Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa
File:                     3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa (raw, json)
Hash identifier:          5ySPc8qQ4zgVXPIkOd7Vjj89ja22GgxI39rcll9LZRI=
Subject key identifier:   05:13:ED:58:87:8D:E2:2F:AB:17:9C:14:CA:D9:CD:E5:E0:3E:EC:C6
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       07A5FA305873C033AF630ED4447DB7D20003D0BD
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa
Signing time:             Tue 05 Mar 2024 17:49:19 +0000
ROA not before:           Tue 05 Mar 2024 17:44:19 +0000
ROA not after:            Tue 04 Mar 2025 17:49:19 +0000
asID:                     52339
IP address blocks:        190.107.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a5:fa:30:58:73:c0:33:af:63:0e:d4:44:7d:b7:d2:00:03:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Mar  5 17:44:19 2024 GMT
            Not After : Mar  4 17:49:19 2025 GMT
        Subject: CN=0513ED58878DE22FAB179C14CAD9CDE5E03EECC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:89:b9:b9:e7:9b:2f:90:87:99:2a:68:bc:
                    ac:56:0c:11:f1:fc:b6:b7:0b:50:24:d3:d1:4a:be:
                    e2:ce:87:54:e0:74:3f:42:2f:9c:d9:d0:44:94:9d:
                    79:36:cf:55:88:f0:29:88:10:bd:dd:9d:75:37:57:
                    b4:82:4c:3a:a4:e0:c9:6e:a3:b1:16:70:24:62:03:
                    bb:d5:32:81:84:59:a6:e1:11:49:45:3d:5e:2d:ac:
                    9d:7d:5d:66:d6:c7:e6:59:c3:a0:ce:a6:a1:cd:4a:
                    00:1e:82:17:66:1e:4a:b9:3f:2d:e3:7b:23:4d:0e:
                    bc:23:00:19:3f:6b:cf:a6:4f:08:47:1f:cd:50:b7:
                    60:0e:59:26:57:20:c7:9e:e0:3b:73:0d:aa:34:f1:
                    76:3f:bc:b0:66:2d:dd:80:ac:9f:e1:6a:f9:a1:7a:
                    65:ac:be:a6:d3:44:6f:f8:d5:06:bc:df:c4:19:14:
                    17:65:e4:c8:f9:d5:19:90:19:e7:4c:b7:73:d4:61:
                    53:bc:2c:f9:7f:0a:60:e9:22:e2:27:46:aa:6d:78:
                    38:78:f5:30:e1:9e:06:8d:a2:c6:d6:2f:36:21:85:
                    b2:66:44:8a:ce:48:f4:31:74:3d:ae:66:ec:94:bf:
                    ec:81:3a:d1:0d:a1:33:8a:d8:37:b0:f2:8b:bf:e3:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:ED:58:87:8D:E2:2F:AB:17:9C:14:CA:D9:CD:E5:E0:3E:EC:C6
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:a6:58:d4:5b:39:a5:54:5e:44:ba:5e:ef:37:1c:6a:5d:c0:
         91:47:80:dd:ee:14:ca:dd:97:2f:40:b4:3b:b6:75:e5:eb:ac:
         85:d8:b5:64:94:ba:f3:ff:2f:5b:36:97:2a:b0:11:28:e4:01:
         1c:6d:93:6e:f6:4f:5e:83:ea:a0:1a:28:b7:63:dc:1c:be:33:
         8f:1b:8e:f6:78:98:cb:2c:65:0a:88:10:79:1f:1d:a1:d0:4b:
         f9:08:0b:98:8b:94:d3:51:84:cd:3e:4b:83:4b:60:d3:27:94:
         b7:de:a3:b2:02:9a:7b:89:61:00:d8:3e:49:f0:86:c3:85:0a:
         d6:1e:47:b4:1c:3c:43:b6:47:e7:df:b8:f9:2f:68:e6:0a:1f:
         7b:bd:16:1e:07:bb:42:c2:19:6f:c4:23:90:19:63:15:04:ac:
         a0:74:ce:a6:2e:d9:51:3c:c1:91:7c:1e:72:90:8b:ab:9a:98:
         f1:f3:a4:b3:16:52:cf:34:1b:bc:a0:93:60:3c:e9:4e:83:ff:
         4f:48:2d:d6:fd:47:9c:91:d3:24:f8:ad:70:c2:e3:0f:a9:03:
         c8:cf:51:c6:e9:96:66:a2:10:b1:03:5c:09:94:96:c6:f9:51:
         27:02:0f:86:f7:83:49:2c:83:c2:9e:cb:38:aa:c0:2f:84:da:
         a4:87:82:3f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB6X6MFhzwDOvYw7URH230gAD0L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDAzMDUxNzQ0MTlaFw0yNTAzMDQxNzQ5MTlaMDMxMTAvBgNV
BAMTKDA1MTNFRDU4ODc4REUyMkZBQjE3OUMxNENBRDlDREU1RTAzRUVDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssIm5ueebL5CHmSpovKxWDBHx
/La3C1Ak09FKvuLOh1TgdD9CL5zZ0ESUnXk2z1WI8CmIEL3dnXU3V7SCTDqk4Mlu
o7EWcCRiA7vVMoGEWabhEUlFPV4trJ19XWbWx+ZZw6DOpqHNSgAeghdmHkq5Py3j
eyNNDrwjABk/a8+mTwhHH81Qt2AOWSZXIMee4DtzDao08XY/vLBmLd2ArJ/havmh
emWsvqbTRG/41Qa838QZFBdl5Mj51RmQGedMt3PUYVO8LPl/CmDpIuInRqpteDh4
9TDhngaNosbWLzYhhbJmRIrOSPQxdD2uZuyUv+yBOtENoTOK2Dew8ou/46prAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBRPtWIeN4i+rF5wUytnN5eA+7MYwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvmvU
MA0GCSqGSIb3DQEBCwUAA4IBAQCopljUWzmlVF5Eul7vNxxqXcCRR4Dd7hTK3Zcv
QLQ7tnXl66yF2LVklLrz/y9bNpcqsBEo5AEcbZNu9k9eg+qgGii3Y9wcvjOPG472
eJjLLGUKiBB5Hx2h0Ev5CAuYi5TTUYTNPkuDS2DTJ5S33qOyApp7iWEA2D5J8IbD
hQrWHke0HDxDtkfn37j5L2jmCh97vRYeB7tCwhlvxCOQGWMVBKygdM6mLtlRPMGR
fB5ykIurmpjx86SzFlLPNBu8oJNgPOlOg/9PSC3W/UeckdMk+K1wwuMPqQPIz1HG
6ZZmohCxA1wJlJbG+VEnAg+G94NJLIPCnss4qsAvhNqkh4I/
-----END CERTIFICATE-----
Generated at Wed May 15 05:28:21 2024 by rpki-client on console-ams.rpki-client.org