Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135342e302f32332d3234203d3e20313938313938.roa
File:                     3139302e39382e3135342e302f32332d3234203d3e20313938313938.roa (raw, json)
Hash identifier:          HhWEBAAccdv4RteNXlfR72P0Bs78h8Z1QoYmTg6WXrk=
Subject key identifier:   FE:F3:B0:F3:A3:CE:9B:B0:29:F9:AB:D3:CA:EC:35:83:05:36:C1:4A
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       2FC2797E0309ADC12181EA9314443E8EEDB43E92
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135342e302f32332d3234203d3e20313938313938.roa
Signing time:             Tue 05 Mar 2024 18:18:36 +0000
ROA not before:           Tue 05 Mar 2024 18:13:36 +0000
ROA not after:            Tue 04 Mar 2025 18:18:36 +0000
asID:                     198198
IP address blocks:        190.98.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:79:7e:03:09:ad:c1:21:81:ea:93:14:44:3e:8e:ed:b4:3e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Mar  5 18:13:36 2024 GMT
            Not After : Mar  4 18:18:36 2025 GMT
        Subject: CN=FEF3B0F3A3CE9BB029F9ABD3CAEC35830536C14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:75:54:25:e0:5d:71:53:08:17:ea:9f:46:
                    fd:87:66:57:db:a9:9c:25:22:98:91:75:99:f9:bb:
                    18:b6:9a:83:ae:66:01:b0:c9:6a:5a:1c:00:47:05:
                    3b:a0:f3:40:62:60:c4:dc:f4:0a:c4:d2:3f:9c:fc:
                    f0:24:18:5f:49:29:91:39:a5:6b:70:da:30:b8:5e:
                    62:ac:5e:ae:f2:ee:ae:4a:86:74:e8:e3:f1:0e:49:
                    b4:f8:37:a3:90:88:1e:00:4b:7d:88:b5:44:30:a9:
                    fb:99:c6:ec:83:9a:ce:41:50:d7:81:f3:c1:c7:38:
                    0f:5d:4b:76:ff:e9:c1:c5:f8:a0:47:da:8f:7e:1c:
                    b4:a5:3f:b2:d1:91:e8:9f:17:12:94:77:13:36:6a:
                    61:e2:75:ad:f2:0b:eb:8d:e8:bc:ea:48:54:b6:5d:
                    bb:02:7b:9e:80:47:3e:54:55:c8:5c:08:67:74:d1:
                    c3:e1:73:bf:66:94:42:4e:8c:1f:e9:e8:df:50:37:
                    db:22:25:ce:0d:f3:90:52:dd:d0:02:85:39:ec:4b:
                    17:11:5e:2c:3b:5b:67:c3:01:c5:9c:a2:54:f6:96:
                    b9:ee:10:56:d4:cb:f7:4f:a0:c7:4b:53:dd:a9:88:
                    bb:84:b1:53:34:f3:91:97:98:7a:40:77:83:92:98:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F3:B0:F3:A3:CE:9B:B0:29:F9:AB:D3:CA:EC:35:83:05:36:C1:4A
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135342e302f32332d3234203d3e20313938313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:4f:76:65:7b:33:7e:0f:21:9e:46:e7:4a:74:6a:c2:3e:
         ef:19:4b:45:92:88:d5:4f:ec:b6:e2:40:7c:02:55:fa:e6:5e:
         7c:d1:c9:ca:ea:db:55:4a:2a:9a:73:13:74:c5:a5:3d:24:ab:
         09:59:43:9e:9c:17:76:c8:cb:51:49:f1:e9:34:97:70:dc:d1:
         a1:04:36:6a:dc:df:fb:47:11:1a:d6:ac:94:56:86:26:37:30:
         4b:b8:8c:65:8c:cf:bf:a8:8c:14:75:b8:86:e0:a4:0b:e4:42:
         c0:b7:35:9e:ab:59:f3:ce:6e:11:47:69:73:0e:b5:d9:7f:10:
         54:f3:f3:de:14:2e:17:80:7c:9b:4b:be:a4:5a:cc:13:6f:e3:
         91:4e:4e:b1:75:35:3b:2a:fa:0c:06:27:2e:cc:8b:ed:e9:5f:
         26:f8:97:71:a1:d4:24:ac:73:2c:80:66:07:36:5d:02:fe:fb:
         fe:a7:05:af:72:c4:33:8f:89:04:d1:9e:a5:f8:2b:12:c2:82:
         4e:d4:e1:30:4e:5e:70:90:0e:f9:65:2c:81:ac:2b:c3:60:2b:
         ea:37:41:d9:5e:bd:ba:d8:e9:69:50:f3:1e:da:4d:99:ff:62:
         1a:f5:fc:41:84:f2:2a:e1:2c:c1:67:d7:54:4b:92:f5:94:a2:
         c8:da:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org