Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231322e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3231322e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          wm6tF9KiX4Z0+IqztYRBQhaSx2F8fJGqCbEUcPzYJiU=
Subject key identifier:   57:A1:02:E7:96:35:6A:37:0D:68:27:B5:1F:26:1E:89:49:AD:CB:F8
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       3C8DAE8B457C2F57B26CBDF88DBB9D4DFA84F75C
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231322e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     262237
IP address blocks:        190.196.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8d:ae:8b:45:7c:2f:57:b2:6c:bd:f8:8d:bb:9d:4d:fa:84:f7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=57A102E796356A370D6827B51F261E8949ADCBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:85:41:52:49:0e:4e:dd:4a:d5:7b:b4:63:
                    ad:1b:73:ba:81:8b:f1:49:c6:d7:95:48:bd:0b:de:
                    87:3f:4f:1b:10:00:9c:2c:27:bd:3e:a1:55:31:74:
                    5c:74:1b:5f:e7:f6:af:7f:35:a1:55:a5:db:be:05:
                    16:2f:17:1d:24:46:3f:20:6e:c1:05:e8:29:8d:dc:
                    d4:03:56:63:b8:b2:3c:53:b7:f4:f0:4a:99:57:af:
                    87:d6:e1:1c:9c:da:27:cb:88:76:fd:22:19:5d:be:
                    bd:30:df:0f:9a:49:52:58:2d:31:6c:3c:91:43:bd:
                    fd:b9:94:3a:e1:4f:fa:82:c0:09:0b:16:4f:e9:ee:
                    13:13:27:26:d5:e9:3a:4c:f2:b3:22:8b:32:ac:87:
                    c9:ec:3b:65:63:c2:be:df:6a:a1:da:38:39:72:62:
                    13:ef:88:1a:e2:69:13:ab:a3:d5:99:7e:47:7d:33:
                    01:95:08:77:a6:84:0b:3a:1d:82:73:1e:8d:3c:df:
                    25:55:7f:f6:0f:44:2e:af:fb:f2:39:55:b1:21:2a:
                    32:25:24:eb:f8:58:63:2a:90:c3:a1:fa:e7:22:dc:
                    2c:ed:30:88:ed:58:47:6d:80:1d:46:09:a5:e1:0e:
                    a5:f3:40:82:8f:cc:2c:ef:e3:b5:f8:81:ab:8b:0d:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:02:E7:96:35:6A:37:0D:68:27:B5:1F:26:1E:89:49:AD:CB:F8
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231322e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:49:cb:5e:c6:3b:29:24:c4:87:d4:d2:ec:6f:d7:fc:c1:
         f3:12:1d:86:22:42:1f:b1:b1:e0:34:04:10:d5:d7:21:cf:05:
         bb:05:35:39:ee:6d:b8:01:4b:d1:1d:72:2c:c6:d9:f5:c6:8d:
         bf:9a:98:c0:be:9c:ab:cc:0e:03:ab:1c:8d:5d:64:1e:dd:e9:
         40:9b:32:56:c7:1d:2e:ad:84:5a:fc:df:f6:23:f5:3d:fd:be:
         b1:db:b4:c1:b4:c8:f5:40:8e:d1:3f:d6:f3:66:c8:f5:d1:06:
         50:1b:e8:5f:a2:34:3b:b4:11:07:b2:de:54:a2:1d:09:b1:b0:
         f7:03:6b:c8:55:99:4e:d0:df:11:da:3c:a3:33:02:1a:27:a7:
         d9:ef:a7:38:b2:1e:0c:97:fe:ad:7b:30:91:b3:24:48:99:62:
         39:1e:59:fc:de:33:23:f6:6b:56:7e:4b:13:49:1f:82:c5:92:
         9d:f6:be:89:31:c0:85:3c:01:22:0a:86:78:2f:27:46:24:ab:
         0c:23:6e:c1:51:60:48:23:15:72:40:ce:dc:75:e6:c7:3e:f1:
         51:16:66:9f:88:c7:d7:38:e9:37:bb:15:8f:b4:81:86:c7:0d:
         23:87:af:8f:b3:be:28:85:ea:3c:ff:b5:77:c3:92:8a:d9:53:
         4c:1c:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org