Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3136382e39302e31342e302f32342d3234203d3e203138363738.roa
File:                     3136382e39302e31342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          HhjkT235YhMF3IwnV/31Dktj+/N4XQNH74gQOI+152w=
Subject key identifier:   B9:AB:4A:FF:AD:B6:44:4C:A9:C9:9C:48:94:8E:F6:E7:F4:B0:8D:3C
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       3BA9506E60482793B156AF631CD0CCDDA3CE2139
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3136382e39302e31342e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 19:56:56 +0000
ROA not before:           Tue 04 Feb 2025 19:51:56 +0000
ROA not after:            Tue 03 Feb 2026 19:56:56 +0000
asID:                     18678
IP address blocks:        168.90.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a9:50:6e:60:48:27:93:b1:56:af:63:1c:d0:cc:dd:a3:ce:21:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:56 2025 GMT
            Not After : Feb  3 19:56:56 2026 GMT
        Subject: CN=B9AB4AFFADB6444CA9C99C48948EF6E7F4B08D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:e0:3f:3a:5f:24:2c:1b:a9:d1:2b:d2:27:
                    e7:1b:9b:1f:5c:0b:ba:90:d6:d6:bf:90:aa:49:c0:
                    14:a9:85:bf:8f:70:e7:d6:cc:c2:2f:95:cc:4e:89:
                    3e:42:e3:fe:93:b1:e1:18:1f:53:55:19:fe:60:e7:
                    cd:78:d6:d0:50:00:a6:71:3e:b4:b7:18:97:4b:5d:
                    05:b5:76:ba:82:4c:a2:8b:42:9e:82:dd:94:ec:a1:
                    83:32:36:f0:99:5d:00:b4:45:98:43:43:3a:48:d2:
                    eb:53:b7:5e:23:f1:de:bb:77:c7:e6:fb:87:cc:d5:
                    5d:be:44:a3:5a:1d:2e:aa:b3:49:aa:94:e1:ce:c1:
                    aa:07:80:03:3a:8a:bc:36:5e:d5:1f:96:06:37:14:
                    90:6d:e6:96:19:95:20:fa:68:34:98:e5:73:71:ea:
                    23:7b:55:f3:43:6a:d1:15:61:ce:91:32:aa:6a:a6:
                    0b:70:32:dd:9b:c0:24:4a:1f:43:e3:df:4d:9c:13:
                    83:15:3c:7c:02:6f:a5:42:bc:09:b3:e5:24:35:02:
                    28:5a:a1:3c:bd:0e:46:8d:85:c0:2f:cf:10:62:df:
                    1d:6e:9b:43:24:c4:43:a3:41:48:1f:a3:bb:fd:84:
                    23:1b:80:df:be:06:99:a6:5b:c8:d6:67:ce:cb:e3:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:4A:FF:AD:B6:44:4C:A9:C9:9C:48:94:8E:F6:E7:F4:B0:8D:3C
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3136382e39302e31342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:19:0d:e1:82:18:22:c5:67:5c:b4:b5:5c:ea:36:43:c0:
         4b:a8:a7:32:c9:cb:5c:67:8b:d6:14:c5:0b:18:2f:e3:6c:45:
         f6:e9:e9:32:1b:d5:e4:dd:2c:73:98:a6:5c:8f:eb:f9:c1:90:
         da:0d:82:cc:c9:73:08:9b:ce:fe:58:5c:e8:56:78:48:ac:63:
         6a:28:ba:d5:94:b8:c7:aa:4a:22:bc:9a:f1:35:9d:d2:41:ce:
         77:ab:7c:f7:df:53:9b:4c:f1:f8:17:ce:f8:11:85:55:b1:8b:
         88:b8:4e:26:21:65:bf:65:24:93:19:6e:a4:cb:f7:d6:07:cf:
         c0:df:60:c4:d6:82:1b:c2:c8:0d:57:3f:38:3b:3a:c9:0d:75:
         c4:ef:a6:e0:ef:bf:a1:38:be:fa:a2:1f:f2:e2:15:2a:70:db:
         f2:7c:5a:da:7b:33:f5:73:5f:93:bb:27:4c:03:be:9b:3f:b8:
         6e:b5:3e:6d:11:37:11:bc:06:df:f4:64:e5:6a:4f:41:88:fa:
         ed:1e:5f:f5:31:f8:95:a2:8d:c5:61:b5:5f:20:4c:5e:46:a3:
         fd:97:67:3f:27:be:81:3d:ee:a1:83:aa:71:04:75:25:ff:67:
         ad:b6:b1:39:4f:68:e2:2d:5c:37:db:75:80:04:3a:b7:96:53:
         17:b7:b0:de
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUO6lQbmBIJ5OxVq9jHNDM3aPOITkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUxNTZaFw0yNjAyMDMxOTU2NTZaMDMxMTAvBgNV
BAMTKEI5QUI0QUZGQURCNjQ0NENBOUM5OUM0ODk0OEVGNkU3RjRCMDhEM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6OA/Ol8kLBup0SvSJ+cbmx9c
C7qQ1ta/kKpJwBSphb+PcOfWzMIvlcxOiT5C4/6TseEYH1NVGf5g58141tBQAKZx
PrS3GJdLXQW1drqCTKKLQp6C3ZTsoYMyNvCZXQC0RZhDQzpI0utTt14j8d67d8fm
+4fM1V2+RKNaHS6qs0mqlOHOwaoHgAM6irw2XtUflgY3FJBt5pYZlSD6aDSY5XNx
6iN7VfNDatEVYc6RMqpqpgtwMt2bwCRKH0Pj302cE4MVPHwCb6VCvAmz5SQ1Aiha
oTy9DkaNhcAvzxBi3x1um0MkxEOjQUgfo7v9hCMbgN++BpmmW8jWZ87L42MZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUuatK/622REypyZxIlI725/SwjTwwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzYzODJlMzkzMDJlMzEzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACoWg4wDQYJ
KoZIhvcNAQELBQADggEBAH0qGQ3hghgixWdctLVc6jZDwEuopzLJy1xni9YUxQsY
L+NsRfbp6TIb1eTdLHOYplyP6/nBkNoNgszJcwibzv5YXOhWeEisY2ooutWUuMeq
SiK8mvE1ndJBznerfPffU5tM8fgXzvgRhVWxi4i4TiYhZb9lJJMZbqTL99YHz8Df
YMTWghvCyA1XPzg7OskNdcTvpuDvv6E4vvqiH/LiFSpw2/J8Wtp7M/VzX5O7J0wD
vps/uG61Pm0RNxG8Bt/0ZOVqT0GI+u0eX/Ux+JWijcVhtV8gTF5Go/2XZz8nvoE9
7qGDqnEEdSX/Z622sTlPaOItXDfbdYAEOreWUxe3sN4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:54 2025 by rpki-client