Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231392e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3231392e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          KGp3mMKPQZglmUO7ZUD253hEJs4RaLvc4kbBJ9DhKOk=
Subject key identifier:   B0:0F:C7:75:0D:64:29:42:AE:F6:0C:BD:49:EF:D0:08:29:FC:B3:01
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       4A72A531660B56D850C1F023620B271EA449FDBE
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231392e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:46 +0000
ROA not before:           Tue 05 Mar 2024 17:42:46 +0000
ROA not after:            Tue 04 Mar 2025 17:47:46 +0000
asID:                     262237
IP address blocks:        190.196.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:72:a5:31:66:0b:56:d8:50:c1:f0:23:62:0b:27:1e:a4:49:fd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:46 2024 GMT
            Not After : Mar  4 17:47:46 2025 GMT
        Subject: CN=B00FC7750D642942AEF60CBD49EFD00829FCB301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:11:51:0a:68:cd:64:2a:0c:25:b6:ef:e6:
                    5e:93:94:7f:7d:25:df:80:d6:17:c6:6c:d0:95:07:
                    c7:e5:47:27:1c:e4:fd:40:2f:b5:54:f5:39:c7:ce:
                    77:e4:5b:15:5e:b9:67:63:2b:9a:96:2e:4d:f7:83:
                    d2:cf:bb:8c:8c:91:b6:76:f6:9e:5a:b8:38:f8:d4:
                    a3:e6:c3:cb:ab:19:3d:e0:7a:1e:b2:f0:39:ed:95:
                    3e:cf:d6:86:fd:3b:a1:18:1e:17:75:e3:53:ef:f2:
                    9f:05:e9:84:70:03:fd:28:3e:8d:20:b0:55:8d:d2:
                    ac:12:be:10:60:ce:04:e2:79:7c:a6:fb:70:7d:bd:
                    9e:c3:b2:dd:e5:20:91:bc:89:92:4b:c3:03:e4:c2:
                    2c:d3:55:36:c7:bf:4e:aa:96:19:b8:68:f8:d2:ae:
                    ce:b6:ec:ab:22:17:39:ff:32:66:c5:ca:36:7e:62:
                    f2:1c:08:7c:0c:0c:d2:a2:59:a2:dc:90:4a:58:79:
                    47:12:4c:1a:fd:19:9d:93:2d:8a:ed:69:72:b6:d3:
                    19:24:1d:dc:ba:7a:7b:2c:59:64:0b:c0:94:6a:98:
                    a6:5e:e2:1b:7c:f9:08:a2:c8:2f:05:2a:2a:f2:6b:
                    5a:5d:d6:2d:e2:71:17:17:3a:98:7a:a2:ff:b7:7a:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0F:C7:75:0D:64:29:42:AE:F6:0C:BD:49:EF:D0:08:29:FC:B3:01
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231392e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:6a:34:c4:52:d7:6a:e3:6c:69:79:60:fb:dd:b4:f3:53:da:
         7e:a4:34:9f:f0:1c:2e:92:4f:ed:22:3d:0e:04:3d:db:af:4b:
         4c:51:dc:19:fc:55:8d:92:5b:cc:9b:53:d2:22:b5:ab:38:8d:
         03:ee:a5:49:76:8d:36:90:34:fb:1a:23:23:ed:67:88:0a:0b:
         d8:62:9a:80:eb:01:96:61:cb:76:0e:8c:23:fe:04:12:9e:8a:
         9a:39:12:bd:7c:57:8f:cd:9f:3e:d5:ae:1a:0b:7a:ed:7b:e4:
         9b:7b:78:24:16:99:6b:f0:ef:64:40:f7:45:93:95:77:1a:b0:
         a9:9f:00:a5:fa:12:26:98:7e:19:25:8e:72:c4:87:a1:3b:ed:
         01:76:fe:a8:f1:39:a2:7b:ba:84:94:7a:60:06:dc:29:7c:3d:
         b8:0f:69:0c:fe:db:c3:f9:bc:74:3a:82:41:fb:d6:58:62:92:
         87:8c:9c:5b:4c:72:85:fb:1a:55:da:61:fb:11:a4:68:df:2d:
         ef:f5:e0:61:59:1c:f5:63:b8:69:5e:a5:9c:92:a2:ff:72:63:
         26:3c:75:29:2a:2d:71:57:24:02:f0:c8:2c:13:69:f2:88:2d:
         47:88:d6:22:03:49:9b:34:b2:c9:c5:00:6c:b1:11:fe:45:9f:
         39:11:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org