Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e31342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          cVxvNkDFJ8WDgwHJQqJNCAPmh93q5RECfrXg5NWol9M=
Subject key identifier:   5C:4D:EE:C8:1A:CA:0C:BB:7C:F8:E6:EC:84:AC:D9:A5:99:E7:1E:59
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       68013D67019E2F15EA6B79AD9BC9EB157FE2A252
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 05 Mar 2024 18:13:13 +0000
ROA not before:           Tue 05 Mar 2024 18:08:13 +0000
ROA not after:            Tue 04 Mar 2025 18:13:13 +0000
asID:                     8100
IP address blocks:        190.114.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:01:3d:67:01:9e:2f:15:ea:6b:79:ad:9b:c9:eb:15:7f:e2:a2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:08:13 2024 GMT
            Not After : Mar  4 18:13:13 2025 GMT
        Subject: CN=5C4DEEC81ACA0CBB7CF8E6EC84ACD9A599E71E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:68:b6:5a:b6:6e:c7:23:db:a2:53:88:01:
                    86:4d:f7:3f:6b:e2:7c:27:ed:30:0c:55:d7:3b:f5:
                    f2:d3:94:03:c0:dc:ea:02:1a:a6:8a:35:3f:5b:56:
                    2b:db:a6:43:08:8e:2f:f7:98:6e:75:eb:a3:39:8c:
                    8c:03:76:c1:77:2a:f5:23:f3:d4:a1:f5:95:d7:c3:
                    9a:a0:ef:c1:26:a7:e2:11:90:79:6f:0a:f9:11:39:
                    f4:9b:96:fd:16:1c:4b:55:c1:ad:99:63:08:9d:fc:
                    37:95:be:b8:22:c0:42:db:7f:d8:c6:d1:1c:bc:d6:
                    f3:63:54:01:26:72:1d:4f:b7:aa:b5:7d:f6:1a:6e:
                    a8:c2:bb:b4:3e:6b:e9:c1:2b:1a:cf:d4:65:fc:c5:
                    8e:dc:8c:7e:8f:57:74:39:58:30:b1:88:2a:1f:c5:
                    38:7f:1f:08:de:6f:72:a5:18:a1:18:17:3c:d5:44:
                    13:67:bb:13:37:98:3f:68:8b:46:f5:21:00:e2:e7:
                    bc:17:81:28:5a:6d:4d:af:1f:5b:3b:33:9d:6b:9e:
                    fb:09:db:03:00:3c:4b:07:c8:c5:e1:8f:75:86:da:
                    ca:42:f6:6f:34:b9:da:eb:cb:16:66:ec:a5:08:07:
                    7e:df:54:db:a7:be:2f:68:53:b2:07:eb:70:66:5d:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:EE:C8:1A:CA:0C:BB:7C:F8:E6:EC:84:AC:D9:A5:99:E7:1E:59
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:96:03:c1:e8:2b:a4:2d:b6:12:d1:a7:45:8f:f3:14:c0:6e:
         09:6e:67:95:1c:21:0b:7b:56:ee:ae:7c:ee:28:13:a2:be:ad:
         7e:42:42:93:0d:1f:56:27:ba:63:b5:76:97:db:ee:9c:d5:53:
         34:2b:de:e1:a6:5b:34:58:56:0d:a0:04:d6:6b:93:36:f3:53:
         1c:d1:8b:da:b5:12:97:51:0b:70:f4:2e:dc:1f:4a:b9:12:ba:
         b2:91:e5:7a:b7:29:7b:4a:68:cf:d2:65:1e:0a:cd:d2:49:38:
         53:e3:9a:42:84:35:10:f2:35:ed:6c:31:a6:6e:0d:32:1b:11:
         61:4a:fd:cc:23:d7:f9:e8:6a:8e:a6:07:1f:e4:cf:9a:0b:af:
         97:8e:88:33:81:04:2d:e5:18:6b:be:3e:d1:fe:26:95:43:f6:
         52:93:53:2c:c3:91:17:26:48:41:ca:d0:e1:dd:7b:be:8d:d8:
         1a:02:fa:4a:64:19:f7:a2:da:52:92:d7:e0:72:c2:a7:49:41:
         1f:aa:e8:2f:f5:0d:8d:85:1e:fe:16:0a:ef:40:aa:a9:ec:90:
         e8:e5:4b:7a:9c:ed:72:7e:2a:39:7f:14:67:7a:fc:7a:5b:13:
         35:b3:44:3a:25:02:4e:ee:ba:30:d0:49:4d:d5:2f:03:c6:9a:
         f0:1a:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org