Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
File:                     3139302e39302e38372e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier:          cevDrccJcvP1v6cp8AHG3WtVC15xt55n8T0e2HXd2nQ=
Subject key identifier:   ED:F6:1D:E8:C4:1E:2D:1A:F8:24:C7:45:DB:8D:A4:9B:B8:F3:AD:7A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3525BFDB9947FFBA3174CDA4F3739F76715F1626
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 18:00:49 +0000
ROA not before:           Tue 05 Mar 2024 17:55:49 +0000
ROA not after:            Tue 04 Mar 2025 18:00:49 +0000
asID:                     27837
IP address blocks:        190.90.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:25:bf:db:99:47:ff:ba:31:74:cd:a4:f3:73:9f:76:71:5f:16:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:49 2024 GMT
            Not After : Mar  4 18:00:49 2025 GMT
        Subject: CN=EDF61DE8C41E2D1AF824C745DB8DA49BB8F3AD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:1d:5d:f9:bd:3b:a8:a8:1e:35:8f:d3:34:
                    6b:04:ce:0b:8d:70:94:19:88:df:cb:9d:6c:60:6f:
                    01:32:54:40:c5:84:b8:65:c1:75:24:ec:07:68:14:
                    cb:1b:34:4b:91:dc:ad:76:39:f5:f2:57:be:51:e5:
                    f5:39:39:fc:e7:3b:1c:ca:6e:6d:6f:bc:5e:96:d8:
                    64:c5:2b:05:db:7a:64:bb:b5:90:79:9e:a6:80:c4:
                    a3:cb:90:69:49:7f:88:ad:69:29:b4:b1:55:b7:9f:
                    40:e6:38:a4:8b:35:2d:e9:b6:21:0f:63:0f:a5:0c:
                    34:ac:13:e7:8b:04:e0:4c:17:05:71:e8:3f:c6:ad:
                    61:1e:b5:c7:e6:51:a8:25:d0:0c:38:90:77:55:07:
                    91:2e:4c:87:e6:86:0f:fe:c7:26:3f:15:4d:02:ee:
                    80:fd:da:25:cb:bd:47:78:82:6b:f5:13:63:22:fe:
                    21:50:db:9c:e2:cc:e5:86:db:35:39:1d:f5:0b:0a:
                    9c:83:a7:a8:0c:16:70:f6:70:ad:89:85:f8:ae:03:
                    d9:fe:5c:9d:d2:08:73:18:d4:ce:3b:29:3f:89:60:
                    9d:b0:6e:90:0f:88:59:5f:a4:4d:33:8e:84:9a:5d:
                    9f:bc:93:c3:4d:07:d7:94:63:69:b9:a8:e0:0e:45:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F6:1D:E8:C4:1E:2D:1A:F8:24:C7:45:DB:8D:A4:9B:B8:F3:AD:7A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:dd:01:9a:41:e7:ff:33:a4:9e:2f:ef:13:b3:82:62:dd:
         51:c8:ad:37:3e:07:66:29:d9:b8:0d:56:06:13:92:99:ed:67:
         d2:73:4b:71:ee:d9:bf:3c:3a:5a:f7:e7:12:2d:6c:2f:b6:b9:
         6a:b7:cf:c2:df:c9:a0:f3:96:32:ba:02:91:25:d1:1a:ad:7c:
         ee:c2:cf:35:0b:f8:95:b0:4a:4f:d0:cf:3b:6e:d5:b1:c0:ba:
         49:6a:07:e7:1c:bb:7a:b3:05:d9:6e:d1:df:e9:6a:fb:68:42:
         34:b9:01:3a:85:fa:e8:0a:73:76:18:95:e8:b2:65:70:78:37:
         b8:11:84:57:90:2c:90:ea:1e:51:b9:6c:ef:61:f9:b7:36:9a:
         5d:ec:62:65:99:5b:3b:77:4b:68:89:b6:57:e2:02:f8:5b:4f:
         e3:4a:d8:e7:6a:98:ad:5a:3f:1b:95:29:d2:36:b6:7b:bc:1a:
         02:7d:7b:ac:2f:31:a6:53:0a:5b:c4:7b:71:54:fa:70:2c:0e:
         fa:a7:b7:51:a7:c6:dc:3d:6d:d2:df:d6:68:40:85:c4:b0:a8:
         ba:81:93:36:bf:26:4a:54:00:dd:6d:51:99:bc:b0:bb:a5:3a:
         14:e4:e8:dc:6e:33:3d:b4:bd:05:ac:df:25:5e:d7:f1:32:ba:
         34:52:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org