Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3136382e39302e31342e302f32342d3234203d3e20323632353839.roa
File:                     3136382e39302e31342e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          0/fnn4YMsRWSXrzObIgfj60DlijedPr8s+eZovx5RKs=
Subject key identifier:   7D:5A:51:A5:79:A3:12:88:90:3B:C8:63:13:00:83:CF:62:74:00:14
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       4CF3E81F5A65455953785BBA8F3316A26D871279
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3136382e39302e31342e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:42 +0000
ROA not before:           Tue 05 Mar 2024 17:57:42 +0000
ROA not after:            Tue 04 Mar 2025 18:02:42 +0000
asID:                     262589
IP address blocks:        168.90.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:e8:1f:5a:65:45:59:53:78:5b:ba:8f:33:16:a2:6d:87:12:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:42 2024 GMT
            Not After : Mar  4 18:02:42 2025 GMT
        Subject: CN=7D5A51A579A31288903BC863130083CF62740014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:93:ae:fa:8e:05:99:d5:37:ba:56:23:64:
                    1d:96:cb:bd:c3:68:0d:ca:cd:fb:93:29:42:53:8a:
                    10:e1:17:e5:63:06:fb:ee:54:12:06:da:c0:78:1c:
                    de:59:b3:21:fd:a5:b6:a8:87:ee:1c:46:ab:15:5b:
                    f0:ea:83:0c:9e:8f:f8:09:68:b9:58:01:d9:5e:7c:
                    f2:7a:c0:6e:0f:7a:9e:0b:a2:06:dc:24:dd:35:0a:
                    5f:8d:d5:0c:36:97:54:c4:18:6d:40:93:0a:a6:f5:
                    58:c1:74:8a:d1:7f:7f:90:93:73:87:56:ad:69:2c:
                    63:b7:a5:9f:8a:1f:59:db:e9:9c:13:ed:bc:97:02:
                    9f:d7:1f:71:4d:98:c8:5c:1e:8a:4a:3b:e6:b1:c0:
                    20:f8:ad:06:82:b7:0f:d5:19:0c:50:ec:d0:5c:13:
                    18:6f:d7:75:88:5a:26:26:5b:4d:d3:cb:ee:3d:fe:
                    d1:46:d9:eb:57:95:d2:a3:12:ca:48:00:49:76:08:
                    e2:4a:85:d4:c5:af:72:92:f6:a7:56:5e:ca:34:6e:
                    ea:40:37:73:3a:6a:11:6c:7a:d6:48:67:8b:63:38:
                    da:ba:7a:0b:dd:78:d8:53:0a:aa:e8:bf:bb:1a:4c:
                    7f:e8:c1:1c:69:d7:51:f8:2a:80:e4:28:3b:fe:4a:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:51:A5:79:A3:12:88:90:3B:C8:63:13:00:83:CF:62:74:00:14
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3136382e39302e31342e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:d8:d5:66:94:41:c3:f7:64:73:6d:d4:26:15:ca:e1:fe:
         10:5f:66:31:6c:05:1b:0b:6d:57:c3:e7:ff:d8:e2:84:24:f1:
         b5:78:68:3a:94:51:b7:f7:89:4e:73:d0:71:17:28:52:7b:e1:
         b4:5b:b3:50:f4:58:f1:04:96:41:bf:52:0c:18:e8:c6:d8:02:
         03:dc:85:7c:ba:f0:1c:b4:84:dd:c7:1e:6d:11:49:c4:67:9e:
         7b:63:5d:b7:64:d1:ad:13:8b:a1:d2:07:f4:bf:05:a0:ce:26:
         eb:ed:6b:65:b5:eb:c4:00:5a:dc:3d:0b:c5:87:77:26:3f:9d:
         6b:4d:46:f5:9f:5e:e7:7a:6b:55:1b:d1:09:91:cc:af:7a:99:
         55:48:ac:04:d6:b6:8b:31:61:2e:aa:39:f1:e7:dc:08:4e:69:
         0d:eb:1b:df:e0:8b:ba:07:13:eb:65:24:f4:9d:c8:96:46:65:
         c4:88:1d:85:8a:a9:58:20:fb:69:7b:c0:d3:18:4f:9d:1c:02:
         52:83:8d:96:ea:1f:a1:df:30:3d:cf:f3:de:49:3a:83:c1:e0:
         74:1f:37:00:83:08:74:22:5c:f0:f8:0e:10:06:15:a7:48:a3:
         d3:da:59:1e:6d:29:89:fe:16:9b:7c:68:bc:dc:71:3a:bf:ca:
         25:bd:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org