Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132372e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          tAlQxGPCYvlYwEdM1bSP8qqAJu8v4e98AGN0XG0BV34=
Subject key identifier:   23:D3:3B:67:4D:30:38:01:87:D8:12:86:3D:43:74:9A:8D:DD:B1:2F
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       31FE963BFF7A2B5536A28EDC16B106CB45E0545F
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 05 Mar 2024 17:52:12 +0000
ROA not before:           Tue 05 Mar 2024 17:47:12 +0000
ROA not after:            Tue 04 Mar 2025 17:52:12 +0000
asID:                     52392
IP address blocks:        190.99.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:96:3b:ff:7a:2b:55:36:a2:8e:dc:16:b1:06:cb:45:e0:54:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Mar  5 17:47:12 2024 GMT
            Not After : Mar  4 17:52:12 2025 GMT
        Subject: CN=23D33B674D30380187D812863D43749A8DDDB12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:7d:ef:76:e3:79:f4:7a:5b:92:08:21:e2:
                    20:9d:9b:e4:bd:17:4d:9e:82:91:c9:41:f1:e3:52:
                    eb:aa:19:a9:41:a3:0f:d1:33:56:16:5f:69:81:3e:
                    39:72:db:9c:7c:fd:f2:5d:ee:b6:35:82:ed:75:b7:
                    b6:16:7d:12:9f:65:62:27:33:49:cc:6f:63:c5:1d:
                    01:f4:1f:77:94:04:f9:e8:41:35:b5:f6:5c:54:e2:
                    45:a8:36:48:92:d9:cd:d5:46:2d:13:a0:b4:96:d5:
                    0d:5e:a1:2f:e2:ce:1c:c0:80:4b:27:56:a7:f4:be:
                    61:7d:f3:5e:5b:2f:0a:e9:e2:a2:b2:e8:c4:a6:a6:
                    79:3f:80:26:d8:44:3e:51:76:b2:ce:f1:90:9e:e6:
                    3b:e6:ce:12:0d:1d:ce:c3:89:16:f4:81:46:f6:8f:
                    2f:fb:4b:ee:bc:63:4f:64:75:73:0f:f0:1b:51:9f:
                    19:49:0e:b1:b4:ce:ed:e5:c9:9e:cf:f6:0d:b6:33:
                    18:fa:d6:2b:95:e0:7d:b4:16:10:47:b7:c8:a8:d8:
                    20:11:1e:24:b0:13:fb:be:ad:ce:19:72:d9:b1:1f:
                    63:9b:13:da:a0:fc:a4:3e:59:77:77:dc:80:df:e6:
                    d0:f0:6f:21:19:3e:47:7b:18:7c:82:5f:8d:dc:2a:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:3B:67:4D:30:38:01:87:D8:12:86:3D:43:74:9A:8D:DD:B1:2F
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:31:d2:af:28:11:ff:25:ef:63:15:63:84:a7:fb:a4:7e:
         57:59:1a:c6:8a:c0:e7:9e:3d:9f:db:da:87:bf:ad:d9:d6:45:
         06:2a:9f:ef:90:06:59:b2:53:ef:b5:fd:b9:65:f7:95:0a:72:
         a0:98:b4:47:17:40:66:fe:83:f6:6a:d5:12:7f:b5:46:2f:08:
         99:52:69:17:75:25:b4:bb:dd:df:43:c1:a5:57:e2:ba:b1:17:
         b4:4c:74:2f:c5:e6:d1:a1:e5:77:a9:4b:40:54:1b:62:23:99:
         06:2e:10:df:b7:39:2e:a7:ee:b1:74:d5:7a:5c:6c:22:28:47:
         0b:7c:b4:e1:bf:7e:3f:58:63:a3:99:63:1b:02:73:52:d3:6a:
         fe:45:e1:73:c2:64:01:9f:9c:a3:7e:68:d9:89:80:d9:69:ab:
         6a:76:bd:91:31:b4:21:81:da:c5:8d:7a:e0:6f:82:4c:58:3d:
         2b:db:19:5b:df:4a:a2:0c:d1:85:42:b7:ee:6f:32:1f:d0:2e:
         d7:6c:bf:c8:7a:83:19:e2:68:53:ae:a1:e8:1e:f8:8c:17:d2:
         c8:c3:6a:81:b5:76:f2:5a:b0:ef:5d:76:51:38:89:03:51:54:
         00:fb:65:b9:82:a5:97:51:e4:ba:b3:4c:88:d7:f5:69:c3:83:
         f3:13:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:04 2024 by rpki-client on console-fra.rpki-client.org