Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32312d3231203d3e2038313030.roa
File:                     3139302e3131342e302e302f32312d3231203d3e2038313030.roa (raw, json)
Hash identifier:          GkPYA2gSdNbl03JYHWeA8yv0tg4o+sdHo87Mjs2BOn0=
Subject key identifier:   73:96:DB:23:C1:4F:1C:C7:0E:80:82:A0:17:E1:73:AA:B7:25:9C:41
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       78117F523886B1288F1F46E9333599DCCA6DB175
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32312d3231203d3e2038313030.roa
Signing time:             Tue 05 Mar 2024 18:13:14 +0000
ROA not before:           Tue 05 Mar 2024 18:08:14 +0000
ROA not after:            Tue 04 Mar 2025 18:13:14 +0000
asID:                     8100
IP address blocks:        190.114.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:11:7f:52:38:86:b1:28:8f:1f:46:e9:33:35:99:dc:ca:6d:b1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:08:14 2024 GMT
            Not After : Mar  4 18:13:14 2025 GMT
        Subject: CN=7396DB23C14F1CC70E8082A017E173AAB7259C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4e:15:d4:b7:61:35:f4:ca:f7:3a:4d:55:b3:
                    cd:92:34:33:7a:2c:bc:6f:03:14:74:20:c3:ff:21:
                    a5:a6:00:7f:93:82:de:12:4b:af:c3:6a:2c:fe:6f:
                    2d:be:b1:9c:08:e6:8b:ea:6e:af:84:e3:18:6a:c7:
                    89:9e:17:c4:f2:ad:80:c2:38:08:05:03:cb:1d:50:
                    8e:06:48:14:25:65:74:0a:9c:d0:0c:34:1f:59:a6:
                    cf:93:04:3f:bc:ad:25:69:c9:c9:e3:ab:a4:52:e5:
                    cc:dd:b0:23:37:8e:65:7c:e3:d0:a9:03:b8:67:cf:
                    09:d2:03:16:a3:ab:d4:8f:e6:2d:f8:e9:e5:a2:81:
                    07:19:eb:c8:a4:e2:e2:99:be:38:08:db:51:44:a5:
                    c3:f0:98:ed:60:7d:84:92:b0:82:e9:5a:98:a0:35:
                    d5:37:b3:fb:70:77:41:52:67:17:8d:38:0c:29:82:
                    53:d9:63:f2:24:23:bd:7b:da:78:b6:a2:21:c1:6e:
                    2c:db:5e:fd:f4:72:a9:56:b3:0a:7b:1c:75:53:c7:
                    86:d9:99:35:b0:29:b3:62:6f:db:2e:d0:d1:f4:f7:
                    93:c1:a7:36:07:f5:27:a3:64:d2:6e:7b:73:e5:cc:
                    0b:b2:20:f4:50:0c:9f:44:b3:44:91:94:ec:dd:ea:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:96:DB:23:C1:4F:1C:C7:0E:80:82:A0:17:E1:73:AA:B7:25:9C:41
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e302e302f32312d3231203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:c9:65:b5:0a:7a:d2:d2:83:5a:48:06:cb:be:d5:7e:a4:
         be:53:a2:4e:ca:5f:22:e2:d3:97:27:b7:b7:eb:ee:21:9e:57:
         ac:8c:27:69:bf:df:5a:b0:25:e4:06:b8:7c:61:d2:dd:f0:c3:
         d7:6f:41:9b:50:d9:ec:98:71:e2:d2:bf:c3:0b:1e:df:29:87:
         2e:ce:d6:ca:59:3d:e8:1e:48:29:50:ee:c4:41:c4:ce:bd:9f:
         a4:8a:ed:37:a3:56:3d:ba:13:91:10:a3:38:4f:0f:46:26:0c:
         0b:98:3b:3f:3d:b0:aa:8e:76:e2:43:f1:4f:e4:43:b9:ea:a5:
         fa:4f:de:86:01:ad:cd:aa:9b:22:07:ba:8b:7e:43:a5:42:cb:
         7e:d0:fe:f3:10:8d:5f:a5:31:1b:cd:6d:b3:5e:37:98:cb:11:
         71:f5:c2:65:3d:f7:65:29:55:54:6b:5d:e3:f1:59:07:ac:6b:
         2a:f1:7c:e3:7e:ae:9a:0e:59:d1:1c:39:cf:6a:6f:bb:a2:34:
         88:a7:51:a3:40:0c:ea:ed:eb:d1:64:22:2c:6d:a3:f4:92:8e:
         7a:db:16:79:22:6c:ff:34:8a:cf:c2:86:30:ed:ce:36:ad:04:
         08:40:f4:95:a6:bd:b5:f2:32:d1:b7:41:43:29:24:88:13:b4:
         58:bd:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:38 2024 by rpki-client on console-ams.rpki-client.org