Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa
File:                     3139302e392e35382e302f32332d3234203d3e203238303936.roa (raw, json)
Hash identifier:          KRAB6vcuU+Ww27xknoManBFeykMyuInAzd4gpL3Km+I=
Subject key identifier:   09:88:00:BB:DF:85:BA:89:A0:F0:45:17:95:D8:48:98:EB:26:B6:70
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       66D61B893EF3D6EDBD509FF12A6A25E21BBF9661
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa
Signing time:             Tue 05 Mar 2024 17:58:36 +0000
ROA not before:           Tue 05 Mar 2024 17:53:36 +0000
ROA not after:            Tue 04 Mar 2025 17:58:36 +0000
asID:                     28096
IP address blocks:        190.9.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d6:1b:89:3e:f3:d6:ed:bd:50:9f:f1:2a:6a:25:e2:1b:bf:96:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Mar  5 17:53:36 2024 GMT
            Not After : Mar  4 17:58:36 2025 GMT
        Subject: CN=098800BBDF85BA89A0F0451795D84898EB26B670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:d7:2a:a8:6e:b9:21:69:b2:bf:1a:2a:af:
                    c5:81:c5:e7:4d:39:db:79:85:18:e4:e6:cf:04:19:
                    2f:46:3a:f8:28:d9:96:c3:cc:cf:3a:b6:40:94:0d:
                    83:da:a6:06:04:64:27:78:82:9c:b2:ae:7b:07:5e:
                    ba:55:1a:3b:68:43:3e:0c:f4:62:6b:9b:64:b3:42:
                    0c:f6:8b:1c:67:59:52:d1:ec:f7:bd:92:48:63:f1:
                    66:fa:20:5f:01:8d:27:30:56:19:fc:66:24:01:1d:
                    05:46:e8:19:ec:bd:1d:40:03:a8:a9:88:7d:39:4e:
                    41:88:33:7e:8b:9f:80:cc:26:81:b0:67:44:fb:87:
                    32:d3:ea:41:a9:84:55:62:81:af:de:87:4e:02:f9:
                    8a:fa:80:3a:7e:54:d5:14:82:2b:c3:71:c8:d6:7a:
                    f1:ce:04:f8:6f:e6:72:a6:df:d5:55:ea:37:98:a2:
                    e8:01:b1:86:32:4a:9c:b5:d6:be:81:68:2a:c5:84:
                    fe:92:09:7b:d1:6b:42:c2:9b:17:cd:dc:f7:1d:28:
                    1e:c1:d9:0d:d0:6b:27:8d:b7:9c:39:81:27:be:58:
                    1d:c3:50:b1:83:cd:80:00:b8:40:a7:b1:ef:a3:44:
                    a3:bc:9c:54:9e:57:5c:d6:b4:57:28:42:e7:25:fd:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:00:BB:DF:85:BA:89:A0:F0:45:17:95:D8:48:98:EB:26:B6:70
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:c9:7e:d6:7e:64:e5:09:9f:01:42:32:8d:fb:7c:f5:70:
         82:e3:d0:1c:83:13:c5:ca:73:f4:95:8f:8a:ae:f2:50:23:fd:
         11:90:18:59:83:1d:92:c9:54:e2:86:c3:81:72:da:cc:f9:84:
         8e:90:9a:3e:61:9b:b8:2d:84:58:23:89:1f:9d:b7:eb:4b:ac:
         27:f2:13:5b:40:e4:f3:7b:db:8e:fe:4f:08:b0:e2:51:b7:dd:
         84:95:08:af:f2:62:75:ec:e5:a9:22:b8:eb:04:71:cc:23:aa:
         39:91:f1:dd:51:e0:8f:f3:2b:7c:6d:50:46:8e:3d:1a:03:cc:
         4d:ee:c0:05:98:5d:e8:8b:fe:b8:7a:9d:51:ce:15:87:b3:3a:
         8d:58:83:57:c4:e3:d0:26:69:f6:f3:13:ed:f2:8e:2b:37:04:
         d0:87:15:07:77:72:2d:3c:1c:54:9a:9f:8e:1e:8c:46:56:de:
         e7:f5:4d:70:72:73:a3:5f:43:c9:dd:13:a2:58:20:6a:2d:d6:
         49:a6:75:e8:99:7f:e4:9a:8c:ad:14:3f:fc:21:ad:3f:7e:83:
         8f:80:50:28:c6:e7:9c:69:98:9a:11:5d:5a:e0:79:f1:8f:f2:
         0a:12:ad:1d:ca:7e:85:ad:99:0a:32:19:dc:b2:ed:5a:8f:62:
         da:17:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org