Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134372e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3134372e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          H9sXHryDET/S4HxVL9Zu8q/wsL8XPK32oQWsRPfEGAw=
Subject key identifier:   B6:FD:2F:CF:7F:0C:EA:4C:D0:1A:4E:39:D0:37:CA:E0:39:FD:38:3C
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       04C1D0875FF772BB25AB7DD223B7742026DA96D6
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134372e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:50:02 +0000
ROA not before:           Mon 08 Jul 2024 19:45:02 +0000
ROA not after:            Mon 07 Jul 2025 19:50:02 +0000
asID:                     52339
IP address blocks:        190.151.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c1:d0:87:5f:f7:72:bb:25:ab:7d:d2:23:b7:74:20:26:da:96:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:45:02 2024 GMT
            Not After : Jul  7 19:50:02 2025 GMT
        Subject: CN=B6FD2FCF7F0CEA4CD01A4E39D037CAE039FD383C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:37:f1:34:d8:cc:64:1a:e9:d7:f0:22:4d:
                    44:e7:ee:93:9a:77:dc:ed:6a:2a:64:43:c9:19:0d:
                    81:f8:09:df:c0:86:16:2b:6d:62:5d:21:17:c2:4a:
                    b0:b1:b9:2d:25:0c:45:a0:bd:4a:e5:96:4f:42:d5:
                    38:16:f7:5b:23:81:d1:85:89:80:70:13:35:c7:54:
                    b6:9b:e7:73:bc:14:55:58:b1:b8:01:b6:a7:05:0a:
                    fc:ec:59:d0:c1:ae:0b:32:8d:73:6a:de:ef:0b:bc:
                    9d:3b:1d:58:77:73:46:1e:36:86:37:d9:49:cb:54:
                    b7:13:34:ef:a6:a7:3f:46:e2:87:5a:47:88:9d:f0:
                    70:3f:fc:80:3e:87:38:ba:46:4e:e2:e7:0d:89:1a:
                    b5:e5:e3:f8:ea:d5:b5:e1:67:84:35:8b:f7:48:90:
                    76:29:6c:0a:3e:95:64:a5:ff:5b:48:60:f8:cb:44:
                    6f:ce:3b:c9:1b:19:82:9a:bc:e7:39:8b:d7:75:a2:
                    88:fc:47:71:a0:26:17:5c:20:d5:36:7d:96:87:0c:
                    a9:35:70:8e:d7:67:a3:ca:bb:00:4e:e2:4d:25:8f:
                    1a:de:01:00:53:0e:56:08:33:e3:29:58:8a:31:51:
                    3b:29:2b:5a:fb:72:e6:c5:12:67:1b:34:94:a4:9e:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:2F:CF:7F:0C:EA:4C:D0:1A:4E:39:D0:37:CA:E0:39:FD:38:3C
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134372e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:7e:9a:12:3d:74:ee:2f:c6:9d:96:8c:b1:60:87:ac:c0:
         69:24:3c:49:4f:c2:0d:6b:b6:97:cc:84:5a:60:0d:fc:17:6a:
         72:27:3f:6e:cc:e5:dd:23:b3:88:91:e0:78:13:7c:d7:75:38:
         56:b2:cc:75:4f:a7:ed:5b:52:6f:5b:a5:2b:43:99:7e:be:02:
         3b:bd:24:49:e6:91:00:b4:24:e2:90:e7:9b:85:e1:a3:98:b5:
         8b:c0:02:08:f6:c1:80:c0:22:77:45:20:ff:19:b3:0c:ca:1b:
         79:5b:6c:42:c9:6f:15:0f:85:e7:b0:17:3e:2c:0b:90:15:94:
         65:23:c7:bc:88:4e:d1:25:8b:e2:6d:06:98:cf:f2:ed:98:fb:
         1e:d0:90:24:7e:e3:0e:d6:c9:48:7d:70:1c:11:3f:b8:eb:c0:
         ad:d8:23:ec:dc:ea:f7:98:7c:fd:da:1d:60:d4:56:da:c5:24:
         5d:10:c4:2c:7c:78:0b:df:dc:b0:18:3a:80:e8:97:b0:13:c1:
         17:65:a8:57:aa:25:a2:d1:af:84:55:25:1d:e8:be:28:a0:83:
         b2:60:07:a2:44:26:06:81:d0:e1:26:1f:6b:68:1b:7a:a7:86:
         b5:ab:09:96:7c:47:e0:ca:a4:aa:8a:35:da:ab:1e:56:11:8b:
         9a:50:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 14:32:41 2024 by rpki-client on console-ams.rpki-client.org