Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa
File:                     3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          hr2uAFTRT0L8F/b94vaG4KsjLJERCOZesFmAQRPSFlM=
Subject key identifier:   29:8F:78:5D:BC:6F:7E:92:61:53:03:83:79:43:48:88:E0:D3:78:1C
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       61E70F2A25CD12033263CF1B9EAF7A6205D5C34E
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa
Signing time:             Tue 05 Mar 2024 17:50:21 +0000
ROA not before:           Tue 05 Mar 2024 17:45:21 +0000
ROA not after:            Tue 04 Mar 2025 17:50:21 +0000
asID:                     262208
IP address blocks:        190.13.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 May 2024 20:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e7:0f:2a:25:cd:12:03:32:63:cf:1b:9e:af:7a:62:05:d5:c3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Mar  5 17:45:21 2024 GMT
            Not After : Mar  4 17:50:21 2025 GMT
        Subject: CN=298F785DBC6F7E926153038379434888E0D3781C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:f2:67:02:2f:a3:5f:7f:2a:07:30:a1:67:
                    17:c6:7a:15:c2:da:27:3c:ee:f7:3b:67:ad:22:6e:
                    52:51:fe:27:c2:5c:2c:c9:a0:66:9f:4b:cc:26:f5:
                    1d:ff:ba:93:79:c5:72:a2:94:9a:7e:89:cf:db:d1:
                    2b:ec:14:cd:00:0d:3b:84:8d:9e:36:84:59:2b:08:
                    f2:b3:82:a8:a3:70:f8:05:f5:d8:7f:bf:ea:9b:df:
                    c5:05:88:54:1d:a2:9a:74:59:13:eb:6a:09:ba:6e:
                    40:9f:18:e0:19:02:b1:6f:d2:02:07:37:ee:7e:b8:
                    d4:e6:2d:8d:6f:52:c9:ae:fd:d7:46:72:6e:dd:7f:
                    4c:70:c3:90:2a:f5:c4:6a:5b:c4:b2:08:d4:46:c6:
                    cc:db:5a:5b:8c:55:fe:25:70:d0:1c:6a:00:fc:6d:
                    07:43:b7:22:dd:30:1e:f5:3d:76:74:8e:ce:4f:fa:
                    ef:7b:80:a1:bb:2e:57:fe:02:ab:c7:f7:43:48:89:
                    5f:9e:c6:c3:d0:17:1c:9e:38:24:fc:14:41:9b:a3:
                    a0:f2:23:9d:c8:83:42:d8:ad:64:b0:46:2b:62:e8:
                    8b:0d:c0:db:af:d1:8a:dc:14:7b:4e:bd:20:9d:48:
                    d0:e6:2d:fa:ed:6b:e8:94:8c:92:d7:03:13:08:71:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8F:78:5D:BC:6F:7E:92:61:53:03:83:79:43:48:88:E0:D3:78:1C
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:90:22:84:2f:eb:c8:8f:b6:b8:b3:2e:01:2c:ed:53:e1:
         bd:22:1a:e1:ab:6b:ba:fa:61:82:fe:57:c3:83:d2:c8:0d:e3:
         e4:37:9d:53:aa:f6:cf:19:a9:09:31:cd:78:7c:5b:05:79:60:
         b6:25:8a:14:40:2e:a1:0b:01:c2:43:8c:2f:e8:8f:1f:f4:99:
         53:69:a1:fe:88:43:65:9b:be:43:d2:d9:d7:a2:ca:57:11:19:
         21:e3:9c:41:49:22:f7:ea:04:ab:c2:8e:b5:78:c4:2d:4e:b3:
         e4:8f:96:21:7b:0a:53:9d:c6:d2:78:31:ad:bf:b8:d1:e9:07:
         0a:1c:41:b4:cb:14:b2:6b:bc:ed:c8:63:c3:47:48:52:2a:50:
         d4:a4:30:4a:aa:69:84:c8:61:10:75:9a:1a:d0:53:1e:74:fa:
         35:c8:0d:62:6b:bb:bd:4d:d4:83:cd:3c:f9:51:28:95:61:19:
         f8:99:e1:f7:7d:bc:81:01:8b:0d:89:af:05:d0:95:3f:a5:35:
         f3:48:39:8e:c9:2d:e1:b5:8d:fa:2f:e6:8e:58:c4:62:22:a9:
         1a:a1:8c:64:fb:e9:11:3e:1d:a5:9d:64:02:0b:fe:b7:8d:0a:
         bd:2a:7a:1e:93:b1:f5:92:4c:f5:ff:2f:4b:ec:0b:f6:33:49:
         b5:a4:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:46:07 2024 by rpki-client on console-fra.rpki-client.org