Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
File:                     3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa (raw, json)
Hash identifier:          otQ9X0TopxK5Wiok9BPIvj1lRRIE3HmfP5/a1bDFOyI=
Subject key identifier:   BF:99:5D:B1:69:DE:FD:34:AA:9A:B8:8B:70:A6:B6:78:E9:95:49:F7
Certificate issuer:       /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Certificate serial:       58BD6DC9A6B3A2299978A9484F5A203F73269215
Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
Signing time:             Tue 05 Mar 2024 17:51:38 +0000
ROA not before:           Tue 05 Mar 2024 17:46:38 +0000
ROA not after:            Tue 04 Mar 2025 17:51:38 +0000
asID:                     262259
IP address blocks:        190.99.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bd:6d:c9:a6:b3:a2:29:99:78:a9:48:4f:5a:20:3f:73:26:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
        Validity
            Not Before: Mar  5 17:46:38 2024 GMT
            Not After : Mar  4 17:51:38 2025 GMT
        Subject: CN=BF995DB169DEFD34AA9AB88B70A6B678E99549F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:e6:6f:40:13:cc:17:29:66:2e:76:a8:53:
                    2e:8c:58:75:6b:97:0c:17:5e:1c:76:a3:cd:bc:57:
                    f2:a3:a4:0e:8c:8d:80:9d:5a:1d:41:27:80:a3:f9:
                    1d:02:c1:93:ba:37:1d:3d:0e:68:f2:a5:8b:b3:84:
                    82:67:38:f7:42:7d:2c:9b:14:25:f5:bb:91:c4:ce:
                    0b:15:c4:5b:58:e5:ea:4d:03:72:15:4c:03:38:17:
                    12:cf:d0:6b:4c:87:2a:8f:5c:fe:5d:14:e1:5e:ef:
                    0d:10:63:c8:b9:24:78:09:54:41:4d:4b:bb:e7:4b:
                    a5:22:b9:05:e7:37:e7:37:b3:5d:e8:ba:db:d4:d4:
                    39:81:4e:fb:90:2d:a1:49:57:cc:3d:ad:2f:48:74:
                    62:ad:2e:b5:5b:c8:e4:63:c9:7c:ca:0d:0e:cc:95:
                    fd:19:cb:94:70:00:22:22:aa:bf:b3:bc:b4:8a:94:
                    1d:86:1c:9f:21:23:87:a4:f5:8f:62:cf:42:eb:f0:
                    7b:2f:92:1c:a5:25:a2:88:0d:76:f1:0b:48:29:92:
                    3d:4c:ca:12:4a:56:ec:ee:bf:32:ae:51:4f:e4:09:
                    bf:54:18:6f:a3:9a:91:b0:8c:36:53:0e:10:c5:23:
                    ee:69:ac:e7:a5:43:78:16:ec:1f:29:ee:a3:50:e7:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:5D:B1:69:DE:FD:34:AA:9A:B8:8B:70:A6:B6:78:E9:95:49:F7
            X509v3 Authority Key Identifier:
                keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:0d:88:f0:16:bb:d2:f8:c8:ec:73:f6:6a:a8:45:01:2d:12:
         a3:0a:67:73:29:80:fb:72:05:0a:ca:c0:0f:fb:63:01:69:6d:
         9a:79:85:9d:75:c1:ea:f5:d7:7e:c9:b1:6e:d2:53:42:4e:56:
         f6:a1:32:bf:06:fe:18:ea:03:85:9c:3e:de:ee:31:10:b5:8c:
         19:f0:05:88:b5:86:93:d2:d8:b8:25:f2:9f:46:12:1c:c9:c2:
         cf:5e:d6:a3:9b:ea:bc:25:47:e7:88:a9:ba:0d:0b:30:9f:72:
         b8:5d:27:c7:74:da:68:f4:91:b0:f5:ea:26:d1:d5:81:16:81:
         c2:3a:25:f8:f4:65:c9:a3:60:1a:af:1e:9f:56:b0:8a:32:a2:
         db:fb:43:06:d0:b8:78:f1:d8:48:c6:08:91:a9:f4:01:af:35:
         1e:58:3b:bf:f8:1f:b0:e9:d0:23:a4:87:e9:47:02:72:59:10:
         4a:18:ce:3d:ad:f9:08:54:16:e9:e2:68:71:8c:e9:ea:66:2d:
         07:03:4d:8d:13:6d:f4:db:47:51:28:cf:c4:bf:2d:d3:5c:89:
         3d:5f:06:6f:8c:bb:d9:36:14:3c:6e:b0:bf:58:ea:4b:8d:62:
         d1:7b:72:e2:47:a9:55:24:c8:98:2e:f8:41:1f:e3:fa:70:9c:
         98:94:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:07:58 2024 by rpki-client on console-ams.rpki-client.org