Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35392e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e35392e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          7eQe3LIqnEdnRuzsXHcwfnibsWDqAGJkF6Cbzv6xtUg=
Subject key identifier:   C2:72:49:B4:2A:FA:0D:E1:0E:07:0C:9B:A7:8A:91:F3:AF:6C:60:0C
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       781E9F5CCE2FE23FFA142B3039CF0814378402CD
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35392e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:27 +0000
ROA not before:           Tue 05 Mar 2024 17:36:27 +0000
ROA not after:            Tue 04 Mar 2025 17:41:27 +0000
asID:                     52347
IP address blocks:        190.111.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1e:9f:5c:ce:2f:e2:3f:fa:14:2b:30:39:cf:08:14:37:84:02:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:27 2024 GMT
            Not After : Mar  4 17:41:27 2025 GMT
        Subject: CN=C27249B42AFA0DE10E070C9BA78A91F3AF6C600C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:01:e9:02:2c:a3:f9:04:bc:43:70:28:f1:
                    81:09:73:37:12:73:f7:84:51:83:ef:b7:64:14:f9:
                    8e:f0:f2:99:82:87:0c:80:b7:9d:15:a9:a7:35:3f:
                    5d:1d:9d:79:df:90:e1:b6:28:d0:0c:f2:4d:12:78:
                    5a:64:a8:8f:68:bf:61:a1:30:22:40:30:f3:bc:c0:
                    ba:77:9a:64:c3:44:06:0e:72:e8:88:6b:1f:b0:1a:
                    1b:78:ac:ee:2b:24:98:84:ac:61:61:4e:a0:95:38:
                    d4:67:74:9f:c6:71:76:78:0e:0c:25:1c:52:04:74:
                    b4:5d:2e:65:04:c8:66:fc:ea:35:10:f7:b4:bb:b3:
                    c8:c4:3a:d4:e1:45:d2:ac:89:b9:84:e1:1e:81:fd:
                    79:4c:a9:e9:1f:51:14:f5:f0:0c:1a:e6:22:36:d0:
                    95:bc:7a:65:15:f4:b4:e7:84:4e:4a:28:11:ae:2f:
                    5e:b3:3e:05:62:9b:19:1d:ff:fa:17:25:27:5f:ee:
                    f9:ce:b2:e0:e7:46:5f:44:30:fd:77:49:27:3b:0e:
                    ba:4b:b8:71:72:19:2c:8e:95:60:fa:2d:fb:99:7f:
                    7f:2a:c9:4d:d6:82:79:8e:de:c5:93:1f:ea:df:30:
                    79:2e:a2:26:35:b0:ea:a7:f8:a2:0b:6c:91:7d:83:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:49:B4:2A:FA:0D:E1:0E:07:0C:9B:A7:8A:91:F3:AF:6C:60:0C
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35392e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:14:74:a8:50:71:15:ac:79:9e:26:a6:cf:36:78:13:72:
         d6:4a:aa:33:9e:59:f6:a6:5c:19:15:91:22:39:75:08:17:03:
         3d:a3:90:77:06:b8:f8:f9:18:22:4a:23:a0:50:83:0b:cb:a3:
         de:e7:95:14:13:4c:78:15:cd:eb:8f:9f:ed:0e:e1:16:ff:0c:
         bf:3b:be:f9:8f:c8:e9:21:4f:f8:97:ca:77:02:00:19:dd:48:
         8c:53:49:72:8a:8f:14:5e:8a:c4:fb:ae:8a:3c:ae:74:f2:29:
         2f:c2:1a:0a:e8:0c:0b:76:49:db:48:0c:5d:7e:1c:26:c1:f8:
         c9:38:ef:ec:9e:60:32:82:84:de:58:d6:51:b7:c6:4d:30:6b:
         14:12:e6:cd:70:c6:68:41:84:8b:62:2f:c6:1b:84:af:29:d2:
         82:2e:74:63:0e:8e:42:e3:0c:96:57:62:f3:1c:c8:06:ff:72:
         12:f3:75:6b:cc:bc:50:a6:d4:91:d7:12:1a:96:7c:8c:d9:11:
         e4:9b:d9:84:8c:6b:b3:a2:cd:25:de:ac:da:63:ef:d9:d5:40:
         8f:73:4a:14:cc:c0:07:1b:b5:2e:55:ab:af:10:25:7f:b4:ed:
         62:2c:57:02:e2:15:be:fd:0b:64:ac:73:b6:ee:ac:50:8c:9a:
         09:b5:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org