Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3134362e302f32342d3234203d3e20343030383636.roa
File:                     3139302e39382e3134362e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          L+NkOG/nhT3cRmThA2xsDjteIDCFpMNlSIKaX03EvEU=
Subject key identifier:   E8:A6:1F:2E:C0:2A:9E:D7:04:83:30:CB:CB:80:F4:9B:41:CF:DC:1F
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       39CBE696A9D1A14A4246330C277E6977EB8819D5
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3134362e302f32342d3234203d3e20343030383636.roa
Signing time:             Tue 04 Feb 2025 18:25:14 +0000
ROA not before:           Tue 04 Feb 2025 18:20:14 +0000
ROA not after:            Tue 03 Feb 2026 18:25:14 +0000
asID:                     400866
IP address blocks:        190.98.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cb:e6:96:a9:d1:a1:4a:42:46:33:0c:27:7e:69:77:eb:88:19:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Feb  4 18:20:14 2025 GMT
            Not After : Feb  3 18:25:14 2026 GMT
        Subject: CN=E8A61F2EC02A9ED7048330CBCB80F49B41CFDC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:03:75:32:69:8e:94:70:18:89:05:35:9c:4b:
                    27:e5:3f:b6:8b:bf:8f:ab:fb:b9:92:f0:2a:60:a8:
                    9e:1d:e6:ae:19:27:0a:d6:e0:9d:5a:db:50:54:aa:
                    1e:fd:31:d3:c1:be:81:15:95:a4:37:9a:e2:77:58:
                    6d:1a:67:dc:29:0c:54:f5:76:fd:4e:21:19:86:b9:
                    33:11:7e:6f:ab:ff:d4:6c:89:d2:4d:56:1e:80:24:
                    3d:df:c6:bd:ac:95:a2:92:66:2f:82:a5:cf:47:04:
                    64:ff:b6:25:34:80:64:9a:c1:85:b1:f7:af:66:17:
                    0a:6f:2e:36:6b:f7:8a:ad:e8:1f:7c:ba:55:64:1b:
                    d9:89:29:86:d0:00:1f:0a:8b:ea:85:82:f4:c4:35:
                    24:66:59:06:ae:38:42:0c:30:53:d4:32:59:a2:f5:
                    1b:5d:db:29:a7:3c:58:0e:7a:03:bb:3d:e2:21:45:
                    98:49:7b:e7:86:41:6a:5a:14:d7:42:b5:cf:b1:51:
                    e0:37:26:21:9f:1a:ad:70:1c:e0:89:7f:5b:8e:ee:
                    a8:20:85:9e:2f:84:ee:57:30:ab:d6:79:19:4f:c4:
                    26:ff:04:20:37:06:85:84:0f:df:02:de:16:ff:75:
                    e5:fa:18:b5:8f:f7:08:3c:0e:1a:c5:c9:b2:d6:7a:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A6:1F:2E:C0:2A:9E:D7:04:83:30:CB:CB:80:F4:9B:41:CF:DC:1F
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3134362e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ab:78:bc:af:f9:03:c8:b5:6b:87:2d:57:ed:61:43:5b:e4:
         82:56:e7:a1:b4:2d:a0:e7:f4:d4:43:c1:78:30:42:0a:00:de:
         8f:31:14:76:f5:58:33:b9:d7:22:c7:76:e7:30:57:d5:5f:0a:
         cc:fb:65:6d:a4:c9:0f:01:a1:5c:5e:19:81:bc:2b:88:b9:4f:
         80:ad:e8:12:7f:8e:47:db:a9:37:73:f1:5c:4d:af:a3:8a:af:
         6d:b6:77:e0:07:e3:b8:2c:89:1c:57:5a:fa:43:37:19:96:a1:
         32:c4:8a:72:65:d7:37:47:f0:0e:1b:03:42:7d:97:ce:a5:f8:
         6e:05:d0:09:5f:b9:f5:30:46:ee:c2:74:03:17:2b:be:de:e5:
         63:6c:ef:f2:3b:59:f2:ac:7b:07:58:17:2f:52:42:3d:4f:bd:
         4c:d0:be:cd:68:7b:1b:7e:7e:63:57:76:14:e3:eb:59:dd:e4:
         49:e8:26:e1:f0:13:c7:74:09:31:db:33:e8:6f:5d:5a:87:be:
         e5:54:cb:09:d4:fa:7e:76:95:ce:2a:97:b6:ff:49:8a:85:58:
         16:9f:22:6e:91:c9:c9:23:68:73:a4:9b:66:fd:30:20:ef:6c:
         23:7c:27:3e:96:b0:08:5c:4b:37:0f:eb:c5:83:b9:31:59:7a:
         09:78:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:39 2025 by rpki-client