Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3232203d3e203532333339.roa
File:                     3139302e3130372e3231322e302f32322d3232203d3e203532333339.roa (raw, json)
Hash identifier:          BcEX7hh/3SbY2aOFvKi4D3E7z0wWiZyubB2e2NyLTb0=
Subject key identifier:   67:12:C4:2D:54:68:45:21:6B:DF:13:1B:19:34:FB:05:9C:98:96:DE
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       05E5BF440BA8F6943CC69A50F4C3DD5A0F23664B
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3232203d3e203532333339.roa
Signing time:             Tue 05 Mar 2024 17:49:18 +0000
ROA not before:           Tue 05 Mar 2024 17:44:18 +0000
ROA not after:            Tue 04 Mar 2025 17:49:18 +0000
asID:                     52339
IP address blocks:        190.107.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e5:bf:44:0b:a8:f6:94:3c:c6:9a:50:f4:c3:dd:5a:0f:23:66:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Mar  5 17:44:18 2024 GMT
            Not After : Mar  4 17:49:18 2025 GMT
        Subject: CN=6712C42D546845216BDF131B1934FB059C9896DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:35:c6:96:24:e8:a0:ae:51:79:1e:1a:d8:
                    79:fc:d5:d1:79:f3:07:ee:d8:4a:e1:80:8e:d9:9b:
                    ad:2d:89:65:a1:a4:a1:c9:ef:3e:f4:5a:85:01:fe:
                    9f:42:7a:4e:7a:7b:0f:4b:5c:79:11:7a:a0:53:d5:
                    7e:2a:92:7f:03:db:8c:e4:bb:84:b5:f4:fe:c4:8b:
                    c0:46:d8:81:3d:15:72:36:42:b0:bf:7c:1a:17:5e:
                    ef:ee:da:da:84:b0:d7:1d:56:96:27:94:d4:4f:39:
                    1d:1a:e0:b4:1c:02:05:81:4a:03:05:c4:41:16:2f:
                    6b:79:49:29:6e:f5:72:7a:2b:fe:7c:72:82:be:d4:
                    d4:a1:11:e6:c5:38:8b:c4:8b:91:80:ac:79:83:25:
                    bd:04:4d:2f:38:74:cb:d6:9c:cf:c8:9a:d7:e5:76:
                    07:4b:b8:17:6a:9d:6e:70:dd:f7:2c:5b:62:11:81:
                    6d:6e:35:f1:80:8b:c0:fc:0d:98:86:30:fc:9c:88:
                    7a:c7:ee:22:75:48:4a:8f:01:9e:2c:58:c8:4c:be:
                    53:ef:a6:6b:ae:2e:80:8f:c0:00:55:c6:77:d5:75:
                    d5:10:37:0f:e3:97:f8:9d:d6:f0:e7:ac:81:8b:e7:
                    c6:ad:e4:d2:da:fe:c6:44:ab:2c:71:90:f1:1a:39:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:C4:2D:54:68:45:21:6B:DF:13:1B:19:34:FB:05:9C:98:96:DE
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3232203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:65:53:93:a1:ff:cd:7c:1e:a4:60:dc:76:4a:a7:45:b3:
         7d:80:19:67:9a:5a:24:68:df:75:73:5c:6b:b7:a9:dc:3f:df:
         4a:33:bb:7b:29:16:2d:d5:75:63:a0:ae:c5:be:75:0a:e9:03:
         f1:a8:08:c5:1a:e0:58:21:e0:72:00:86:4c:c2:9c:18:06:c5:
         5f:eb:b4:ee:9a:ad:39:11:30:cf:f2:2c:a8:4b:ea:68:af:9d:
         ff:a3:02:7b:64:3c:e4:a8:26:83:7d:a9:bd:a0:0a:1a:11:c8:
         bd:ae:00:4c:f5:56:ef:13:93:08:ee:56:91:ed:43:c1:80:2f:
         3f:b2:27:c9:76:36:ad:af:de:bb:4d:96:45:d0:8e:fb:49:fb:
         48:1f:42:58:c7:cf:1a:01:7d:d3:e1:c9:11:d8:fb:d8:f7:15:
         1a:d0:e4:56:f1:f5:d5:7f:79:5e:f0:63:c1:03:44:35:2a:a1:
         15:01:d3:1a:1a:a9:d9:f1:82:dc:34:3c:4c:85:1b:2b:6f:5f:
         32:7d:1f:be:b9:fb:94:80:94:c6:4e:1e:a0:e0:9c:8d:59:7f:
         9d:88:0e:78:58:61:2d:7e:61:be:76:79:89:b0:25:55:40:65:
         5c:7b:70:4e:8f:74:d2:ef:f7:4f:fb:5b:78:67:94:79:78:0f:
         5f:e6:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 05:21:47 2024 by rpki-client on console-fra.rpki-client.org