Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa
File:                     3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa (raw, json)
Hash identifier:          tmQbzL4Ut5EPuJ7YVy1Mah67F2ZxNcUsd05XxIsatt4=
Subject key identifier:   A2:57:3A:3B:E5:65:5D:A2:3C:A1:FF:AC:1B:2E:41:4F:31:F0:A2:00
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       5D685582901C8C17431A3CE4CE5D9EB4B88B4EDA
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa
Signing time:             Tue 05 Mar 2024 18:09:27 +0000
ROA not before:           Tue 05 Mar 2024 18:04:27 +0000
ROA not after:            Tue 04 Mar 2025 18:09:27 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:68:55:82:90:1c:8c:17:43:1a:3c:e4:ce:5d:9e:b4:b8:8b:4e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Mar  5 18:04:27 2024 GMT
            Not After : Mar  4 18:09:27 2025 GMT
        Subject: CN=A2573A3BE5655DA23CA1FFAC1B2E414F31F0A200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:81:38:9d:81:1a:4d:53:d9:47:70:29:67:
                    55:0f:c0:8e:14:54:4c:3d:14:44:13:27:68:f6:93:
                    f0:01:38:9a:3b:7d:98:44:be:67:16:4a:f5:b7:ec:
                    45:35:90:ed:04:6d:bc:1c:b7:f2:c2:56:bf:2c:48:
                    d2:32:ba:ae:7c:02:dc:d9:f1:ad:bc:5b:c5:03:be:
                    ee:f9:9e:aa:00:e2:ee:a0:bb:8f:6e:f9:b7:bf:bc:
                    a4:c0:cd:ab:2b:7a:fd:86:62:25:71:89:5b:dd:fb:
                    55:35:7a:99:cf:85:f5:14:9f:82:5a:f0:32:79:e5:
                    45:3e:f4:85:eb:b0:8a:bc:b3:c5:72:a8:93:fd:9d:
                    88:e0:06:85:0d:a2:e6:19:23:13:82:6e:dc:6f:82:
                    97:5c:cb:1d:ac:a5:fa:19:93:2a:d9:0f:df:0d:b4:
                    fc:be:eb:6a:39:28:ca:14:4f:58:56:9d:93:0d:5b:
                    e0:c8:ab:fe:68:29:33:61:7c:58:4b:a1:a7:0d:42:
                    90:43:51:21:e8:8f:87:ec:19:03:d1:ec:f5:cf:76:
                    b6:a1:b8:a7:86:5e:cb:96:b3:2c:07:21:69:42:d7:
                    26:df:eb:c8:7b:9a:19:b0:4c:39:64:01:6f:07:c2:
                    5f:93:1d:6f:3f:d6:b0:c0:07:90:c3:42:ab:1f:5b:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:57:3A:3B:E5:65:5D:A2:3C:A1:FF:AC:1B:2E:41:4F:31:F0:A2:00
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:89:e3:8a:31:e2:0c:0e:bd:37:52:9c:aa:31:34:34:13:de:
         c6:ec:99:0a:67:02:c1:1f:cc:21:e5:7a:b8:85:c8:a3:df:a2:
         88:8f:ab:0e:1d:f1:a4:bf:bd:f1:50:c2:50:b0:61:c8:55:32:
         b6:d4:52:e4:21:00:f8:55:41:ba:19:17:12:b7:4c:52:48:2b:
         5e:f1:8f:63:c3:82:4e:c2:05:56:c0:9e:2e:56:51:32:71:18:
         05:00:ef:48:58:e6:08:63:fa:98:7f:b9:5b:1b:30:29:70:be:
         4f:a8:ac:46:da:91:63:50:ba:e9:b0:de:b1:dc:9c:a6:ec:87:
         fa:81:24:86:6e:af:5f:eb:a5:73:59:ba:28:c6:e5:1e:17:bb:
         76:1a:06:35:22:c5:9e:7b:47:a1:06:92:44:ae:62:8e:50:dd:
         9c:dc:4e:9f:33:43:f7:c8:9d:3a:e5:01:e2:ca:6f:79:24:58:
         21:5c:95:35:41:18:6a:ab:d5:ca:c3:84:20:1d:28:d0:21:b3:
         6f:e9:c6:98:73:b7:21:bb:f6:58:2d:03:01:0e:85:9b:33:9d:
         fa:17:8e:2f:35:d3:1a:4b:81:d3:36:36:9e:de:a1:fb:c2:7a:
         d8:69:49:e0:52:a9:b9:d3:80:88:42:8d:4d:2a:8f:31:57:19:
         28:76:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org