Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3232203d3e20323639393336.roa
File:                     3139302e38332e3130342e302f32322d3232203d3e20323639393336.roa (raw, json)
Hash identifier:          ra4mcRHxTt5Es9KRCpalHMXvv5Io+Mp4I15U+HUVOOU=
Subject key identifier:   1C:4D:66:ED:73:29:25:CB:E4:09:54:7C:48:C3:5C:1C:B0:15:BF:74
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       6864480948CC4606475CEF7F205D42FC332A7293
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3232203d3e20323639393336.roa
Signing time:             Tue 05 Mar 2024 18:09:29 +0000
ROA not before:           Tue 05 Mar 2024 18:04:29 +0000
ROA not after:            Tue 04 Mar 2025 18:09:29 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:48:09:48:cc:46:06:47:5c:ef:7f:20:5d:42:fc:33:2a:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Mar  5 18:04:29 2024 GMT
            Not After : Mar  4 18:09:29 2025 GMT
        Subject: CN=1C4D66ED732925CBE409547C48C35C1CB015BF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:82:c0:77:ae:0a:a5:6a:81:3e:7b:c9:db:
                    23:7b:63:28:a5:a2:ef:b6:7c:76:6c:11:96:d8:2b:
                    0f:54:90:2a:e6:59:ca:07:98:6e:4e:95:0a:68:51:
                    72:6e:b1:bf:0d:71:f7:18:02:a0:b1:3e:59:7b:d2:
                    83:fa:14:d0:ab:3f:f1:fe:43:24:6c:4e:4d:29:1b:
                    b3:54:fc:e1:69:30:a2:5d:bd:d9:eb:4a:26:c1:8a:
                    4d:85:19:ed:b3:3a:de:07:04:68:b8:3f:62:ad:c1:
                    10:ef:5f:72:58:17:e4:e0:aa:da:cd:0b:47:2f:2a:
                    3d:20:b0:17:06:be:60:50:68:c2:f5:76:87:8b:61:
                    f6:a5:90:2c:f5:30:08:bd:6b:28:ee:a6:35:97:eb:
                    48:3d:f4:e4:4d:5d:d5:91:96:3a:3e:35:e6:98:61:
                    a1:50:d1:b1:1e:b5:08:ac:10:0b:e8:40:39:f3:9a:
                    9f:57:ec:7f:f5:56:49:3f:88:9a:b3:2e:19:d5:2c:
                    be:3d:09:56:a9:77:bd:f2:8a:92:f9:e1:f7:d2:74:
                    e4:14:f6:73:fa:42:cd:7d:92:43:88:97:3b:0f:12:
                    ed:69:2e:ab:43:e0:38:b8:8f:6a:ca:c9:30:e6:c0:
                    16:cb:54:cb:bc:55:a9:f0:91:93:60:44:bd:f6:07:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:66:ED:73:29:25:CB:E4:09:54:7C:48:C3:5C:1C:B0:15:BF:74
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3232203d3e20323639393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:e1:0e:33:c7:63:a6:10:1f:45:20:0f:f7:48:fa:9c:1b:
         19:59:5a:f7:6e:96:ac:3b:1f:bf:a9:ab:6c:92:38:9a:b1:63:
         a7:d8:60:8d:f0:92:75:1f:83:be:67:97:1b:7d:2a:1d:df:fb:
         e4:d3:84:9c:47:49:9b:3c:30:06:d3:bb:77:97:56:73:c6:30:
         84:53:99:9e:38:50:0d:21:c1:60:2c:b0:e8:50:9c:7b:27:12:
         61:61:ef:db:5d:90:66:d3:ae:28:9f:a7:21:ed:05:8f:d4:8f:
         20:f6:97:4c:d4:6b:0a:cb:88:d7:44:92:14:01:33:16:b3:bf:
         b1:a9:7a:b6:e1:ba:3e:dd:c4:61:9f:c2:0b:94:0b:a0:9e:ce:
         97:0b:83:6b:0e:cb:5b:26:a8:df:8a:5f:d2:4c:69:63:e3:80:
         a2:90:5b:78:75:81:44:3f:6f:7f:ee:a4:58:2e:77:6d:7a:d5:
         31:ca:07:6d:7e:2a:07:78:44:6b:92:e5:9d:b1:e9:22:85:87:
         d7:16:33:91:73:b1:75:b9:0c:f6:3f:e9:4a:18:7e:11:f9:0a:
         f7:26:5e:ae:69:d4:be:03:fe:e0:ac:d2:dc:23:8f:94:6e:f8:
         a6:f4:ef:e6:c8:b2:6e:4d:06:55:2e:7d:dd:fa:92:a1:11:32:
         16:27:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org