Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e35392e302f32342d3234203d3e203532323731.roa
File:                     3139302e3131322e35392e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          K52/MywGBSRFnrHko14Q78Wi6WW31jEaKD7yFRdP0b8=
Subject key identifier:   F8:BE:9D:E6:5D:D0:CF:A4:85:CE:0B:86:B3:50:69:82:73:C3:94:F3
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       252F13702D15B58F72C58E5B06692911D4D6FDF4
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e35392e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 05 Mar 2024 17:44:54 +0000
ROA not before:           Tue 05 Mar 2024 17:39:54 +0000
ROA not after:            Tue 04 Mar 2025 17:44:54 +0000
asID:                     52271
IP address blocks:        190.112.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2f:13:70:2d:15:b5:8f:72:c5:8e:5b:06:69:29:11:d4:d6:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Mar  5 17:39:54 2024 GMT
            Not After : Mar  4 17:44:54 2025 GMT
        Subject: CN=F8BE9DE65DD0CFA485CE0B86B350698273C394F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:ca:d8:a4:f0:8c:4e:c6:18:dc:00:3b:44:
                    ca:a1:20:d7:d9:7e:0c:01:e5:6e:0c:72:eb:3f:fc:
                    15:dd:72:27:df:dd:61:f8:6f:5d:2c:ea:31:dc:63:
                    67:08:ae:aa:31:ba:76:33:73:d8:48:31:ee:f8:f9:
                    e0:d4:29:f0:fd:26:c4:6e:3a:06:1e:c8:5d:91:ac:
                    78:52:5f:98:8b:75:68:29:f8:cf:fa:17:d0:fb:1a:
                    82:6e:0b:2c:3d:87:fa:98:88:fa:5d:4b:7b:ed:54:
                    a0:19:d8:9b:d3:82:e5:36:06:dc:d2:e8:96:05:1f:
                    97:46:69:99:17:d2:b2:33:f9:4c:e9:8a:fb:c5:e3:
                    d9:ee:6d:97:9d:a6:93:37:f6:93:72:65:96:ac:d6:
                    c9:b2:63:41:13:b5:ac:f8:0c:92:a9:05:47:dc:85:
                    6e:c0:f1:2e:97:55:37:9a:8c:cd:38:2e:c7:cf:b2:
                    01:eb:4a:74:3a:8e:a0:55:ab:e7:f2:88:58:82:40:
                    68:70:59:ab:bb:b0:4c:33:76:f8:45:24:b0:46:44:
                    a8:dc:d4:84:1f:cb:7e:8b:bc:a4:fb:ba:18:c2:cb:
                    ea:a0:7b:8e:0c:0c:16:ba:48:ac:a1:a2:ae:7c:93:
                    bf:6b:5c:13:6a:b8:cb:6b:2d:54:8c:8a:d5:99:19:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:9D:E6:5D:D0:CF:A4:85:CE:0B:86:B3:50:69:82:73:C3:94:F3
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e35392e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:18:02:ec:8a:58:24:28:c7:5e:a7:d1:d3:85:27:e1:c4:9d:
         ca:72:54:65:b5:b5:11:30:eb:6f:7d:be:96:4e:20:a0:3d:9d:
         3f:0a:7b:81:1f:2d:29:6f:c8:5c:ce:1b:50:1a:f1:73:3d:ca:
         9f:33:13:9a:77:2c:17:e9:dc:52:96:98:46:02:00:b8:b1:a7:
         6f:09:d6:06:c4:93:10:9d:40:3d:1e:4f:6c:1a:d4:1e:62:c1:
         42:5a:da:49:dd:fb:42:8c:0e:f5:30:3f:2f:c1:b2:c3:43:89:
         94:90:90:47:79:e8:be:d2:a2:2a:44:30:e9:75:eb:44:f5:41:
         95:25:73:e4:33:a9:43:94:f0:81:9e:c6:a8:f2:92:c6:5c:98:
         6f:6a:af:f3:0f:a2:5d:36:96:9f:ca:24:21:6e:77:39:54:ae:
         fe:50:01:04:37:c0:03:d5:26:33:cb:ba:b3:2f:fa:b7:0d:6a:
         ca:6f:1a:c7:58:4e:99:e9:68:b5:fb:a1:91:bb:8d:cd:8d:7d:
         ed:45:4a:e5:c4:5d:f4:70:d7:34:04:94:ff:4a:61:1b:9e:0c:
         17:13:c8:59:30:25:08:24:3b:7c:3e:d0:f1:14:95:a2:0f:8f:
         a6:0d:0a:9e:32:fd:6f:c0:89:e7:cf:b0:7c:cd:fd:d9:35:05:
         f2:0f:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org