Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa
File:                     3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa (raw, json)
Hash identifier:          RLk5BrI18LRyTCwaL+2UsO8i1YnQlgouiUA37Beufco=
Subject key identifier:   52:B9:59:B8:47:90:0D:B7:04:59:60:6E:33:DF:DA:BD:0B:73:99:D2
Certificate issuer:       /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial:       3884AE00BF6A1734E44984B958F543C0AC21B15F
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa
Signing time:             Tue 05 Mar 2024 17:54:38 +0000
ROA not before:           Tue 05 Mar 2024 17:49:38 +0000
ROA not after:            Tue 04 Mar 2025 17:54:38 +0000
asID:                     263769
IP address blocks:        168.90.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:84:ae:00:bf:6a:17:34:e4:49:84:b9:58:f5:43:c0:ac:21:b1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
        Validity
            Not Before: Mar  5 17:49:38 2024 GMT
            Not After : Mar  4 17:54:38 2025 GMT
        Subject: CN=52B959B847900DB70459606E33DFDABD0B7399D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:60:9e:48:b4:1b:fd:ee:27:13:81:b4:4f:6c:
                    3c:3c:f8:d7:04:f5:24:0b:b7:42:33:ef:8f:cc:cd:
                    77:7e:9f:1f:d7:e8:b6:f9:24:55:5c:de:5f:7f:a8:
                    a1:0e:b8:45:f8:26:10:36:c9:7b:f0:61:60:60:13:
                    9d:15:2f:19:1c:1b:ce:91:a5:f9:65:fd:cf:1e:f1:
                    2b:54:4a:29:fc:b8:0e:38:30:28:3c:2a:d8:06:f4:
                    de:c4:d3:cc:84:98:fe:0c:41:38:8d:ff:ea:99:d9:
                    e8:bb:6a:b7:5d:e0:f2:3f:d9:77:ec:c6:9e:e4:38:
                    07:1f:2f:f9:e3:a5:db:11:3a:81:24:dc:2d:fe:5e:
                    ae:69:9b:00:78:6d:db:d0:68:0d:e7:df:89:56:e0:
                    9b:76:d1:ce:d6:e3:90:fd:36:98:82:8d:c3:21:78:
                    54:b2:0e:de:e2:b5:e8:2e:0d:91:e5:61:30:f4:30:
                    bb:aa:58:11:c1:70:8e:bc:87:44:8d:8a:48:9a:86:
                    41:43:05:64:cb:54:dd:63:b8:e7:69:dc:86:94:99:
                    c1:69:d6:9d:a7:da:76:d0:ea:35:a0:0e:35:d8:64:
                    1a:ef:52:85:ad:d4:d1:00:68:59:4f:4d:ed:c6:4c:
                    fb:85:0c:6f:7a:5f:21:e0:4c:b1:2b:3b:60:70:41:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B9:59:B8:47:90:0D:B7:04:59:60:6E:33:DF:DA:BD:0B:73:99:D2
            X509v3 Authority Key Identifier:
                keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:3b:84:fd:42:1f:a9:7c:ce:27:b7:76:f7:1b:76:b8:58:
         36:d0:5d:49:45:77:cd:77:a6:91:68:fb:1d:4b:5c:1a:b3:7a:
         3e:d3:d1:7a:0d:5a:af:d5:a1:ec:46:44:2b:05:8f:0f:d2:4e:
         f7:01:3a:1c:82:01:0d:09:49:f2:a9:3b:39:7e:24:b4:28:1c:
         11:65:b2:fc:f7:01:98:59:e7:df:c5:f3:9d:97:50:31:1e:40:
         a5:d6:53:d9:da:f1:61:40:79:2e:96:3a:f0:ea:ef:bd:0f:1a:
         4c:4a:43:b5:ef:d2:a0:fc:19:a0:e3:b8:44:31:cf:a1:82:d7:
         70:a5:1b:c3:73:16:e3:fb:66:dd:0a:13:79:6a:da:69:2a:33:
         3c:25:a5:1d:88:64:46:46:8e:d3:ef:a2:90:37:57:42:f8:fa:
         e4:9a:c0:e3:0f:0c:f9:c4:f5:e6:19:41:6b:01:23:c3:09:c3:
         10:7e:95:fe:47:ad:ef:cc:4a:a8:25:92:27:77:92:26:9b:4f:
         dd:df:2d:4d:c6:e7:4c:40:bd:e6:a2:5c:8e:c3:74:1c:f9:b9:
         eb:9a:af:8d:fa:4b:b4:2e:54:24:84:5a:9a:c7:04:25:30:82:
         e8:23:9b:e3:06:04:1c:d3:a5:83:1c:1c:dd:f6:e3:9d:04:6a:
         d8:08:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org