Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa
File:                     3139302e39382e3133362e302f32322d3234203d3e203238303336.roa (raw, json)
Hash identifier:          l/oNX3c/s0nf3sK/+ThdYYBm1XOI85Q0XoGh06lsVKk=
Subject key identifier:   A0:9A:3E:E6:71:D6:F0:BB:41:74:FA:17:9D:47:28:31:7E:E5:D4:E8
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       2A55E8A054754148F54EFA81B51A5F0CF02A85CD
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa
Signing time:             Tue 05 Mar 2024 18:18:42 +0000
ROA not before:           Tue 05 Mar 2024 18:13:42 +0000
ROA not after:            Tue 04 Mar 2025 18:18:42 +0000
asID:                     28036
IP address blocks:        190.98.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:55:e8:a0:54:75:41:48:f5:4e:fa:81:b5:1a:5f:0c:f0:2a:85:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Mar  5 18:13:42 2024 GMT
            Not After : Mar  4 18:18:42 2025 GMT
        Subject: CN=A09A3EE671D6F0BB4174FA179D4728317EE5D4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:6a:2e:5e:cd:11:23:d1:31:02:19:29:4b:
                    53:70:ed:22:53:4d:b5:84:35:33:88:de:3b:78:e9:
                    41:3e:ad:7d:81:0f:68:64:6b:bd:4d:89:4e:8b:af:
                    e9:09:ab:06:e1:be:9c:5d:0a:d6:c9:3d:e9:24:31:
                    39:81:4d:65:13:52:9a:b0:b1:8e:14:bc:45:90:fa:
                    6e:b5:ce:24:19:cf:04:0e:a0:ef:8e:c0:78:3a:45:
                    77:3c:d5:93:f9:f7:11:06:41:28:81:fc:78:4a:44:
                    23:38:39:08:52:80:d6:bc:96:b4:4f:96:ba:fe:97:
                    db:03:1b:f7:23:43:58:38:17:13:a2:a2:51:71:68:
                    02:b0:bf:79:26:07:84:25:14:80:9e:ef:59:24:f8:
                    e5:11:db:16:aa:bc:98:d6:d4:d6:99:e6:4d:67:9a:
                    47:00:03:15:8e:74:bc:9f:78:0b:89:a7:7b:8a:b7:
                    4d:60:de:d2:0d:b9:ef:d7:03:8b:e8:af:ca:4e:4e:
                    c9:44:22:36:3b:59:2f:87:a2:54:5d:89:24:95:8e:
                    c1:54:bd:5e:0a:1c:41:40:5c:2e:3c:cf:a4:de:5f:
                    0d:d5:50:a1:60:82:f9:2b:02:25:28:7e:30:36:4c:
                    a7:36:10:74:aa:46:f7:57:1c:48:92:30:b0:5e:bc:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:3E:E6:71:D6:F0:BB:41:74:FA:17:9D:47:28:31:7E:E5:D4:E8
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:4d:28:e2:a0:4b:06:c6:cc:0d:32:9f:3a:75:2b:b3:a3:d3:
         f5:a1:fd:7f:7a:71:d4:a2:a1:87:90:8d:83:b5:7c:2e:fa:68:
         8e:73:bc:98:00:ed:d9:ad:64:d4:b1:b7:46:77:a7:9a:f6:e2:
         a5:1e:59:c7:db:7f:fe:3d:db:af:7f:3d:bc:11:71:4b:c2:ca:
         3c:35:fe:92:f6:d4:b1:eb:52:d2:51:98:04:19:dc:a3:0b:29:
         65:9c:34:f0:e0:2b:e2:65:64:51:26:1a:bc:1e:ca:95:81:6c:
         e7:d5:3d:ad:0f:f6:b9:35:2e:41:d8:a8:e3:cd:4e:2e:04:55:
         af:c0:07:a0:a5:1e:85:ec:a6:60:84:42:b2:f7:ff:fd:87:a5:
         71:89:da:2f:71:d3:8d:92:24:3e:9e:9d:da:bb:52:43:37:75:
         84:23:93:a0:4e:a5:d2:59:72:15:f7:96:ce:fb:c4:0d:de:cd:
         20:9c:8f:76:0c:f5:f4:b1:6a:e6:a5:0f:dd:e6:81:b3:90:28:
         05:44:c0:0f:79:7f:e7:c1:fe:3f:5f:06:8d:fa:f6:e5:9f:24:
         3d:c7:0d:7c:78:b5:85:50:9e:b6:51:b5:92:66:e0:98:1a:07:
         3c:f9:ba:84:4f:6e:a3:f6:f7:9d:0c:9e:ee:06:35:32:3f:99:
         f3:cf:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org