Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          +XcjJgUSkr6iklFfwchWNaO8UrWvN42UaG8IEq0xysY=
Subject key identifier:   A3:41:1B:87:52:8A:C9:FD:03:B0:7A:8A:1E:2C:4C:2E:C9:FD:88:11
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       54052DDBC450D8F92077C3AB7D2DC28BA5538BD2
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:50:02 +0000
ROA not before:           Mon 08 Jul 2024 19:45:02 +0000
ROA not after:            Mon 07 Jul 2025 19:50:02 +0000
asID:                     52339
IP address blocks:        190.107.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:05:2d:db:c4:50:d8:f9:20:77:c3:ab:7d:2d:c2:8b:a5:53:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:45:02 2024 GMT
            Not After : Jul  7 19:50:02 2025 GMT
        Subject: CN=A3411B87528AC9FD03B07A8A1E2C4C2EC9FD8811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:94:d5:b9:95:20:7a:b6:f5:11:a5:c0:ed:
                    03:9f:2f:52:88:b5:95:fb:22:fd:d5:8d:91:08:eb:
                    5b:c4:7a:85:72:32:d7:1a:ba:da:90:6a:90:1d:8c:
                    84:59:5c:86:71:9a:2e:3c:2c:a2:81:61:b7:4f:64:
                    78:bb:31:53:56:70:91:44:ed:4c:78:1e:4f:c0:65:
                    e3:a0:ac:7a:01:96:34:f1:4e:17:ae:cf:2a:13:87:
                    6a:75:c7:dc:90:45:65:f5:25:c7:6b:8a:63:9c:ba:
                    db:7d:3a:4c:e5:6c:df:c4:17:ea:4a:a2:64:6e:a6:
                    5a:53:f5:35:03:9d:f0:34:a5:a7:86:e3:eb:98:2b:
                    37:58:1c:74:63:36:65:58:38:a5:9e:7c:cc:78:e2:
                    7c:ff:7b:78:e7:7e:2d:12:1c:87:57:f0:a8:a1:57:
                    1f:fb:66:f6:f0:52:db:19:e6:41:cb:75:8c:96:cf:
                    8c:66:c9:11:b3:83:82:63:40:0e:7f:96:28:f1:a3:
                    c5:55:fa:a2:e6:d5:04:fd:08:21:be:19:59:18:3f:
                    82:8c:fa:94:c9:aa:3d:ca:2c:83:9a:36:27:81:60:
                    c7:5e:8c:79:8b:39:8b:79:33:34:79:08:9d:1d:ba:
                    88:7d:ce:6b:25:37:f2:16:2b:99:fe:6d:b8:ff:d9:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:1B:87:52:8A:C9:FD:03:B0:7A:8A:1E:2C:4C:2E:C9:FD:88:11
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:02:0f:b4:12:1e:cb:fd:63:15:5b:39:ac:44:03:68:82:
         7f:fa:38:27:99:9f:2a:f7:11:9a:38:e8:94:62:2e:e2:b7:97:
         c8:54:68:99:82:08:19:b0:97:c0:70:71:7c:ee:68:3a:dd:9d:
         85:ef:5d:41:16:d9:7b:b8:57:85:8e:3b:c9:6c:7e:6f:87:90:
         e9:8e:94:c5:95:b4:cb:5d:d5:ba:61:8a:a4:22:72:51:99:e3:
         b9:cb:72:0d:25:8f:fe:95:18:fd:a1:48:5b:c1:0d:dc:3d:f0:
         5f:4c:19:86:24:87:78:55:4c:47:15:bb:a5:38:18:de:f3:c5:
         ea:72:83:fc:9a:f3:f6:8a:12:2e:5d:7a:d3:a2:aa:61:ad:4e:
         c5:62:b7:29:4e:7f:4d:a1:41:52:ec:28:c2:9b:0c:8a:65:35:
         f4:80:22:7c:1b:91:a6:55:08:70:53:48:3b:df:89:ad:95:90:
         66:5b:71:76:07:15:3c:af:cf:05:97:8f:b3:1f:92:ba:78:94:
         7d:44:5c:ef:79:33:20:3f:21:61:84:34:9d:8c:41:a9:bd:dd:
         23:e7:98:3a:d1:99:60:79:0d:fa:23:09:68:39:71:b9:24:2a:
         ae:67:a8:f3:f3:13:1e:97:7e:7f:82:4c:d0:cb:1a:d0:b7:64:
         1a:a5:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org