Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa
File:                     3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa (raw, json)
Hash identifier:          ebk3Yre/x1luVBxZMiS1xSjHn3Vn82vQtTiekbww7PI=
Subject key identifier:   A5:4A:6C:04:F9:F5:78:F9:EE:6A:A2:2C:07:E0:65:4C:6E:CD:67:D4
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       6F59A05B9265E79123DAF190A0692BD5FECE990B
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa
Signing time:             Tue 05 Mar 2024 17:58:14 +0000
ROA not before:           Tue 05 Mar 2024 17:53:14 +0000
ROA not after:            Tue 04 Mar 2025 17:58:14 +0000
asID:                     271821
IP address blocks:        192.100.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:59:a0:5b:92:65:e7:91:23:da:f1:90:a0:69:2b:d5:fe:ce:99:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Mar  5 17:53:14 2024 GMT
            Not After : Mar  4 17:58:14 2025 GMT
        Subject: CN=A54A6C04F9F578F9EE6AA22C07E0654C6ECD67D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:b0:f0:a6:f4:b1:7e:3d:32:ee:8a:b3:18:
                    e2:63:d5:37:84:79:cd:23:94:61:10:4e:13:e5:72:
                    24:2c:17:e8:58:d3:d7:94:9b:c6:55:25:d8:52:38:
                    0e:bf:27:16:4d:6a:9a:6b:de:5f:2b:86:fe:87:4a:
                    47:92:09:bb:f8:63:b0:e4:bc:0d:d8:dd:24:00:9d:
                    3c:1d:9b:1d:4b:34:a4:6f:79:c7:31:a2:06:ed:c6:
                    5f:51:e0:8d:c8:67:da:07:7b:c8:f0:23:44:f3:09:
                    3f:f0:52:20:20:86:14:e7:ad:6c:1e:a7:67:02:eb:
                    a4:73:98:5c:9e:a7:d8:b5:c2:c5:ab:40:36:64:eb:
                    b1:41:37:ab:f2:e3:03:b9:2e:8e:06:6f:a4:f3:01:
                    b1:5a:35:0f:83:27:28:16:27:50:c3:a7:4d:27:00:
                    6b:56:a8:27:e5:47:98:e2:76:c4:50:17:98:d1:ff:
                    36:e5:54:0e:21:f4:22:05:f1:21:dc:c4:9c:02:d8:
                    12:1c:65:49:0f:82:71:89:24:c9:8e:4e:16:30:0c:
                    d0:cb:58:a7:56:85:39:67:fc:b5:32:42:3b:2e:0e:
                    a9:78:8c:62:08:b3:35:17:02:25:34:59:dd:11:01:
                    bc:3a:a5:18:b4:99:ac:cd:15:c0:48:2d:95:a7:3e:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:6C:04:F9:F5:78:F9:EE:6A:A2:2C:07:E0:65:4C:6E:CD:67:D4
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:dc:7b:43:d6:ca:44:b4:65:eb:44:43:0b:2f:fc:18:a7:
         6e:ba:5c:41:98:be:45:8c:8a:57:5f:26:2b:dd:68:e3:4a:c5:
         6f:53:7a:3e:01:ad:79:9c:1a:0f:17:5f:d2:0c:e1:e7:2e:1a:
         ca:bc:e4:a3:5a:4c:cc:9b:92:61:46:e9:61:d2:36:dd:98:40:
         f6:c8:30:58:ff:19:6c:24:ea:3f:c6:a0:40:a2:5f:f0:37:97:
         97:52:fd:30:dc:03:10:2c:10:d0:38:ba:e4:c3:b2:7b:25:cc:
         0b:ef:68:ee:03:4d:26:e3:04:e4:83:67:7b:2b:2f:5f:26:e7:
         0b:4a:cc:02:bb:ee:6a:f0:7c:62:d4:30:7a:bc:1b:3f:e6:27:
         92:44:50:52:99:b7:cc:bf:cc:86:ce:ce:bf:29:d4:24:d8:d1:
         70:de:bc:ea:b0:8c:a3:39:53:c9:06:f7:85:96:43:54:d3:43:
         29:a8:dc:cd:31:94:b7:e3:4b:f0:dc:78:5a:5c:d9:0f:03:49:
         1a:c3:89:f3:db:af:71:16:0f:85:4e:69:dd:30:7b:bc:32:40:
         ac:3b:c6:4d:41:87:92:c4:43:40:31:41:36:38:7d:f9:47:06:
         61:4a:ca:a2:67:4a:1d:c0:b6:e9:02:23:88:1c:81:9d:b9:54:
         cf:65:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org