Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3235332e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3235332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          MOn8Ol+d1vjRqoFVRevJsTkaJk12w9pXT/YEBQewYnA=
Subject key identifier:   D4:54:B1:F3:38:E9:9F:3F:4C:43:9A:CF:49:7A:BD:27:6B:2A:C1:8B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       4FE2B481BCFE68FA09769DD4091E58E21DC2656F
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3235332e302f32342d3234203d3e203138363738.roa
Signing time:             Mon 16 Jun 2025 19:22:28 +0000
ROA not before:           Mon 16 Jun 2025 19:17:28 +0000
ROA not after:            Mon 15 Jun 2026 19:22:28 +0000
asID:                     18678
IP address blocks:        190.90.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e2:b4:81:bc:fe:68:fa:09:76:9d:d4:09:1e:58:e2:1d:c2:65:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jun 16 19:17:28 2025 GMT
            Not After : Jun 15 19:22:28 2026 GMT
        Subject: CN=D454B1F338E99F3F4C439ACF497ABD276B2AC18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:ab:0e:4c:25:9d:09:fd:32:da:38:25:cd:
                    52:d2:01:5f:b2:88:6b:99:73:26:45:80:a6:bc:02:
                    fe:eb:82:6c:c9:5a:5e:a0:cf:b7:db:ed:73:cb:c9:
                    1d:cd:ad:9a:49:3b:c1:ac:1f:f3:48:b2:3b:d5:43:
                    4e:d5:f6:21:cc:7f:16:1d:fd:e3:59:f7:2e:07:e8:
                    1e:9d:f5:9b:53:c3:68:f0:4d:56:7e:b5:df:21:da:
                    b0:cb:d2:22:ad:25:38:5f:0c:08:7a:8e:dd:e5:cb:
                    7a:d2:d8:6c:85:d6:f8:97:9f:d2:ee:05:5a:29:01:
                    8f:16:1d:95:d7:57:55:b8:b9:bc:70:25:cd:27:18:
                    2f:30:2a:1c:7d:0b:01:31:0f:77:62:82:58:8c:d0:
                    8b:f1:60:97:4f:00:f5:c5:9e:e6:d9:fd:58:c3:18:
                    db:1b:3c:9e:29:07:15:94:ed:e0:99:01:17:12:ea:
                    f8:2d:b6:45:c7:87:e9:cd:59:f4:f3:11:76:02:cc:
                    dc:eb:38:f4:84:52:64:9d:e5:d2:ce:e0:74:14:4f:
                    08:61:a6:60:48:26:23:61:dd:35:01:f5:b2:6f:fd:
                    57:0f:08:85:8a:e7:19:9f:d6:64:8a:7d:4e:a1:39:
                    c9:17:3b:18:64:9c:50:ee:fa:33:c2:18:62:d9:cf:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:B1:F3:38:E9:9F:3F:4C:43:9A:CF:49:7A:BD:27:6B:2A:C1:8B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3235332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:e4:fc:96:90:c5:1e:8c:ae:84:2b:59:3d:a0:db:da:b4:
         af:c9:e0:fd:25:52:c0:a8:1d:06:6d:86:d0:76:c0:92:75:ca:
         c8:f4:59:cf:1b:f3:4d:52:d6:dc:33:93:cc:44:b1:17:5a:21:
         e6:ff:8d:37:36:80:a4:8a:8f:4e:c1:4e:87:11:1d:95:8f:22:
         ab:5a:62:1a:da:2e:66:c5:70:9b:bc:84:7c:04:c3:50:d3:b0:
         66:0f:24:dc:7b:35:61:2b:50:0f:73:d4:8c:4f:ae:e7:e7:75:
         9c:96:e8:f8:1a:5d:d3:38:e5:33:a7:81:88:83:d0:e9:e0:49:
         b7:fb:a6:87:5f:00:a0:93:c8:82:be:9a:f1:84:5f:8d:8a:ae:
         b6:24:b1:94:d2:18:e7:3f:20:e3:8d:4c:da:4b:95:99:39:6e:
         b5:ec:14:7a:65:d8:50:36:3a:30:e7:47:3e:f4:7c:a6:28:8c:
         46:7b:a7:69:5f:bd:ae:4d:30:13:c0:9a:df:4f:e3:e9:d2:04:
         46:16:c8:ce:cd:5d:77:0d:21:07:47:b9:63:20:de:7c:ab:8d:
         11:cc:fd:1a:55:50:a8:fb:03:3b:ea:96:e0:12:36:a5:43:5c:
         06:af:fa:70:8e:04:79:a1:02:aa:32:bb:dd:93:15:e6:27:91:
         67:0e:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:30:15 2025 by rpki-client