Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31322e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e31322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          xN45Vf3vKoBYEf8DdB478Jhf0NIFNilC72MrCxVvJaA=
Subject key identifier:   63:18:CA:59:CC:C1:DF:D5:15:CA:15:D7:73:4B:65:A2:81:45:8E:2D
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       20AF663FA24DC4C7E1B3DEF86EB6CBA430A5E6F1
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31322e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 05 Mar 2024 18:13:15 +0000
ROA not before:           Tue 05 Mar 2024 18:08:15 +0000
ROA not after:            Tue 04 Mar 2025 18:13:15 +0000
asID:                     8100
IP address blocks:        190.114.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:66:3f:a2:4d:c4:c7:e1:b3:de:f8:6e:b6:cb:a4:30:a5:e6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:08:15 2024 GMT
            Not After : Mar  4 18:13:15 2025 GMT
        Subject: CN=6318CA59CCC1DFD515CA15D7734B65A281458E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:3a:d8:10:3b:ec:bb:26:d9:68:ac:71:b2:
                    cd:09:1c:9c:ff:88:bd:60:b4:e2:97:65:e8:98:08:
                    4c:eb:2e:3e:ea:c5:5f:6e:db:a7:e1:10:70:c7:29:
                    5f:54:e1:38:98:bf:4e:6c:c0:39:9f:dd:82:5e:ac:
                    b3:89:27:71:6e:25:04:a8:82:df:9e:10:37:2d:9a:
                    5b:a6:f3:62:68:2a:2e:f5:12:35:01:f1:62:72:94:
                    4a:68:e9:4d:5b:c5:62:50:3d:07:18:13:2c:12:00:
                    32:b9:b2:ad:d8:fd:a5:c0:f0:5c:eb:a5:ba:b7:b4:
                    fe:53:2b:72:16:b0:bd:60:36:c7:3f:bd:da:4e:38:
                    d8:0a:6c:80:52:5d:2c:bd:74:c6:f8:c1:74:2f:21:
                    f2:a5:c4:7d:1f:c9:be:bd:87:66:e1:3f:3e:13:3b:
                    8e:b5:e2:6d:23:b8:0b:a5:4e:ee:12:33:e0:a3:38:
                    19:66:44:3b:6f:8f:ca:89:98:2e:87:7a:a7:ed:89:
                    2c:14:2d:05:d3:e4:01:d8:64:b8:bc:8f:c8:b7:f6:
                    f3:99:00:2a:2c:7f:1d:fa:0e:5b:17:df:e9:67:aa:
                    83:2a:69:b2:88:14:ea:56:10:9f:34:1a:e2:db:16:
                    58:31:b0:db:17:b2:6a:db:02:4f:b7:d2:60:ef:5a:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:CA:59:CC:C1:DF:D5:15:CA:15:D7:73:4B:65:A2:81:45:8E:2D
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:ca:f4:16:42:73:ed:e4:8e:34:75:f5:fd:ba:4b:d1:7a:
         b5:15:18:6a:10:d3:86:93:3e:8b:f0:c3:0f:d5:ab:2d:a2:2e:
         9d:e6:7d:77:e3:c9:c3:74:5a:24:0d:bf:ec:ef:c8:c9:e4:2e:
         6e:3f:fa:50:00:80:57:ca:3f:a8:7b:05:a1:a5:8b:dc:c8:98:
         b1:8b:62:8e:be:6f:f3:42:7a:45:0e:41:97:df:c0:68:72:63:
         81:e1:ff:e8:86:cc:b2:2a:8e:81:3c:db:ef:a1:a7:23:eb:54:
         c3:4e:45:2c:13:8a:06:11:55:73:01:95:3c:50:1f:98:6c:01:
         ec:c2:7e:bd:d6:65:ba:b8:d7:38:ff:a8:0c:34:e9:53:32:36:
         ea:be:6d:e7:4a:a0:70:1f:68:5c:26:87:a4:62:d2:0b:da:7c:
         36:18:0d:0c:e0:0b:24:04:ab:f2:76:b5:e0:96:79:9c:dd:23:
         8e:dd:90:44:01:86:2e:a4:41:89:36:af:11:17:9f:81:e1:7b:
         22:c4:98:f5:77:8b:b1:51:2a:1a:13:c3:d4:b7:ed:e8:2f:e0:
         fb:93:4f:ee:3f:70:89:3b:66:de:c7:ef:53:22:96:b2:ec:76:
         0d:9d:49:47:3d:79:0c:10:60:7f:d4:45:48:e0:1d:d2:df:cb:
         d4:af:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org