Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa
File:                     3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa (raw, json)
Hash identifier:          7QGCIfhM7C29kV+9GJX6mzO86NsN72DOpHFMhHkgTmg=
Subject key identifier:   99:55:BD:B8:EF:9D:B6:77:8E:C5:90:BB:68:24:8F:3D:A2:29:E6:F6
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       3B4F894F7D1C8A14697AC1C30AA2B5CD29D87C15
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa
Signing time:             Tue 05 Mar 2024 17:58:32 +0000
ROA not before:           Tue 05 Mar 2024 17:53:32 +0000
ROA not after:            Tue 04 Mar 2025 17:58:32 +0000
asID:                     264628
IP address blocks:        190.103.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4f:89:4f:7d:1c:8a:14:69:7a:c1:c3:0a:a2:b5:cd:29:d8:7c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Mar  5 17:53:32 2024 GMT
            Not After : Mar  4 17:58:32 2025 GMT
        Subject: CN=9955BDB8EF9DB6778EC590BB68248F3DA229E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:24:a8:81:30:91:b8:28:18:80:01:a3:42:
                    88:bd:47:69:70:ad:77:db:5b:91:65:02:05:20:61:
                    e9:65:0e:c7:47:b4:be:46:ae:6c:6b:b7:ca:28:f7:
                    91:45:fe:14:f2:87:d4:3e:bd:41:59:07:13:7f:51:
                    53:06:fb:57:60:62:82:9f:87:3a:03:f8:37:cd:c2:
                    6a:54:97:f2:f1:5b:b2:86:14:f2:95:6c:c1:36:3c:
                    17:fc:81:18:88:33:23:a9:19:e4:bb:85:3e:ff:37:
                    ad:a6:b9:7f:8e:63:bc:e7:4c:e7:71:c9:c2:24:ce:
                    01:30:7b:3a:d9:e9:13:dd:ea:00:42:cd:64:38:7a:
                    58:6e:b4:34:7d:71:72:e3:f0:5b:2e:58:a0:1f:30:
                    d0:06:90:5c:18:9d:6b:af:6d:75:8c:5e:2b:79:70:
                    9a:63:13:25:4d:1b:1f:d1:58:b2:17:92:98:07:8e:
                    b1:23:e1:58:fd:bf:23:8b:fa:07:2b:f9:27:4e:c5:
                    cb:4d:cf:54:44:a4:68:3e:20:c6:6f:c2:d3:8d:ca:
                    33:c3:03:6d:86:7c:81:8d:a9:eb:17:15:09:1e:53:
                    9f:67:99:9c:11:78:82:51:ea:dd:53:2e:81:a9:7b:
                    1d:3b:78:05:3d:51:28:c7:75:e2:7b:d0:37:08:af:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:55:BD:B8:EF:9D:B6:77:8E:C5:90:BB:68:24:8F:3D:A2:29:E6:F6
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:07:8b:60:80:11:7a:68:b3:6c:54:03:d2:fa:4d:0f:5a:66:
         09:f2:a4:8b:e2:0f:44:d3:a1:2b:26:f4:1a:50:48:2f:21:ce:
         bf:b6:66:67:71:85:3b:07:56:2b:cf:a2:f5:3b:b0:de:f0:3d:
         24:86:04:82:3a:17:6f:cd:aa:fa:06:11:c3:a3:e6:e3:e3:2c:
         7e:d7:a8:99:43:d5:d9:a4:35:17:50:74:20:63:f4:5e:1f:c8:
         52:65:9f:9b:4c:2c:fe:49:95:cb:83:5e:b2:aa:7e:49:d8:e2:
         9d:f4:7b:ef:67:6e:cd:04:b1:e9:9d:7d:92:ab:1d:39:9b:f2:
         aa:03:9c:ad:08:44:1f:70:65:32:2a:bb:94:39:3c:03:cd:03:
         9f:01:00:3a:99:56:cd:9e:66:75:5b:38:7c:33:a9:85:5b:e6:
         be:9e:52:31:c3:21:42:80:27:51:c6:03:74:85:88:a5:09:65:
         7b:9c:d7:91:3f:eb:4d:2f:ed:3e:13:6c:11:54:1e:b5:a1:fd:
         b1:64:cd:6c:93:2a:6a:84:d9:ad:ef:a2:ce:e0:18:a5:bd:58:
         0d:74:c0:a6:0f:6b:fb:d7:4a:a4:e1:6f:56:76:9b:c0:6d:b4:
         d5:7e:4e:13:03:ae:7c:ea:26:d1:24:c5:eb:cb:b9:63:0a:66:
         7b:50:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org