Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136372e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3136372e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          E0wJ5gfLYAsc4Ta+/7tE7K8PwmluvFiGWnnX3vmMW7g=
Subject key identifier:   8B:2B:78:58:D5:59:FA:98:D0:2C:9B:CE:A7:1F:C7:36:03:A4:50:9B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       606172ACE5E6F209DA5AD691DD799D5D07B76AAA
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136372e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Aug 2025 14:35:00 +0000
ROA not before:           Tue 05 Aug 2025 14:30:00 +0000
ROA not after:            Tue 04 Aug 2026 14:35:00 +0000
asID:                     26619
IP address blocks:        190.90.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:72:ac:e5:e6:f2:09:da:5a:d6:91:dd:79:9d:5d:07:b7:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Aug  5 14:30:00 2025 GMT
            Not After : Aug  4 14:35:00 2026 GMT
        Subject: CN=8B2B7858D559FA98D02C9BCEA71FC73603A4509B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:92:d5:8e:f4:4d:f7:b5:a9:d3:68:cf:b4:
                    a8:af:f7:69:d8:35:94:2f:81:4f:50:10:20:02:0e:
                    57:cf:cb:b2:6a:fe:b4:09:ec:a3:18:4a:d7:55:43:
                    0b:04:ce:f2:b2:a4:d3:50:d9:92:bd:2a:f8:b7:a8:
                    26:c0:d5:11:df:85:53:72:72:3b:91:b1:e7:f6:33:
                    62:24:46:bc:bb:bb:53:d5:2f:0d:e3:7c:ce:d4:9d:
                    17:0d:00:a1:7f:4c:34:66:92:9f:31:2c:09:39:79:
                    73:80:bc:30:b5:d6:3b:04:a0:1f:32:98:ca:47:f5:
                    2f:4f:48:c5:21:66:82:60:00:29:b7:7e:55:4a:48:
                    eb:f9:27:15:44:4f:e6:d3:20:23:40:27:8a:4b:6c:
                    e7:a4:7b:5d:b2:43:10:50:a8:3e:f2:1e:1b:e4:d0:
                    ec:92:32:f5:7a:4d:37:0e:81:87:4a:30:7e:73:54:
                    55:3b:bd:41:74:95:17:ee:ef:57:24:5d:b6:2e:d1:
                    3e:6a:cc:c9:21:8a:83:b3:14:cb:b0:f2:6c:af:b0:
                    f4:3e:6d:15:d7:5f:a0:1c:c4:2b:6b:5c:ed:79:8d:
                    12:75:65:a4:34:4e:dc:9e:00:65:60:56:35:18:61:
                    4f:2b:fb:19:30:75:1d:dd:6f:ce:43:bd:c9:98:70:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:78:58:D5:59:FA:98:D0:2C:9B:CE:A7:1F:C7:36:03:A4:50:9B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136372e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:f6:d1:40:19:75:38:b2:4e:4a:d9:36:3a:60:2a:19:24:
         63:c4:bc:c7:c8:53:aa:ab:de:db:13:10:6c:34:5c:e1:f1:ed:
         58:e4:8e:d2:f2:51:99:9c:9d:54:a7:d7:71:76:6f:95:f2:3b:
         0c:8c:36:43:2e:09:86:12:6c:77:14:59:44:e9:b7:12:e5:a0:
         37:0d:80:09:d1:fa:5b:45:9b:5c:5b:66:e4:17:4f:7a:6c:b1:
         06:ce:d4:47:47:da:99:af:70:a3:98:e0:8b:fd:39:89:b0:36:
         a5:9e:b4:d6:24:9b:4a:67:b3:28:a0:6f:f5:21:c9:00:16:8b:
         33:56:19:54:c6:8c:3b:4a:89:54:4d:db:4f:95:ce:bd:13:30:
         8a:96:b0:10:83:5c:d6:4c:21:f0:01:b4:32:3d:c6:53:00:45:
         bb:1b:6d:93:36:40:7b:81:73:81:e3:09:fb:37:0c:c5:27:c4:
         ce:83:91:be:78:9e:81:49:15:a2:6f:65:83:4c:c8:83:b7:ad:
         d9:4e:7a:7b:f8:a4:78:43:ca:47:45:81:b8:9d:24:72:41:b3:
         b3:3c:f5:dd:ce:75:81:43:0e:1c:d8:56:43:d8:03:b5:cc:3c:
         0d:16:03:c3:12:9c:6c:f1:40:05:e1:21:43:bb:b3:64:d0:d3:
         ad:9e:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:42:14 2025 by rpki-client