Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232322e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3232322e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          Z5muZeK4Vfgnom1WpjdShaDHJS1zWrpl2p5voQi5Ydw=
Subject key identifier:   FF:91:A3:8D:CD:51:35:F2:41:10:A7:5E:2F:17:AF:A4:9A:C4:BE:35
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       788CFD917E5B013190F0F98D5CCAD0BAC2763921
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232322e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 20:05:00 +0000
ROA not before:           Mon 08 Jul 2024 20:00:00 +0000
ROA not after:            Mon 07 Jul 2025 20:05:00 +0000
asID:                     52339
IP address blocks:        190.107.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8c:fd:91:7e:5b:01:31:90:f0:f9:8d:5c:ca:d0:ba:c2:76:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 20:00:00 2024 GMT
            Not After : Jul  7 20:05:00 2025 GMT
        Subject: CN=FF91A38DCD5135F24110A75E2F17AFA49AC4BE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:1f:5c:61:c0:94:e4:be:3e:a4:0a:8f:37:
                    c1:bb:e3:20:60:a0:9e:2f:cb:61:00:ef:78:f0:33:
                    b6:fa:99:ff:74:f5:85:b6:9d:2c:47:6d:6f:30:6f:
                    b8:b7:3e:ff:31:11:ee:70:c9:f2:ba:2b:ad:14:f3:
                    b2:d7:56:e7:5a:9e:12:f2:d4:01:c7:87:44:e9:b5:
                    59:02:48:7f:dd:c8:48:40:c9:f8:5e:e0:ee:31:88:
                    e2:ef:dd:b1:db:5b:8e:f3:70:2a:96:38:39:0e:b1:
                    c7:aa:70:9d:1d:11:f7:87:5f:e2:00:71:59:40:9c:
                    aa:c7:51:9d:be:ca:32:ec:19:3e:99:61:81:81:18:
                    36:d1:89:c8:6a:69:3e:34:4c:5a:49:9b:81:d6:12:
                    b1:d1:f2:de:32:ca:c8:b7:8e:65:57:0e:9c:52:8c:
                    ec:55:ee:df:5d:fa:51:c0:1b:25:b1:0f:9e:00:51:
                    e5:4d:5b:4a:8d:f7:fb:48:f3:79:f8:0b:7e:bf:9f:
                    b4:27:8d:52:cf:5c:b4:56:6d:ed:03:ec:b2:a0:c4:
                    9a:20:35:c4:99:5f:17:8a:5b:ce:e8:c9:57:6e:b5:
                    26:9e:63:0a:cf:66:87:d5:5f:03:9e:ff:a1:89:24:
                    ee:a2:85:15:3c:7f:a5:23:20:28:eb:56:fd:be:9a:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:A3:8D:CD:51:35:F2:41:10:A7:5E:2F:17:AF:A4:9A:C4:BE:35
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232322e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e9:52:bf:48:3b:66:a3:97:7b:8a:24:3e:59:1b:88:a1:c6:
         f1:4e:9f:d4:4b:90:24:a3:68:de:80:ac:be:77:8e:8a:40:a0:
         47:3d:fa:26:b1:94:f7:68:1a:ad:f5:f2:c8:47:81:9e:ba:89:
         a7:35:1c:78:c0:77:9d:0e:41:a4:da:90:fb:99:cf:5c:8b:81:
         d0:cd:5e:2f:a2:6d:02:13:9c:c7:68:7b:49:58:32:55:66:0b:
         13:ec:be:10:a6:49:00:f5:9e:71:5a:84:45:7b:4e:18:cd:c7:
         a5:16:b1:98:01:a4:ce:82:bc:91:1e:80:c0:cf:56:04:cc:05:
         f7:55:79:15:bf:ee:ec:5c:75:43:76:52:ac:5d:bb:5f:d1:71:
         c8:55:ab:eb:4f:b8:1e:eb:9c:12:ef:33:f3:1d:28:46:a8:21:
         f3:3b:e7:cc:9a:bd:c4:08:8a:db:9c:7a:25:d8:95:44:52:af:
         b4:c5:36:64:c8:b0:6f:b6:28:5f:ac:0f:30:ab:26:1f:f4:bb:
         cf:31:f9:4c:fd:08:bb:c0:94:8c:32:45:e2:78:30:39:03:dc:
         8b:67:bf:d4:23:d0:9b:ff:af:00:97:a1:f3:1c:ce:a1:7d:cc:
         36:93:5e:70:74:82:ef:8d:87:c4:5b:29:ef:71:05:e0:ed:11:
         22:b4:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org