Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132362e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132362e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          emKIOz54r8H4+vvUtXmE9o5yRf9v51ffCQu+/VdB6is=
Subject key identifier:   4C:A6:45:8C:E4:5E:5B:D1:B0:21:EB:B0:3F:9D:F7:A2:47:47:83:9B
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       79B1D8780120783D1F56BE6E4BBD256EBF3A42C5
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132362e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 05 Mar 2024 17:52:13 +0000
ROA not before:           Tue 05 Mar 2024 17:47:13 +0000
ROA not after:            Tue 04 Mar 2025 17:52:13 +0000
asID:                     52392
IP address blocks:        190.99.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b1:d8:78:01:20:78:3d:1f:56:be:6e:4b:bd:25:6e:bf:3a:42:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Mar  5 17:47:13 2024 GMT
            Not After : Mar  4 17:52:13 2025 GMT
        Subject: CN=4CA6458CE45E5BD1B021EBB03F9DF7A24747839B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:60:e3:8c:aa:7f:48:fe:c5:40:ee:0e:5b:
                    4f:6c:f3:e0:47:02:66:1c:03:9c:e5:9c:69:9f:c7:
                    06:40:92:1d:d2:ed:d4:77:24:da:a7:14:88:df:3e:
                    2d:1a:34:a5:02:84:21:2c:97:99:78:c1:d4:63:c4:
                    3e:41:c7:45:eb:b0:91:c4:96:4f:4d:bb:2b:8a:5f:
                    32:75:6d:43:02:09:91:de:95:62:41:11:87:81:f3:
                    17:d0:e7:7b:f5:03:8a:2e:d6:45:5f:22:39:03:ec:
                    39:5f:f4:22:9d:4d:b0:76:82:d1:2f:05:5b:70:45:
                    e5:41:ad:16:03:4e:bb:58:b6:a4:4f:de:aa:7e:96:
                    c9:c3:63:42:b7:11:f0:94:79:05:19:75:23:68:cf:
                    80:03:02:f4:c6:9a:2a:cb:f4:fd:4c:8a:75:4d:01:
                    5c:34:ff:6c:cd:52:1e:02:dd:04:92:55:e3:70:ed:
                    8c:be:23:ab:33:bc:0b:08:30:54:35:63:ca:39:51:
                    c5:3b:9e:41:9c:c2:cc:d5:5a:bc:bb:02:05:57:df:
                    1d:b1:4d:6d:b8:52:fb:a5:94:20:c5:c3:46:ec:28:
                    99:04:44:6b:93:51:40:43:31:df:9a:d7:d7:5e:c2:
                    0e:f7:09:a5:c1:d9:98:e9:14:8f:db:9e:d0:ba:65:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:45:8C:E4:5E:5B:D1:B0:21:EB:B0:3F:9D:F7:A2:47:47:83:9B
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132362e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:13:2a:31:7a:4b:09:21:3f:4f:ab:dd:9b:75:a4:b4:cf:1d:
         13:82:3e:b1:46:a2:d2:d3:68:d5:2d:ed:92:8d:a4:2f:92:69:
         2d:b0:7e:26:7a:0b:a3:d8:55:49:14:f2:bc:01:71:86:1e:c6:
         37:0f:80:7a:e0:ac:b5:8c:3b:12:d9:69:1b:0c:4a:16:28:21:
         cf:90:f2:5e:cc:21:d6:c4:6d:bf:98:a2:91:57:d6:15:cf:1e:
         ad:5d:c4:08:92:dd:4a:83:8f:22:2b:f9:9c:fa:ec:7a:a1:1c:
         0b:ac:25:d0:b0:b1:0b:7b:5f:85:30:9d:54:fe:2a:52:17:63:
         fa:3d:79:e4:a5:86:b6:20:01:e4:c0:1b:f2:a4:d2:ff:83:d5:
         d2:99:32:12:a1:84:2a:e5:4d:64:1a:b9:92:9b:9e:9c:57:a1:
         43:76:65:05:f0:34:0a:39:9d:3e:8a:c9:8d:cc:ef:0a:26:44:
         1c:e2:c8:38:27:d5:43:cb:f1:df:1f:66:b9:2b:13:17:95:dd:
         a7:fa:3f:2f:9f:79:91:d7:cc:f9:db:b0:cf:ed:5d:2f:62:43:
         4e:36:80:a6:98:34:44:ce:6e:37:88:4b:ab:57:ce:41:98:da:
         83:00:b7:71:cc:4a:28:db:81:af:1f:46:bf:cc:24:b5:4a:ef:
         eb:e7:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 20:28:39 2024 by rpki-client on console-fra.rpki-client.org