Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa
File:                     3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa (raw, json)
Hash identifier:          1ioYRlDsi1+Lz/jX0AUqZ0YFFpdUqz5soO/JaWinRac=
Subject key identifier:   95:6D:FC:EC:13:B6:B9:F0:30:4D:20:22:BD:25:FE:9A:CD:35:F9:00
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       497A8B8720D107D6382AB9E0ECF4C16A4977E0CF
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa
Signing time:             Tue 04 Feb 2025 18:46:40 +0000
ROA not before:           Tue 04 Feb 2025 18:41:40 +0000
ROA not after:            Tue 03 Feb 2026 18:46:40 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7a:8b:87:20:d1:07:d6:38:2a:b9:e0:ec:f4:c1:6a:49:77:e0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Feb  4 18:41:40 2025 GMT
            Not After : Feb  3 18:46:40 2026 GMT
        Subject: CN=956DFCEC13B6B9F0304D2022BD25FE9ACD35F900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:ce:e1:90:87:cd:9e:e8:1e:df:46:9a:0d:
                    4d:f1:05:dc:92:c1:26:93:59:b7:e3:25:bb:d1:21:
                    4f:59:66:8c:b2:93:fd:69:45:87:5b:65:51:46:2a:
                    16:76:2b:c9:27:a2:e3:57:1b:01:46:f2:06:df:41:
                    ed:e9:47:8e:97:34:2f:d4:48:27:1d:3f:e0:cd:6f:
                    53:39:b7:57:31:77:b4:b8:0e:03:b1:c5:94:b2:e0:
                    3b:b5:ee:b1:06:c4:e1:6e:b1:f9:f1:bc:cc:5a:71:
                    a1:ee:03:cd:59:35:99:be:f8:d3:a1:76:5b:13:2a:
                    65:98:aa:0a:43:10:5b:9a:48:20:3d:0c:42:c7:8c:
                    c3:75:ba:9f:34:c9:2c:25:1c:31:f7:cf:36:63:c6:
                    62:62:79:6c:d4:ca:6d:b8:bb:e0:61:fd:f5:56:36:
                    dd:d9:9c:79:cb:1f:fc:f9:90:77:7d:bd:42:ab:11:
                    30:2f:ab:dc:9b:7f:11:09:03:5b:ae:d9:8e:8a:43:
                    50:35:fd:48:87:54:fb:e8:1a:b1:99:ee:31:54:b4:
                    9a:60:3e:4b:9b:b9:2e:29:f1:6f:5b:a7:37:1d:10:
                    be:f3:f4:4b:bf:b5:84:59:50:b5:1c:18:f7:f0:12:
                    ec:8e:f7:a9:cf:ed:0c:5c:05:67:b1:ce:14:64:63:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:FC:EC:13:B6:B9:F0:30:4D:20:22:BD:25:FE:9A:CD:35:F9:00
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:7a:e0:91:af:38:80:21:ae:27:7d:e4:c5:98:91:5e:4b:
         2f:9c:62:47:2c:9c:e5:92:42:57:c0:5c:6b:34:fa:c3:28:5d:
         d5:6a:6c:d8:5a:b8:e6:65:98:b1:95:7f:7b:b7:7d:20:14:f6:
         75:37:83:ae:e8:48:dc:eb:8c:d8:8a:b4:c8:42:4a:05:1a:d8:
         94:11:ab:64:8a:84:40:94:c2:2b:71:85:d6:eb:38:a2:dd:85:
         4e:ec:bd:cd:e3:8a:3d:dd:c3:11:74:8a:f9:68:42:1b:f4:83:
         91:aa:13:76:a4:d3:c7:32:b5:f5:20:00:a6:40:58:2a:39:00:
         5f:b4:dd:c7:c3:ad:0d:a3:03:bd:eb:8a:f7:14:70:fc:b0:42:
         33:f8:d0:92:15:89:cc:5b:c1:fd:f9:3c:59:07:ab:70:e5:c9:
         85:88:ed:0d:02:be:bc:92:21:f2:1a:d6:2f:f7:ac:e4:3d:35:
         5b:43:c0:2d:cd:5e:da:0c:f8:02:c4:de:32:eb:33:64:49:47:
         97:5b:21:a0:ee:29:64:53:0f:75:13:3e:2d:86:a0:93:a5:72:
         7a:1d:4c:ae:71:57:68:df:53:de:cf:5e:16:5e:ed:c6:e5:14:
         4b:b3:15:69:a1:a6:ba:97:4e:9e:5f:3a:3d:b8:76:28:ad:51:
         79:89:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:10 2025 by rpki-client