Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35392e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          HAal/jWaxX4gn63UAMXtvfMFMI0w1KuZq+pfnqfGdFE=
Subject key identifier:   32:FD:60:36:8B:11:B6:6A:A0:69:49:02:94:FE:8C:00:EA:FE:71:2F
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       46070D68466B5EE74BCBDD29E314B04B5B6186C5
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203631343638.roa
Signing time:             Wed 13 Nov 2024 16:30:01 +0000
ROA not before:           Wed 13 Nov 2024 16:25:01 +0000
ROA not after:            Wed 12 Nov 2025 16:30:01 +0000
asID:                     61468
IP address blocks:        192.188.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:07:0d:68:46:6b:5e:e7:4b:cb:dd:29:e3:14:b0:4b:5b:61:86:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Nov 13 16:25:01 2024 GMT
            Not After : Nov 12 16:30:01 2025 GMT
        Subject: CN=32FD60368B11B66AA069490294FE8C00EAFE712F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:4e:40:d8:5c:31:95:34:8e:e8:da:ff:45:
                    a6:e4:67:b6:aa:db:13:dd:26:fe:b0:47:e3:d8:2e:
                    29:1e:56:1d:67:e1:a2:11:28:2e:f8:20:75:ed:6d:
                    80:7c:f2:e8:66:74:e2:52:d9:a0:7c:78:d8:42:6e:
                    58:ac:4c:3a:cf:c8:9d:64:a6:f9:9b:80:2d:41:42:
                    7c:db:48:50:5b:05:a0:61:82:c3:c9:4d:f6:35:99:
                    9f:36:83:97:90:47:9e:75:75:2d:c4:93:5b:7c:21:
                    d3:6a:c3:3b:92:9f:72:5b:d0:31:72:4a:e7:32:c6:
                    0f:06:bb:29:36:6d:1d:99:1d:01:9d:dd:18:76:35:
                    71:91:7d:c0:bb:8b:03:55:1c:b4:cb:58:0b:28:ad:
                    44:9f:c5:22:d7:f9:5b:84:db:3e:ac:ef:2a:3c:fe:
                    e5:e8:46:32:25:41:6b:f0:10:16:59:f8:34:05:86:
                    13:1c:64:bc:19:e2:03:4d:3f:dd:ab:4e:c2:2e:cf:
                    ed:13:f9:70:89:57:01:30:f7:d8:98:33:b5:f0:90:
                    d3:13:8c:88:c2:a5:b4:e8:b0:3d:39:20:4f:e3:a9:
                    94:75:2f:99:58:9b:d3:e4:43:93:f8:49:05:cd:15:
                    a8:41:cd:59:c4:e1:a7:67:88:33:6a:c8:1c:3e:5c:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FD:60:36:8B:11:B6:6A:A0:69:49:02:94:FE:8C:00:EA:FE:71:2F
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3139322e3138382e35392e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:92:86:6a:48:ef:1d:db:93:93:b4:31:61:b3:ec:ab:25:
         72:d7:84:8c:51:20:8b:1e:60:29:b1:ea:9f:dd:c0:b7:b4:2d:
         7b:fd:59:f9:e7:d3:33:71:c5:b8:28:d4:e8:92:31:1c:1d:d8:
         c4:88:4b:7e:e5:27:96:96:e6:9b:47:7f:02:ac:92:a0:6c:6c:
         4d:00:81:08:53:55:70:50:6f:cd:a8:3f:64:aa:72:5f:9c:10:
         83:d8:af:a5:87:33:5b:21:3c:39:04:86:e0:32:6c:60:b9:da:
         62:3e:56:53:56:d6:ea:38:65:e9:61:1e:f6:64:11:2d:12:91:
         94:d5:72:06:3c:1c:e0:7c:39:a6:a3:79:8b:1d:c3:9f:5f:04:
         97:fb:fb:e5:4c:d3:15:3c:aa:1b:00:74:8a:dd:b6:7f:86:79:
         87:d0:e4:e2:dd:68:d1:a8:3a:a4:83:89:99:0a:05:17:1c:b8:
         06:e1:de:31:de:57:a0:b2:25:96:eb:ce:b6:63:21:73:86:fa:
         a2:e6:c3:95:af:8a:61:91:96:08:94:3a:b1:93:bb:15:b7:28:
         e1:56:08:d1:a7:e6:6f:9c:d6:8c:1c:c7:e2:1b:e3:3a:4c:ca:
         76:d0:f1:91:f6:6a:d1:8e:19:ab:df:2a:d4:47:5f:cd:da:95:
         29:2b:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org