Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3139312e39382e3230302e302f32312d3234203d3e203532343339.roa
File:                     3139312e39382e3230302e302f32312d3234203d3e203532343339.roa (raw, json)
Hash identifier:          Rx+xoAuMhGDkWZTTOwPsUrKAQ9b29eY3MnRCILxV0mQ=
Subject key identifier:   19:46:A2:E8:1A:67:A6:6F:4A:A7:FC:CB:46:B5:10:B7:F8:69:5A:09
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       2EC3090CFBFA0A141D89FF163B9924E6A201F1D5
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3139312e39382e3230302e302f32312d3234203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 18:08:23 +0000
ROA not before:           Tue 05 Mar 2024 18:03:23 +0000
ROA not after:            Tue 04 Mar 2025 18:08:23 +0000
asID:                     52439
IP address blocks:        191.98.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c3:09:0c:fb:fa:0a:14:1d:89:ff:16:3b:99:24:e6:a2:01:f1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Mar  5 18:03:23 2024 GMT
            Not After : Mar  4 18:08:23 2025 GMT
        Subject: CN=1946A2E81A67A66F4AA7FCCB46B510B7F8695A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:de:93:44:29:00:61:6d:7d:f5:57:50:dc:
                    0b:6d:6a:17:49:e9:a1:80:6f:61:21:8b:b7:1b:ee:
                    d3:1a:9d:b7:d7:6b:c4:ef:31:f0:4f:e6:53:44:6b:
                    c1:48:af:ce:c2:bd:05:67:d6:5a:b9:14:67:16:25:
                    d6:9c:07:0d:7a:a2:d1:85:a9:c3:e1:57:80:59:2d:
                    3e:6d:e4:40:5a:55:ca:8a:7e:89:c6:99:d6:c4:46:
                    94:4a:a8:33:14:f9:62:4e:dd:49:88:b5:cc:86:d3:
                    4a:18:e3:73:e7:cd:a9:c6:2b:76:26:95:de:41:1d:
                    b3:65:0b:f2:1e:2e:82:53:ce:a9:27:b6:b5:3d:34:
                    aa:1a:5e:16:37:10:a6:b8:8b:8b:98:31:94:a2:26:
                    f4:a1:28:9d:96:b1:2c:88:af:7c:a9:27:35:b7:cd:
                    aa:ed:01:b4:8f:da:b0:8f:13:eb:93:e9:91:5c:ee:
                    a7:88:3d:ef:ab:2a:4a:cc:32:a1:9c:1c:1f:a1:cd:
                    43:45:1b:72:97:3b:ec:73:91:ab:29:7f:dd:00:eb:
                    19:a7:30:23:ff:ed:55:cb:ea:ef:3d:58:5c:ba:49:
                    dd:b3:9c:d3:06:a0:a3:94:55:75:4d:d6:bf:d0:dd:
                    a9:bd:93:5a:23:c9:40:a6:b8:4d:5c:ee:40:4b:fc:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:A2:E8:1A:67:A6:6F:4A:A7:FC:CB:46:B5:10:B7:F8:69:5A:09
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3139312e39382e3230302e302f32312d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:95:2b:6e:63:65:06:f1:91:2d:11:73:6b:db:52:3f:6a:0e:
         e9:44:25:a5:ef:34:c1:00:e9:ee:c9:8a:c5:9e:d6:c2:9f:db:
         5e:16:e5:bf:04:bf:76:73:c1:c1:87:8f:4e:2e:8d:a3:2b:30:
         82:e7:21:92:9e:8a:1d:41:6e:07:31:ae:dc:07:f3:74:6f:32:
         3b:e1:35:e8:51:ab:ae:4e:2e:8e:84:18:c4:84:0e:fb:9c:74:
         08:52:a7:e3:1b:64:f4:e6:dc:f8:5f:60:4c:b6:8e:5e:28:d1:
         f4:60:3f:0a:2f:aa:c1:ae:23:a1:ab:72:e0:81:59:0f:ab:a1:
         e0:2a:34:0c:ba:ca:80:65:e8:85:17:60:e4:d5:c5:02:18:29:
         4d:26:e3:a3:84:33:de:3f:d0:88:a5:a5:cc:8b:dc:57:47:ef:
         57:0e:6c:74:38:e7:45:44:b8:c1:3e:bd:8e:13:80:68:e4:91:
         84:24:c9:93:5e:42:90:7c:41:af:67:3f:56:c1:0b:93:d2:bf:
         de:da:09:39:70:d1:1f:fb:0f:60:40:ed:f0:9e:3a:a0:d4:ca:
         c1:05:41:34:18:0b:45:ae:b4:e9:a8:fd:b9:5d:fc:49:a0:d3:
         b8:b7:c0:f5:9b:d3:85:8e:7f:4c:82:ef:31:2c:51:9d:fa:7d:
         a6:ae:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org