Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa
File:                     3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa (raw, json)
Hash identifier:          bXJmfYYa2sbwrgVdzUYxUfBKfgZYkpTNCxdYDB2sETk=
Subject key identifier:   40:33:47:8A:A8:0C:52:C3:66:EE:30:6F:07:E7:FE:A4:8B:62:E9:5E
Certificate issuer:       /CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4
Certificate serial:       408D65A690AC7C50FA972CAD90812D6FC3E73BC4
Authority key identifier: 91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa
Signing time:             Tue 05 Mar 2024 18:09:14 +0000
ROA not before:           Tue 05 Mar 2024 18:04:14 +0000
ROA not after:            Tue 04 Mar 2025 18:09:14 +0000
asID:                     263216
IP address blocks:        191.98.208.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8d:65:a6:90:ac:7c:50:fa:97:2c:ad:90:81:2d:6f:c3:e7:3b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4
        Validity
            Not Before: Mar  5 18:04:14 2024 GMT
            Not After : Mar  4 18:09:14 2025 GMT
        Subject: CN=4033478AA80C52C366EE306F07E7FEA48B62E95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:0a:b9:61:ae:f0:c0:a3:ae:9e:3a:a4:14:
                    15:19:4c:9b:03:d7:aa:94:5a:62:e5:25:af:9e:e7:
                    3f:a7:06:36:75:2b:f0:dc:d0:a5:e0:d0:1c:66:e1:
                    79:ee:a9:07:8b:c7:15:8b:22:bd:68:bc:d0:19:a9:
                    c8:4c:59:8e:92:17:7b:68:af:40:99:24:78:fe:1a:
                    bd:0b:b4:a0:2e:b6:1c:a1:af:fe:1d:0d:00:36:b3:
                    a1:11:46:53:e9:34:3f:a1:cd:b9:d9:85:7b:69:96:
                    24:37:7d:59:73:91:58:b8:0d:7a:c5:fc:33:ae:da:
                    e0:99:e3:8b:b3:29:88:04:da:01:cf:f6:a1:45:9e:
                    73:c3:f0:f5:2c:67:9b:5b:81:cb:6f:73:88:e2:43:
                    18:12:cd:07:db:cb:17:a6:0a:79:2b:95:ee:85:10:
                    41:c7:93:46:59:56:6b:65:64:0e:57:16:94:7a:dd:
                    95:0e:02:8c:ef:13:10:34:eb:2d:f0:c1:31:1a:15:
                    62:2c:9d:83:5d:20:d8:ec:0c:79:35:51:60:2f:6b:
                    2d:5c:4d:9a:cd:ae:13:ae:1a:1c:cb:81:97:d0:7f:
                    40:10:d6:46:37:bf:53:cb:f1:12:d5:12:6a:bd:42:
                    8c:60:ab:0d:5b:20:f7:2b:da:17:39:41:e8:7d:81:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:33:47:8A:A8:0C:52:C3:66:EE:30:6F:07:E7:FE:A4:8B:62:E9:5E
            X509v3 Authority Key Identifier:
                keyid:91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:75:34:6f:82:10:58:2c:2a:8e:89:a4:0b:7a:22:dc:6b:e0:
         b3:3e:d4:bc:6e:07:ac:da:4e:b6:b6:f5:4d:6b:37:28:93:49:
         59:76:51:9d:04:91:09:7d:2f:8a:1e:78:5b:6f:fa:a5:64:a1:
         a4:1b:28:27:55:c9:69:af:da:88:1f:9f:9b:52:14:28:98:bc:
         60:3e:85:07:8b:38:1b:ca:59:09:4c:48:51:e7:51:c1:17:ef:
         a4:f9:ae:7a:32:b2:73:5d:5e:de:a1:b1:33:74:f7:f5:ac:0e:
         91:c7:6f:cf:bb:c6:0a:e3:f1:30:c4:47:b2:01:74:41:7e:46:
         07:f5:cc:c1:c3:ff:48:af:92:05:04:48:ec:ee:32:c9:e8:63:
         dd:0d:1a:18:81:25:9a:cb:5d:65:92:74:a1:88:3a:c0:07:c0:
         8a:e0:0a:23:22:c6:3e:f5:5d:08:56:74:f0:50:07:5c:20:27:
         c7:f3:ab:ef:b2:be:c4:38:41:cc:fe:f6:f3:03:84:e7:80:95:
         e2:c2:4c:d4:b8:40:1a:15:75:9a:7d:20:6c:54:6f:8c:3b:64:
         1d:94:a5:39:99:7d:78:7c:bf:75:a8:ca:7c:be:b5:09:0d:ab:
         96:96:2f:ec:97:8b:b4:4c:f2:a8:67:a5:40:e4:58:18:49:68:
         d7:1b:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org