Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa
File:                     3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa (raw, json)
Hash identifier:          0iNZEzKw3Wy+rRedkqVsVlxsCvkovJTHgg0D5mXmyLI=
Subject key identifier:   CD:4E:C6:00:BA:FD:83:C0:98:62:70:2E:E8:84:D8:8D:73:85:11:FC
Certificate issuer:       /CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4
Certificate serial:       30E2BC8921DA927C3E2B6AE71E2E79B9490BC315
Authority key identifier: 91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa
Signing time:             Tue 04 Feb 2025 18:35:45 +0000
ROA not before:           Tue 04 Feb 2025 18:30:45 +0000
ROA not after:            Tue 03 Feb 2026 18:35:45 +0000
asID:                     263216
IP address blocks:        191.98.208.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e2:bc:89:21:da:92:7c:3e:2b:6a:e7:1e:2e:79:b9:49:0b:c3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4
        Validity
            Not Before: Feb  4 18:30:45 2025 GMT
            Not After : Feb  3 18:35:45 2026 GMT
        Subject: CN=CD4EC600BAFD83C09862702EE884D88D738511FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:45:ec:fe:81:0a:25:2f:46:3b:f7:21:18:
                    30:6b:ab:95:3a:a0:15:38:26:07:26:ea:14:05:de:
                    a9:53:46:e1:3d:ea:23:8f:af:b7:59:e8:8c:8a:1d:
                    b3:dd:34:bd:80:82:a6:9b:fe:2d:86:cf:20:92:de:
                    34:62:2c:32:b5:09:0a:2c:ee:2f:66:a5:c7:ed:c6:
                    f0:0c:bc:13:cf:0c:bd:6e:26:60:da:14:52:6e:ea:
                    0a:e6:1c:40:c6:4e:f0:5b:40:79:00:5c:bd:05:d5:
                    bd:65:1e:bc:f0:a0:a7:f9:95:86:50:f9:a1:b6:51:
                    3f:c0:38:17:19:e0:a7:29:79:38:b9:79:da:09:f9:
                    a3:f8:ad:be:70:af:4e:da:fe:1d:87:39:40:48:5e:
                    24:ff:ef:71:3f:82:d2:68:b7:b6:0f:aa:d0:77:93:
                    f5:8a:b1:a2:f1:56:b8:ad:65:22:9d:9e:af:bf:1e:
                    10:31:9a:2f:ef:1b:66:55:b2:56:d7:0b:6c:4e:c5:
                    b5:7f:56:5c:57:10:55:6a:f4:1b:ff:69:0d:06:10:
                    bb:50:9a:32:4d:0c:b0:ae:de:8d:fa:2a:a1:d0:3a:
                    ac:46:92:a5:d1:5c:01:1e:3d:dd:4d:12:16:0b:f5:
                    36:1f:bb:e6:db:4b:fd:96:87:2e:0b:5c:52:9f:5c:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:C6:00:BA:FD:83:C0:98:62:70:2E:E8:84:D8:8D:73:85:11:FC
            X509v3 Authority Key Identifier:
                keyid:91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:91:c5:49:98:dd:77:a4:46:18:50:17:e5:e9:58:25:08:
         7d:6a:af:9b:d4:99:05:5f:0a:d8:68:4e:1b:f8:c2:11:19:ad:
         74:53:c1:b5:50:d4:60:84:2c:61:4e:0e:45:ec:16:16:ec:af:
         19:2b:42:78:f2:f6:9b:91:ea:87:b3:e9:d1:90:0f:1e:93:a2:
         2f:c0:0e:99:b5:4b:c3:95:cb:64:f1:62:ac:09:e5:de:ec:2a:
         30:84:50:c3:a3:a9:3c:2d:e2:e9:6a:62:8e:a0:7b:e6:b5:22:
         c0:0c:8b:c7:9e:65:52:4f:d9:3e:ab:3a:cf:48:59:45:17:c6:
         31:09:2b:cc:67:79:6c:a8:53:0b:44:54:74:9c:5a:31:ce:9c:
         3e:a5:c6:5d:7f:14:9a:e7:4b:03:37:b4:b5:50:55:cf:0d:92:
         68:10:dd:d6:1f:c7:4b:d6:d9:4f:a0:b5:52:cf:bb:ff:22:61:
         dd:69:6d:87:8c:0d:f8:95:af:1f:09:74:fb:c1:41:7d:c5:bf:
         a0:22:d7:e5:c5:e1:c7:42:4d:f4:90:d8:3f:f0:96:2f:66:13:
         36:fc:6e:97:00:59:b8:2f:84:bf:cb:54:fd:3e:46:a5:53:d2:
         f3:4e:8e:5b:50:1d:30:88:af:20:b4:a9:a6:af:22:99:34:63:
         41:c0:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:55 2025 by rpki-client