Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e32342e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e32342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          /Aaxf2Gs7DNyuZ8OL1wgzlqfXqetJz9dRXa4SfKdWSo=
Subject key identifier:   CF:4D:47:BB:5E:FA:39:8F:CE:DA:A2:35:92:AF:F2:0F:A2:A8:DC:1A
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       3B7838CEBE3A70C63522DB53484399E12E47A0D1
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e32342e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 05 Mar 2024 18:13:13 +0000
ROA not before:           Tue 05 Mar 2024 18:08:13 +0000
ROA not after:            Tue 04 Mar 2025 18:13:13 +0000
asID:                     8100
IP address blocks:        190.114.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:78:38:ce:be:3a:70:c6:35:22:db:53:48:43:99:e1:2e:47:a0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:08:13 2024 GMT
            Not After : Mar  4 18:13:13 2025 GMT
        Subject: CN=CF4D47BB5EFA398FCEDAA23592AFF20FA2A8DC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:58:b4:aa:d9:5c:51:b1:71:44:9e:9b:73:
                    f6:a7:38:2d:fe:ca:78:37:a9:bc:35:04:19:14:ba:
                    a4:84:88:34:04:a6:55:80:2b:bd:68:5c:fa:48:4a:
                    bf:06:db:f1:79:6b:9d:df:a5:9b:c6:7a:fb:d1:02:
                    72:53:b0:7d:6e:2c:00:af:0c:71:3a:45:8d:64:c9:
                    e9:40:1b:27:b9:05:da:41:e6:6b:86:f3:00:d7:95:
                    b8:1d:16:dd:89:31:ac:0e:01:fd:ad:a3:5f:50:ea:
                    c8:7c:c5:98:31:84:f1:68:fe:41:75:cb:60:bd:f0:
                    f1:ab:5f:17:78:78:d4:f0:99:39:96:d2:ae:6f:14:
                    b7:1b:ea:53:f8:da:a6:a1:68:c9:38:44:01:fb:33:
                    14:7f:76:9f:59:01:a6:52:d5:6f:98:1f:d4:fb:e7:
                    f9:1c:1d:57:7c:9e:3f:19:4c:71:ef:eb:f6:e1:e1:
                    13:8a:b2:02:a0:05:ef:e8:d4:6c:69:f4:76:10:f6:
                    b5:8c:56:a2:46:01:fb:7c:0b:48:6c:00:cc:af:4d:
                    d8:09:c9:83:39:87:c0:d4:1d:f2:93:35:80:da:ea:
                    dc:0a:cc:0c:51:ec:2d:8d:de:44:84:d8:93:47:fe:
                    de:da:3d:06:92:b9:ef:5b:07:43:1a:33:ed:92:1b:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4D:47:BB:5E:FA:39:8F:CE:DA:A2:35:92:AF:F2:0F:A2:A8:DC:1A
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e32342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:87:b1:5c:58:d5:d5:c0:1b:12:c6:6d:a7:e5:50:b9:42:1d:
         f2:94:e7:26:da:7d:c4:6b:71:29:6e:ed:ba:42:ef:ed:1d:ab:
         df:9e:fc:d2:05:c6:a7:19:cd:e8:2d:a4:a7:7a:3a:21:c5:47:
         5e:31:21:b7:0a:22:2d:f0:11:1b:08:b3:fe:f0:66:20:e6:10:
         77:11:95:cd:83:69:f5:31:cc:ca:90:91:3e:1b:69:2d:8d:51:
         dc:f6:00:f1:d3:07:d7:1d:b0:54:e7:0a:bf:19:97:a7:70:76:
         d2:f8:2f:75:a8:32:d2:ea:e4:31:86:8e:28:fc:50:56:b4:dc:
         61:43:69:7a:f1:ba:fa:2f:23:fb:59:2d:45:98:d9:80:58:7b:
         1b:a3:90:49:a7:42:f4:ac:98:39:2e:79:ad:f1:58:7b:e7:76:
         c5:ec:e9:4b:a1:61:4c:98:43:f9:ab:16:de:fb:17:f1:cb:4c:
         63:f8:de:fa:1f:21:cb:c4:ba:67:09:47:be:32:ca:5a:12:82:
         dd:9f:7f:99:34:8a:ad:4f:34:a6:f3:8b:57:67:35:93:ce:ab:
         ae:76:8e:b1:9f:6a:b8:18:9e:cd:e3:d4:12:ca:62:a3:25:f8:
         a6:fb:60:d5:f7:36:f8:ce:05:84:64:68:4f:7e:f3:e8:81:81:
         37:3f:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:38 2024 by rpki-client on console-ams.rpki-client.org