Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa
File:                     3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa (raw, json)
Hash identifier:          OMPnfkN5egzd9PA+gyG20bSDLao2PFsMQrNqnr2I4BA=
Subject key identifier:   34:24:BE:A5:50:5B:A0:8A:83:E7:7D:52:31:A0:24:19:8A:AB:B4:0A
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       2FB82F4034449C4D766BFDD5CEC000B91DA45EC9
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa
Signing time:             Tue 04 Feb 2025 18:46:41 +0000
ROA not before:           Tue 04 Feb 2025 18:41:41 +0000
ROA not after:            Tue 03 Feb 2026 18:46:41 +0000
asID:                     267684
IP address blocks:        190.83.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:2f:40:34:44:9c:4d:76:6b:fd:d5:ce:c0:00:b9:1d:a4:5e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Feb  4 18:41:41 2025 GMT
            Not After : Feb  3 18:46:41 2026 GMT
        Subject: CN=3424BEA5505BA08A83E77D5231A024198AABB40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:03:0f:80:93:68:03:01:af:ac:0d:50:7f:
                    55:f9:1c:d6:2e:f1:09:df:8e:16:27:7d:e7:e6:de:
                    87:42:5e:ea:75:7d:24:84:e6:4f:c3:30:dc:ed:58:
                    1a:78:d7:0c:66:70:62:a6:4a:b1:18:a9:49:2a:dd:
                    81:1b:23:9b:e5:ce:8e:b2:3e:cb:09:33:21:b2:59:
                    ad:22:6e:24:9c:00:b8:ff:f9:8c:24:a5:0e:8c:3b:
                    6d:fe:e7:52:61:ac:13:6d:b1:46:78:91:5b:c6:67:
                    f3:8b:dc:9b:ce:29:17:31:c7:e5:24:ff:10:df:73:
                    32:f8:0b:2e:27:e5:88:f5:cc:7f:16:c9:61:61:60:
                    92:9d:ae:29:c5:d4:c1:48:99:60:69:39:87:3d:d6:
                    a2:f9:1b:aa:6a:97:21:26:f5:f2:ce:1a:93:7f:5e:
                    02:86:2f:99:bb:aa:e7:26:68:ce:7d:e7:ed:6e:0c:
                    96:5e:e1:6b:51:b6:f7:e3:fe:d2:21:cc:a2:e7:df:
                    80:e3:a0:b1:1e:c5:87:05:cd:55:5f:0a:c4:7d:3b:
                    64:ef:d3:90:0b:ed:32:22:ec:6d:4c:05:1a:95:b9:
                    6f:0e:e0:d8:b3:f2:4e:e3:5f:5f:d4:b1:5f:fa:c6:
                    83:e1:d3:8e:41:35:29:49:26:ba:05:a1:22:d8:88:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:24:BE:A5:50:5B:A0:8A:83:E7:7D:52:31:A0:24:19:8A:AB:B4:0A
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:81:bd:1e:cd:e5:59:0a:d7:14:1b:53:f4:f1:a8:51:17:98:
         3d:7f:c7:7f:76:72:de:ec:07:ef:4b:75:7e:d7:5f:06:ae:64:
         25:6b:93:40:a2:14:99:bc:bf:12:cf:49:47:58:16:cc:b9:d2:
         9a:c8:bc:83:3b:ae:3c:16:52:ad:eb:08:fc:5e:3b:f2:0f:6e:
         cd:22:9a:b6:6a:0e:60:fc:58:9e:eb:c0:2e:92:40:1d:e9:cd:
         9e:08:f5:ad:1d:09:b3:62:8e:04:21:25:4d:c0:e4:fd:c8:b5:
         d4:91:0c:fc:49:18:4e:08:5d:20:3e:d2:2d:17:6e:0b:32:8e:
         c1:95:bc:b2:38:59:f0:94:ec:f2:dd:c2:2b:d4:b4:8b:d7:b0:
         c7:69:b9:9d:56:72:01:50:fa:50:46:e2:02:5b:7d:df:af:13:
         3b:21:1b:f7:72:65:3a:9d:71:e2:a7:e3:b4:40:27:2c:87:79:
         ee:58:ba:a8:f4:80:78:51:1b:d4:21:f7:f4:be:51:a2:ff:aa:
         1b:cd:0e:8e:c7:3f:cc:a7:bd:4f:98:af:ae:e9:27:b5:5f:4e:
         d0:c5:4f:06:e0:50:4b:ae:d1:02:88:f6:63:bf:cf:c6:da:09:
         3a:4b:d7:e1:ca:21:a8:0b:05:aa:47:2f:74:c1:1a:57:25:5c:
         3f:49:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:00:58 2025 by rpki-client