Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa
File:                     3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa (raw, json)
Hash identifier:          7VAWhHqisshJn2oPb/CxLtFC+rbBHnJGQnF4r5sq/Q4=
Subject key identifier:   57:6E:3A:FA:CB:75:50:6C:39:AE:60:CE:A7:1D:95:67:29:2B:55:CD
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       2D7F25B7346321E4D27DD076E433A47D518081AA
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa
Signing time:             Tue 05 Mar 2024 18:09:28 +0000
ROA not before:           Tue 05 Mar 2024 18:04:28 +0000
ROA not after:            Tue 04 Mar 2025 18:09:28 +0000
asID:                     267684
IP address blocks:        190.83.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7f:25:b7:34:63:21:e4:d2:7d:d0:76:e4:33:a4:7d:51:80:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Mar  5 18:04:28 2024 GMT
            Not After : Mar  4 18:09:28 2025 GMT
        Subject: CN=576E3AFACB75506C39AE60CEA71D9567292B55CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:5a:ae:25:0a:8c:df:b0:5a:ee:99:2a:59:
                    13:06:57:cb:2a:75:ab:e4:4f:6e:bc:47:44:8c:77:
                    33:13:73:24:d0:3d:79:3c:05:74:ae:9a:dc:32:1d:
                    b6:4b:6d:b7:9b:b7:11:fa:42:c5:86:9e:93:33:40:
                    1f:0d:d6:fa:cd:13:a7:8f:45:62:3d:6a:f7:25:25:
                    c3:f2:3c:10:ce:6f:67:f2:b6:66:41:c1:09:69:40:
                    ce:36:6e:d9:4e:72:a7:67:2d:41:bf:02:bd:24:43:
                    d8:e3:a5:73:5b:20:b1:12:6e:12:73:d7:fc:de:85:
                    2e:ab:1e:2b:ea:f3:70:5b:a5:90:c1:21:ed:20:5a:
                    5a:5c:7e:a9:fa:2a:9a:1a:91:df:d9:52:1d:49:5d:
                    e3:6e:fb:54:1b:dc:6c:11:86:a7:71:c6:51:c8:8d:
                    6f:e3:97:06:3f:63:b4:8d:c3:45:58:7d:51:88:e8:
                    ac:20:07:6e:24:bc:41:7d:ca:28:57:2a:c7:ae:2a:
                    a1:a9:00:b4:4e:e4:b9:01:23:eb:6d:24:8c:42:b0:
                    1a:9d:67:f4:08:94:24:8f:b3:fb:24:ee:13:57:c0:
                    6b:52:27:dd:f9:57:54:33:eb:51:06:2c:0e:4c:ef:
                    aa:e8:da:a2:c1:dc:a1:f6:ef:a6:d1:ce:70:6e:d9:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:3A:FA:CB:75:50:6C:39:AE:60:CE:A7:1D:95:67:29:2B:55:CD
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:86:f5:5e:83:35:39:24:07:a9:0a:a8:c5:e7:bb:b1:5c:36:
         ff:46:2c:b8:0e:59:a3:28:a8:5b:b8:22:ff:8b:c5:c1:1d:3d:
         8e:cb:8b:69:9c:27:c4:69:27:00:1c:df:c1:36:a6:48:86:80:
         68:33:8f:94:8d:b7:63:9a:bd:8f:fd:b6:ae:26:3b:22:57:74:
         ef:65:ea:59:d2:88:6e:79:36:e0:6b:8a:b0:d8:4a:31:9f:06:
         7a:50:97:cd:f8:6f:6f:a9:ed:da:0d:28:e8:28:7e:b7:40:b5:
         0b:3c:0f:11:0f:8a:e7:ca:b8:2a:38:ed:1b:ee:5b:06:60:8d:
         bd:14:ab:c0:d4:86:74:8a:2c:fb:42:ce:2c:73:73:e8:9c:97:
         ac:46:11:df:88:7c:c0:0a:8e:f2:73:0a:37:93:f2:70:8d:6a:
         8e:53:79:df:e1:ac:87:1b:c5:41:b3:80:44:ed:aa:66:ce:6b:
         cf:31:1c:2b:f8:c1:4f:ea:c1:c1:bc:d2:71:24:5e:e2:df:ba:
         d8:94:39:84:45:65:2c:8f:38:66:63:ce:06:77:ea:65:f3:2c:
         7a:e7:be:49:42:18:1a:ba:27:54:2f:d1:0a:cb:1d:00:8c:82:
         6e:ab:18:a7:5c:40:98:83:43:52:10:b2:22:72:cd:e3:36:ee:
         64:f9:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org