Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e37392e302f32342d3234203d3e20323637373838.roa
File:                     3139302e39302e37392e302f32342d3234203d3e20323637373838.roa (raw, json)
Hash identifier:          WelacvDwu1uuzwYjnxaW72sXhUKialOE+EyOAtQvWl8=
Subject key identifier:   24:F9:0D:9F:A7:5E:14:C5:29:4E:C2:1D:4D:BC:C5:CA:47:95:55:71
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0C6DD5176297C48AF0208C4F813525BDF48965CB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e37392e302f32342d3234203d3e20323637373838.roa
Signing time:             Tue 05 Mar 2024 18:00:31 +0000
ROA not before:           Tue 05 Mar 2024 17:55:31 +0000
ROA not after:            Tue 04 Mar 2025 18:00:31 +0000
asID:                     267788
IP address blocks:        190.90.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:d5:17:62:97:c4:8a:f0:20:8c:4f:81:35:25:bd:f4:89:65:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:31 2024 GMT
            Not After : Mar  4 18:00:31 2025 GMT
        Subject: CN=24F90D9FA75E14C5294EC21D4DBCC5CA47955571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:98:e0:a8:49:13:fe:b1:25:11:1d:28:a0:
                    ab:1c:00:f3:a7:5a:db:f3:89:5f:83:bf:dd:28:66:
                    1f:ec:47:5e:10:c2:94:00:c2:44:62:b4:99:78:db:
                    ee:85:e6:20:7c:4d:8b:f2:04:69:d1:7a:82:6e:1b:
                    f6:86:e8:f3:dc:87:78:dd:89:4b:46:49:da:e4:db:
                    c8:5f:17:45:4d:58:a4:60:76:f0:30:25:5e:f2:19:
                    55:b1:50:ba:9e:7e:41:3a:c9:22:f8:53:1c:e6:4d:
                    01:06:bb:f5:7c:a7:c1:12:5d:4a:21:12:58:2c:eb:
                    67:08:48:e2:60:15:29:fa:0c:5c:3b:ce:52:f1:33:
                    28:f3:8a:15:71:51:3e:7c:37:bb:1d:39:37:65:97:
                    c8:0a:b6:69:61:27:01:00:ce:71:62:17:a2:d8:fd:
                    b3:f8:31:c0:87:dd:16:6d:12:a3:82:09:fd:50:98:
                    c4:e6:59:2f:11:6b:1b:1d:10:1e:a3:6d:7f:23:b9:
                    96:59:80:33:33:e6:39:68:3b:21:e2:10:c8:ee:e0:
                    a9:53:26:36:5f:07:e4:f2:7e:01:5c:fc:c7:63:c1:
                    5b:c4:84:ce:7e:7c:13:04:8c:40:ff:69:d2:5f:e9:
                    1a:5e:31:7d:d8:06:27:3f:39:a8:28:5f:19:2c:b7:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:0D:9F:A7:5E:14:C5:29:4E:C2:1D:4D:BC:C5:CA:47:95:55:71
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e37392e302f32342d3234203d3e20323637373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ae:d7:d3:2f:d5:4b:88:1b:66:90:89:3f:93:4d:39:1e:e8:
         0a:e5:a0:8c:b2:17:79:b3:52:72:ef:4a:52:5d:15:2e:1c:b5:
         dd:6b:ca:7b:9d:28:eb:84:68:16:e3:86:99:60:3e:38:da:e4:
         c3:4b:55:94:4e:d0:36:f6:0c:a3:03:98:d3:8e:ee:dc:76:fe:
         fc:b6:d6:62:6c:70:03:31:ae:d7:e2:e1:3a:4a:3d:be:41:f4:
         be:cc:c3:a7:0c:f8:a1:ea:e2:be:39:29:b2:3e:55:b9:5c:20:
         af:f6:fd:d1:7c:71:24:be:d6:79:31:30:3c:8a:73:28:96:03:
         c3:14:97:d3:2e:40:72:08:92:3b:81:d8:8e:11:d3:24:e3:dd:
         14:7b:f4:f3:23:36:aa:0f:f3:5f:ae:f1:1c:d4:12:59:ef:2c:
         3d:2e:f2:b5:d3:94:53:ad:1c:ca:e1:f7:66:21:c3:a3:8f:23:
         f9:d0:c4:db:30:20:f6:15:86:f0:f7:c7:b7:29:66:6b:46:53:
         43:73:83:01:a9:db:c7:00:92:a4:5f:c9:d5:d4:11:95:ef:58:
         69:3d:c1:1d:5c:9c:a7:5d:d5:ca:e2:51:24:20:ef:cd:80:0b:
         20:74:ee:88:60:8f:b1:ce:62:49:78:d1:44:01:0f:87:b8:a2:
         ca:f8:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:18:54 2024 by rpki-client on console-fra.rpki-client.org