Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35392e302f32342d3234203d3e203238303936.roa
File:                     3139302e392e35392e302f32342d3234203d3e203238303936.roa (raw, json)
Hash identifier:          xwOdcI8syRrFVUtXYFz1u01l7whAKFAk2X7LG2ar1jM=
Subject key identifier:   29:6F:39:0D:8F:EE:49:A2:76:EA:7B:B1:AA:66:48:6F:50:AA:30:AE
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       30836874DD32BF3780C8819672940B7944CCB814
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35392e302f32342d3234203d3e203238303936.roa
Signing time:             Tue 05 Mar 2024 17:58:35 +0000
ROA not before:           Tue 05 Mar 2024 17:53:35 +0000
ROA not after:            Tue 04 Mar 2025 17:58:35 +0000
asID:                     28096
IP address blocks:        190.9.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:83:68:74:dd:32:bf:37:80:c8:81:96:72:94:0b:79:44:cc:b8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Mar  5 17:53:35 2024 GMT
            Not After : Mar  4 17:58:35 2025 GMT
        Subject: CN=296F390D8FEE49A276EA7BB1AA66486F50AA30AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:81:2c:2a:54:96:dc:05:61:74:bd:72:b1:
                    aa:fe:83:3a:bb:08:75:15:97:67:f7:de:d3:49:db:
                    f8:dc:e2:69:2c:71:2a:9d:f0:10:d8:57:94:e1:39:
                    10:e2:04:be:8a:a8:3f:e1:6b:cc:e0:18:38:d2:a5:
                    db:9a:e0:87:5b:22:4d:9e:04:f8:14:8a:1a:5b:1d:
                    20:7f:e4:5b:e2:55:6a:2d:03:b9:13:75:86:87:d4:
                    90:b0:86:5b:24:dd:c7:b1:db:43:0c:ec:d1:2b:53:
                    8f:0a:ef:d8:86:d2:9a:fa:32:b3:23:1f:1b:be:34:
                    b8:23:a3:e2:01:0b:5d:04:b4:f4:a0:af:7c:39:6b:
                    ef:ca:b7:8d:05:90:e7:4e:61:80:65:cd:c7:7f:e7:
                    08:9f:d7:50:90:40:d6:d1:82:dd:a4:32:ec:47:07:
                    32:76:42:ac:df:3b:b1:0e:90:cf:9a:bd:82:a1:8d:
                    34:cd:9a:cd:3e:3f:72:8c:b7:ad:48:f8:66:40:96:
                    1c:cb:24:4e:39:d8:69:47:42:c1:3d:4c:14:ba:13:
                    5b:a8:5b:08:62:ac:d6:6c:f0:05:05:6d:36:08:05:
                    41:09:85:7f:66:cc:77:e0:07:e8:f6:e3:43:f4:38:
                    a6:a0:31:63:b4:ef:27:90:ec:28:54:ef:f7:55:a8:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:39:0D:8F:EE:49:A2:76:EA:7B:B1:AA:66:48:6F:50:AA:30:AE
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35392e302f32342d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:56:85:8b:75:e6:eb:89:f7:5d:5e:ed:80:02:96:b8:fb:5f:
         38:cd:b8:58:e3:ae:b5:cc:6d:bc:48:13:2e:9b:36:63:1b:e7:
         03:57:ee:8b:f6:00:e4:24:6a:5b:45:58:d6:32:ee:9b:c4:7e:
         62:18:c6:3f:e0:e9:bd:84:c8:5f:0f:0e:97:f3:83:da:cb:86:
         2b:00:a5:ac:c6:9e:68:80:8d:11:cf:7b:b0:6e:7e:3c:f2:5f:
         fe:ae:f7:8e:aa:52:22:e4:df:fc:c7:ee:e1:9b:8f:a4:eb:60:
         31:ef:0a:03:ff:b3:ce:62:ea:5c:db:14:5a:50:d9:cc:1a:a5:
         98:af:27:b1:4c:eb:60:fc:a2:77:20:7c:fe:ba:64:fd:e3:1f:
         4d:44:6c:39:e9:bf:e6:de:6a:dc:3d:a8:bf:a2:17:03:72:f8:
         c4:0f:a0:92:4b:2d:24:be:79:4e:e0:d5:36:1e:95:f8:1e:bc:
         46:a6:17:6b:31:4e:8d:40:1e:24:fd:6a:1d:b1:eb:ac:bc:09:
         28:9e:0f:2c:98:8d:5b:2d:ff:ca:86:ab:f1:20:93:5d:ad:31:
         16:8a:61:fe:c3:d1:52:aa:39:72:71:cf:29:02:d3:c2:2e:ed:
         c4:a2:40:9c:1c:dc:6c:3c:4d:e7:36:47:5d:4e:16:f9:59:9e:
         54:63:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 19:35:48 2024 by rpki-client on console-fra.rpki-client.org