Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231392e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231392e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          m25stUtZSzuMsbZ1HdnyIYtLnRmtoF6QTOP8DdtZEMo=
Subject key identifier:   4B:29:DF:A8:28:64:5C:EE:E9:02:3C:28:72:51:32:3E:99:90:20:56
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       29C21281F6627228B74D6A63F1B2E3C509CDB452
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231392e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:50:03 +0000
ROA not before:           Mon 08 Jul 2024 19:45:03 +0000
ROA not after:            Mon 07 Jul 2025 19:50:03 +0000
asID:                     52339
IP address blocks:        190.107.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c2:12:81:f6:62:72:28:b7:4d:6a:63:f1:b2:e3:c5:09:cd:b4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:45:03 2024 GMT
            Not After : Jul  7 19:50:03 2025 GMT
        Subject: CN=4B29DFA828645CEEE9023C287251323E99902056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:73:98:14:8c:85:10:5e:27:cb:62:55:38:
                    3d:5f:9c:4d:6a:73:e8:93:4e:d6:5b:5d:85:5f:13:
                    6d:63:6e:39:03:bf:15:09:77:16:91:63:66:0c:fc:
                    09:b3:10:ad:b2:4e:78:fd:6b:e4:e5:fe:e4:c7:83:
                    da:31:d9:4e:23:57:ec:84:69:f7:a7:13:5a:91:cc:
                    21:29:d5:17:e6:d1:9e:8b:b4:ab:e0:9b:d3:11:86:
                    04:11:73:00:1c:8c:cb:b0:cf:53:17:2a:5f:6e:41:
                    1e:8a:6e:f2:b4:ed:62:99:ab:01:cb:df:e8:d9:99:
                    aa:07:b9:93:fc:e4:80:c3:e7:67:30:6f:9b:54:eb:
                    b3:2a:0c:43:8d:7a:3f:af:a5:55:71:b7:b6:59:4d:
                    e5:15:c1:e6:31:e7:96:a2:c2:e9:13:56:b1:c8:ec:
                    98:63:87:02:99:ba:78:8e:85:d6:2a:d7:cc:57:21:
                    d0:40:1c:b4:6f:ae:79:05:bc:01:a1:4c:b1:36:ea:
                    08:d0:42:32:7b:de:b1:b7:da:06:35:15:ac:19:cb:
                    59:2f:54:85:53:6a:f0:86:1e:13:66:3c:be:c8:03:
                    7e:23:a2:13:1c:4d:d4:02:3d:74:6c:35:31:a5:29:
                    24:03:79:c2:8b:56:3a:c1:99:fa:bb:10:44:5b:f9:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:29:DF:A8:28:64:5C:EE:E9:02:3C:28:72:51:32:3E:99:90:20:56
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231392e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:bb:c3:4c:35:6d:6c:23:63:bb:c1:13:b4:0e:36:5c:17:44:
         d6:9d:87:ab:40:83:12:69:69:64:1f:bc:dc:fd:27:c6:04:a2:
         fe:28:fe:78:27:30:b3:70:09:e7:56:91:9a:6e:cb:69:69:8a:
         65:8d:63:a7:15:90:95:a9:ae:ea:13:f1:9e:0c:ad:3e:b8:b6:
         42:ca:a8:0b:7b:53:a3:2b:72:2f:6b:52:fb:b2:bd:7c:12:4b:
         8a:70:70:9b:07:51:42:32:b5:eb:51:cc:50:96:66:12:97:c1:
         46:7b:b7:28:1c:77:fd:55:99:e2:17:92:20:81:f2:0a:20:f3:
         4b:a9:da:a7:95:cc:e4:88:93:b5:10:ab:f7:51:88:0a:70:60:
         17:34:5f:15:9b:2f:82:fd:b7:9e:e2:a4:b4:f1:f8:09:a8:2c:
         fe:61:81:14:80:b3:19:21:4b:20:2f:70:47:d1:1a:f9:2b:ae:
         5c:75:18:53:df:dd:45:00:21:0e:c6:53:18:d7:c5:a2:69:0c:
         13:d4:4d:80:f9:0d:e6:9e:ce:65:62:70:18:21:61:94:48:a4:
         30:74:27:2f:91:9d:18:72:a1:8b:08:3e:0b:17:ab:82:7f:62:
         f1:42:b7:86:ab:2f:4b:09:14:82:a1:ad:d0:64:5c:f7:81:34:
         fa:41:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org