Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136302e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3136302e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          1oh0e9tcIS1qOWupOZubJuEtJIhHVIRIk3svfns5CLg=
Subject key identifier:   E0:4E:23:5F:26:2C:76:30:AC:2D:5E:8B:56:1C:BE:FE:28:03:2E:EF
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       266539209165ABF3A88B6A523F8C0817F3EDAD2A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136302e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Aug 2025 14:35:00 +0000
ROA not before:           Tue 05 Aug 2025 14:30:00 +0000
ROA not after:            Tue 04 Aug 2026 14:35:00 +0000
asID:                     26619
IP address blocks:        190.90.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:65:39:20:91:65:ab:f3:a8:8b:6a:52:3f:8c:08:17:f3:ed:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Aug  5 14:30:00 2025 GMT
            Not After : Aug  4 14:35:00 2026 GMT
        Subject: CN=E04E235F262C7630AC2D5E8B561CBEFE28032EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:6c:93:f3:30:1c:c5:c4:a9:2a:c3:ca:69:
                    11:e2:1e:b1:9e:b6:6e:41:a4:6a:3b:1b:c3:c6:2b:
                    be:c2:b5:58:6c:1f:c2:db:96:53:8f:cf:0b:40:42:
                    e3:3a:b7:d5:46:9d:98:ce:7e:50:f1:e4:43:f8:99:
                    7a:7c:f2:c9:d7:95:a6:bd:67:6b:52:f4:6f:8f:a3:
                    81:bb:b0:34:ff:08:be:af:d8:a0:ec:4f:d3:92:fb:
                    94:03:41:87:9e:24:f6:ab:63:42:eb:7a:66:21:04:
                    4e:c1:8d:5d:ad:98:eb:1b:cc:32:32:46:0c:56:e5:
                    0b:12:67:06:46:6c:d2:62:57:91:47:f7:e2:a3:79:
                    57:77:13:8e:54:55:69:a2:ee:f5:80:40:71:e3:79:
                    49:ed:6b:31:ce:84:77:8a:ee:23:60:20:a6:65:ac:
                    db:46:73:09:58:26:8b:0f:39:a9:1b:5f:c0:10:ea:
                    24:36:d0:35:9c:fe:f0:eb:6d:da:6c:13:27:cb:5c:
                    b8:dc:0a:13:69:be:af:58:7d:2d:fc:0c:a7:86:aa:
                    37:ea:3f:ad:96:cb:94:d3:87:e1:28:4f:9a:f5:c7:
                    94:3d:ad:0a:87:f4:48:fa:a4:7a:98:d3:48:ea:72:
                    60:0e:1a:be:de:de:42:4b:ae:fe:c5:39:fc:96:da:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:23:5F:26:2C:76:30:AC:2D:5E:8B:56:1C:BE:FE:28:03:2E:EF
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136302e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:33:af:47:78:9f:03:57:9c:44:84:6b:7f:12:21:1b:f6:
         a2:35:da:c1:50:e9:4e:2f:80:d3:19:f0:8f:d4:a2:68:d0:f7:
         7b:57:ae:43:55:f5:56:cd:86:b1:ec:ec:fb:ee:36:7d:39:f1:
         0c:27:cc:4e:9c:5e:dc:c0:53:7e:22:01:cd:b9:f0:73:68:0b:
         b5:6f:63:5f:3f:24:1c:b1:31:97:8f:44:96:4c:2b:a8:5c:08:
         32:78:96:5a:30:57:39:dc:a4:55:bb:f0:d0:24:c4:c5:a5:d6:
         e8:58:59:d1:fb:3e:ab:dd:a2:ed:c6:a7:6c:77:d8:3f:1c:12:
         de:1d:96:a8:fe:ba:e2:7e:b4:20:30:6a:09:e7:42:70:3f:b0:
         ff:24:7e:37:20:bd:02:c9:0c:fd:fe:2d:3a:a1:30:7b:67:0c:
         e5:b1:cd:b5:7a:a1:f3:71:5f:cc:1a:16:d7:69:d9:ce:6d:06:
         64:77:ab:e6:98:eb:c4:bf:07:8b:8d:b4:16:3d:12:50:62:5e:
         73:fa:e7:a0:d1:27:6c:f7:ab:84:b0:2d:c3:c6:d1:bb:6e:97:
         7d:2e:47:05:4a:56:93:2f:16:7d:a7:cc:06:a5:08:12:8c:e2:
         62:08:0f:ea:c4:6f:41:bc:d1:78:e6:a4:a7:5c:38:85:6c:73:
         89:74:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:41:35 2025 by rpki-client