b:44:3c:8d:42:10:78:a5:fe:29:d1:d0:08:6e:0c:6d:90:85:
         56:35:61:14:47:da:d2:08:cb:c5:8c:09:c3:08:6c:9c:e5:c9:
         38:4c:cf:0e:32:51:a6:48:f7:a2:77:6f:5f:31:85:ea:5c:9b:
         28:a1:15:4b:4e:4a:6e:cf:38:ca:ee:28:bd:4c:f6:83:8b:2f:
         e5:7b:a7:ab:40:cc:22:e7:1f:e6:13:92:5b:fd:ad:a6:d8:03:
         c9:4c:da:2a:06:b6:a2:66:d9:b0:7b:b3:d3:91:d7:64:5d:0f:
         fb:a1:88:ea:0a:1c:b9:e7:31:e7:c3:cd:9d:b6:7f:b9:2c:39:
         59:75:45:0c:a0:8f:ae:63:fd:06:64:eb:69:59:da:48:f9:bc:
         d2:1b:b5:65:f1:6e:cd:7e:c2:d9:b0:23:71:62:5d:10:2f:ea:
         f3:a2:35:72:4b:3b:a9:bb:27:87:12:ab:74:4b:07:88:23:d3:
         f1:ed:fa:68
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUfsg74Yj6/oAVodiZzX5RkLm5cJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMTMxNTQwMDBaFw0yNjAyMTIxNTQ1MDBaMDMxMTAvBgNV
BAMTKDZCNjMwNzJDMjNCQTZBNTRDRkYyNjBEQkVGODJGNEVBQThDMzY5MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnNEuA5awH6JnK13uDJSBrT5r
xE2dIHWWzJrX7sOItDjjGQlDYMHhjm0NaZLzh3/ASgBGrXNvYcYnl4TRGOtf/QNy
rSd05q1zQ0IEzMYBScpjfnCBLUlic0Lwfxn8xGsHF0rEksZ3akUft5wpPqjLW4Np
lrd5SdKDuUOI3acSukvVlFNJ8GG7Q/9ZUPTYNA4UkrZxuzQJNqb084iD4gb4K8yh
fneoItIBbaxR+tatjtycDPSsdAoJYcgSzme+qs4TSMUjkYAdSmdyyoN+f6//ixTU
0PysMdmP+gfJLVKxlskPGCKnjaeef6r7IjtrXJw/mER1VO4aPp9KJR/BaCpdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUa2MHLCO6alTP8mDb74L06qjDaQ0wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+WjwwDQYJ
KoZIhvcNAQELBQADggEBABrJNd5+2qxeF0H+KxuK+57qA7/zWT/sJ7YxuvreV5Y8
jkeFLXZDiTdvwATJxDrA73fLuj7O4u0Q0TKRNKZSrfMtsZAWaRIrjDtEPI1CEHil
/inR0AhuDG2QhVY1YRRH2tIIy8WMCcMIbJzlyThMzw4yUaZI96J3b18xhepcmyih
FUtOSm7POMruKL1M9oOLL+V7p6tAzCLnH+YTklv9rabYA8lM2ioGtqJm2bB7s9OR
12RdD/uhiOoKHLnnMefDzZ22f7ksOVl1RQygj65j/QZk62lZ2kj5vNIbtWXxbs1+
wtmwI3FiXRAv6vOiNXJLO6m7J4cSq3RLB4gj0/Ht+mg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 22:07:06 2025 by rpki-client