Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa
File:                     3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          pu9PUUBVhlBbuPFufoDQGNpfI9apmDMLBWbvn/tPfw0=
Subject key identifier:   0E:67:FD:98:B2:41:07:D0:8A:99:81:E4:24:EC:99:FD:65:FC:C6:44
Certificate issuer:       /CN=D6578B90795CFC3357FE4AF953B5F071689073D0
Certificate serial:       4E7B138BDCA9ACCFDCE013208FEC8ED1EAD6F201
Authority key identifier: D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa
Signing time:             Tue 05 Mar 2024 18:23:13 +0000
ROA not before:           Tue 05 Mar 2024 18:18:13 +0000
ROA not after:            Tue 04 Mar 2025 18:23:13 +0000
asID:                     263218
IP address blocks:        191.98.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7b:13:8b:dc:a9:ac:cf:dc:e0:13:20:8f:ec:8e:d1:ea:d6:f2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6578B90795CFC3357FE4AF953B5F071689073D0
        Validity
            Not Before: Mar  5 18:18:13 2024 GMT
            Not After : Mar  4 18:23:13 2025 GMT
        Subject: CN=0E67FD98B24107D08A9981E424EC99FD65FCC644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:8a:be:b4:6f:3b:4c:ab:3a:7e:e5:30:d1:
                    12:44:3a:08:02:78:bf:f2:e3:45:2b:ab:e4:50:e8:
                    1f:2c:aa:05:9c:46:b5:dd:bb:ac:e7:d5:12:cf:0f:
                    ad:e4:18:2c:06:5b:6a:e5:75:c6:de:11:01:5a:19:
                    48:cf:fc:bc:9a:21:b3:80:2e:65:41:07:ae:cd:f8:
                    f3:69:3f:0c:ee:c4:9e:82:44:e6:c5:9d:79:7b:d1:
                    e5:bc:c9:8a:b3:a1:c4:92:9b:9e:d2:45:6e:67:d4:
                    aa:85:fc:90:e6:7c:78:34:71:7a:69:41:c7:32:04:
                    10:53:a6:11:af:21:25:f9:da:65:13:11:14:37:ed:
                    8a:d7:a3:b8:c8:b3:ab:b0:f0:1d:b5:0a:c1:0b:de:
                    11:06:10:8b:6f:02:18:5c:37:27:54:ec:70:0c:9a:
                    38:5c:22:26:d3:4a:5e:bc:70:92:68:a2:0e:24:d6:
                    d3:e7:16:06:da:3d:1c:9f:36:96:a5:e9:ac:d7:84:
                    e1:b6:73:2e:94:32:7d:bb:15:1a:f3:85:53:dd:f8:
                    d0:0d:08:50:68:63:a9:d1:a0:21:ef:30:b0:8d:95:
                    29:52:8f:fa:aa:22:44:b6:db:33:8c:08:9d:19:33:
                    ec:fe:11:fd:28:31:93:18:ec:06:92:1f:37:0a:69:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:67:FD:98:B2:41:07:D0:8A:99:81:E4:24:EC:99:FD:65:FC:C6:44
            X509v3 Authority Key Identifier:
                keyid:D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:32:49:22:ac:6a:d3:a8:c9:cb:6f:9e:91:e4:27:8e:fd:
         7a:e4:4a:d6:d5:55:94:7b:22:56:60:9a:0e:15:4c:2d:88:5c:
         bd:75:7d:e0:67:14:ca:c9:0f:d1:4b:ac:06:b0:32:c3:58:23:
         ad:4e:b9:8b:2c:3b:02:0b:19:f0:b6:f4:39:a6:e6:b5:14:0c:
         38:55:91:03:e2:38:76:ca:77:24:56:f7:7a:67:ec:24:ef:05:
         2a:12:d8:48:b3:7a:6c:d4:61:0b:73:cc:d9:9f:b5:e3:d0:1d:
         53:d0:90:a0:d9:9b:6c:4c:2a:f9:fa:85:51:bb:0d:7e:9d:01:
         6a:e8:9a:80:8a:b4:25:58:36:e1:a0:86:f3:ef:98:dc:c0:41:
         69:13:01:0d:44:4c:d1:08:77:ef:77:e8:ad:00:70:3b:80:e0:
         56:b1:19:4c:6a:f7:8f:ea:6e:d1:ea:7f:dd:7a:a9:a4:d9:13:
         d2:16:1a:89:37:7e:a5:0b:72:ea:1f:a8:f7:71:d9:da:4c:2f:
         47:a9:ac:6a:f0:77:5a:4b:ec:ee:4d:af:71:9d:78:83:92:74:
         f7:b1:3f:49:9d:07:41:e3:c0:6d:5f:5a:70:10:23:3a:27:59:
         dd:a8:63:e4:67:72:f9:2b:18:6a:dd:2f:cc:5d:a0:9a:02:ef:
         36:d9:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org