Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36342e302f32302d3234203d3e203138363738.roa
File:                     3139302e39302e36342e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          Z3sD9GF52Px89Fn/FQ+uFDtSN+s0+OhC0zyGo1GZaMU=
Subject key identifier:   B5:61:33:99:5B:19:BD:D5:94:5D:67:4F:C6:67:1F:76:C8:B4:47:9B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0C8D0A8324F056263A37CAB52B754A4D98D77A91
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36342e302f32302d3234203d3e203138363738.roa
Signing time:             Thu 13 Feb 2025 19:50:00 +0000
ROA not before:           Thu 13 Feb 2025 19:45:00 +0000
ROA not after:            Thu 12 Feb 2026 19:50:00 +0000
asID:                     18678
IP address blocks:        190.90.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8d:0a:83:24:f0:56:26:3a:37:ca:b5:2b:75:4a:4d:98:d7:7a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 13 19:45:00 2025 GMT
            Not After : Feb 12 19:50:00 2026 GMT
        Subject: CN=B56133995B19BDD5945D674FC6671F76C8B4479B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:88:85:7f:2a:53:00:da:29:96:53:b2:ba:
                    73:1f:f0:73:e9:5a:4f:98:bb:a2:05:a6:f0:c0:73:
                    2e:a0:c3:dd:80:5f:11:ae:8d:4f:9d:d3:8c:9c:61:
                    1d:0a:34:2d:ff:cf:0e:82:63:cb:60:92:f3:f8:e9:
                    d3:fe:29:37:97:26:d5:f9:b9:79:00:57:42:fc:0f:
                    95:b6:fa:b6:87:b8:60:57:04:46:c3:9c:8d:9d:87:
                    4a:d6:ca:c2:2c:5c:1d:17:1c:0e:e6:c8:b6:db:95:
                    2b:6a:ee:a4:ce:92:f4:4d:7c:7b:fb:d7:57:1a:c9:
                    36:62:c7:18:c4:95:e8:5e:11:0f:ab:c8:7d:7f:2e:
                    16:8c:ee:eb:71:ef:17:22:cb:d4:50:54:3a:65:9e:
                    a8:a1:1b:37:ee:4d:9d:7e:aa:20:c3:e1:3a:c2:02:
                    4b:84:d7:74:2f:67:c0:19:a8:2d:6f:cd:bf:a0:a7:
                    f9:c3:5f:6d:03:d4:c8:c2:be:11:83:9e:68:e5:03:
                    d9:da:81:c3:56:60:55:31:f8:66:b3:c8:5c:ac:dc:
                    63:d5:95:f8:16:9b:59:19:a5:0e:aa:a9:cd:11:7f:
                    02:0c:a9:5c:de:ef:02:90:e4:54:70:83:6d:ee:7a:
                    d5:2c:a0:8f:56:69:99:8f:20:f4:e0:1a:ce:9c:64:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:33:99:5B:19:BD:D5:94:5D:67:4F:C6:67:1F:76:C8:B4:47:9B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36342e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:7b:4c:a9:8b:3e:9b:16:3f:c3:f3:18:03:b9:03:9d:77:
         23:0a:55:0e:79:03:07:d7:84:30:60:d2:db:1b:6b:5e:fe:97:
         f2:51:e8:2a:42:30:72:56:9f:df:30:6a:9f:06:28:89:69:9a:
         21:58:10:13:89:2e:15:ae:ad:97:a6:bf:e1:6f:b8:a2:19:b2:
         1e:d2:39:66:f5:a0:65:0f:2b:17:4a:e3:2e:b2:39:0e:e8:5c:
         5b:6c:07:6c:73:bb:5c:4b:48:f3:e0:d6:51:82:09:1d:2b:1d:
         07:bd:a6:2b:b6:84:cc:97:ea:cc:32:3c:ac:b2:0d:be:35:a7:
         52:f1:84:71:e6:a1:cc:62:06:ea:6e:05:a3:a0:66:c5:b8:af:
         f7:f3:f6:7b:4b:59:14:42:aa:30:aa:78:6c:9f:e3:48:fa:8b:
         42:be:1c:e7:da:79:c4:44:d3:73:24:c3:eb:21:67:3d:89:99:
         92:d5:0e:4c:a3:71:c5:24:c6:d7:85:a0:18:42:14:2f:63:3c:
         eb:62:05:6c:f3:05:bd:db:36:99:cf:c1:0c:10:5f:75:3f:78:
         ad:aa:39:e2:4a:ed:38:a4:6b:6b:0e:77:da:90:33:b2:61:95:
         94:67:83:5c:90:4a:5d:24:4f:c7:38:4f:35:ff:4b:59:df:c3:
         48:cf:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:27 2025 by rpki-client