Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132302e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          +rx/mxFe70e86X5QPgJBrB4g9JIyu4EOI6hLlbleguQ=
Subject key identifier:   AE:A6:89:0D:4A:27:1B:56:3D:4E:D3:0E:27:BE:86:7B:D7:E0:97:9E
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       3D53D40B2C8F7A9A095778F2A4B4C0E61BC3EE50
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 05 Mar 2024 17:52:12 +0000
ROA not before:           Tue 05 Mar 2024 17:47:12 +0000
ROA not after:            Tue 04 Mar 2025 17:52:12 +0000
asID:                     52392
IP address blocks:        190.99.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:53:d4:0b:2c:8f:7a:9a:09:57:78:f2:a4:b4:c0:e6:1b:c3:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Mar  5 17:47:12 2024 GMT
            Not After : Mar  4 17:52:12 2025 GMT
        Subject: CN=AEA6890D4A271B563D4ED30E27BE867BD7E0979E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:65:f1:9b:93:e1:96:fb:02:c8:60:65:96:
                    53:15:47:6e:6f:1e:8a:5c:28:0a:93:c4:3b:f5:72:
                    49:d5:86:55:8c:b8:d9:0b:7f:f6:3c:fc:1b:75:16:
                    f4:78:99:2c:27:0f:b0:d1:d0:f9:4d:0e:16:e9:0d:
                    2c:50:9f:16:6e:47:d9:28:e9:ec:37:47:4a:de:98:
                    9e:4f:89:73:ff:46:64:0a:91:e2:0c:19:ac:bd:11:
                    1b:6e:ae:65:c6:59:56:4b:ac:a6:2d:ce:15:60:95:
                    6c:ea:6a:f6:62:bf:89:eb:8a:2e:9d:27:be:2a:d2:
                    8f:e1:b0:b5:98:63:76:41:aa:39:b9:6e:d1:3e:98:
                    c2:74:af:a0:05:7b:d1:52:63:3b:6a:1a:fd:7b:16:
                    8e:54:40:4b:6a:c1:86:7f:23:60:c9:c4:b3:fd:6d:
                    ba:22:4b:b5:3a:d1:93:75:c0:77:f8:59:1f:83:c1:
                    02:3a:3b:5d:bc:45:74:7b:0a:f3:92:f1:99:f3:c3:
                    63:87:a5:9b:3c:af:60:69:5c:f6:9f:39:80:0a:73:
                    01:2c:61:7e:48:fd:44:df:6d:03:d3:a9:9e:82:07:
                    fe:77:b0:4f:06:7f:05:b9:07:a4:1b:9d:0a:5c:41:
                    b8:52:dd:1d:d3:b1:4e:1d:30:3e:e2:12:72:7e:c7:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A6:89:0D:4A:27:1B:56:3D:4E:D3:0E:27:BE:86:7B:D7:E0:97:9E
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:69:25:b0:09:e0:af:b6:5a:b4:70:fe:5a:b4:40:6e:68:18:
         80:54:b4:01:8e:dc:26:68:ab:7b:d5:73:28:f0:dd:2e:5d:57:
         2d:a4:88:7a:04:6e:fb:0e:8a:0f:d7:d0:62:32:1d:79:41:9d:
         6e:1b:f8:7f:00:a5:e5:64:c6:1b:9d:ad:7d:38:32:17:f1:5c:
         f6:ae:35:ff:a1:1d:1b:ff:af:25:42:26:19:99:07:25:26:b5:
         b4:b8:3a:ac:78:d5:88:e1:94:85:30:2f:9e:1c:31:2f:cf:d5:
         da:43:b7:13:e8:bb:e5:e8:2d:6d:69:a8:7d:3c:56:de:9c:56:
         04:e4:f0:4a:5c:49:29:78:bb:83:9d:e3:16:be:da:25:88:9c:
         88:ab:0b:ff:ca:45:90:9d:93:4c:e1:f2:d9:cb:b1:cf:29:ce:
         dd:67:8e:7c:bf:2e:98:98:7a:9c:87:21:88:92:80:0d:18:d5:
         15:95:7c:30:4b:c2:e2:64:85:0b:4b:37:c2:1a:51:2d:78:1f:
         c3:b5:d3:3b:71:c4:7b:53:9f:9a:4e:2d:7b:64:f2:36:a0:a5:
         16:67:f6:2b:88:40:09:27:c9:38:e7:c3:da:06:13:36:2f:58:
         d2:60:67:3b:68:c4:ed:65:7d:cb:41:9a:b9:56:57:77:17:9f:
         d6:35:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:04 2024 by rpki-client on console-fra.rpki-client.org