Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          uw2oIh+wVMG2wvzw+NeraAgMGySk2aPkUpv89kC+RUo=
Subject key identifier:   26:8E:88:47:4A:AA:0B:C9:A4:0A:F7:25:71:53:E7:07:3C:C7:E9:E7
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       43E29AC971ED442C82F9B43AD590A83272B15D20
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:50:01 +0000
ROA not before:           Mon 08 Jul 2024 19:45:01 +0000
ROA not after:            Mon 07 Jul 2025 19:50:01 +0000
asID:                     52339
IP address blocks:        190.151.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e2:9a:c9:71:ed:44:2c:82:f9:b4:3a:d5:90:a8:32:72:b1:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:45:01 2024 GMT
            Not After : Jul  7 19:50:01 2025 GMT
        Subject: CN=268E88474AAA0BC9A40AF7257153E7073CC7E9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:15:0f:24:43:10:8e:7d:47:b9:98:d3:2c:
                    4a:41:1c:2d:fe:17:ef:84:1f:40:dd:01:aa:de:b2:
                    f1:e7:93:a0:36:1a:d7:46:cc:4f:bf:0e:30:30:d3:
                    0d:cd:5d:35:f6:cb:34:16:f2:cd:09:18:59:02:a6:
                    17:72:9e:c8:04:fe:c3:10:06:23:5a:40:0b:c7:20:
                    d7:09:0e:fe:c9:30:ec:ad:c9:b1:2b:18:bc:f8:f3:
                    12:cb:9a:57:0a:44:d6:fc:fe:f5:b9:18:03:dd:25:
                    44:73:d2:af:19:8b:da:74:e7:4b:bd:3f:7a:8c:78:
                    d9:65:33:6d:09:01:82:87:35:9a:e1:18:4c:d8:cd:
                    f0:8b:3b:ba:b3:f0:53:24:51:a5:25:4e:ad:0d:ca:
                    77:34:e5:f8:6c:65:09:cf:38:cf:14:4a:cd:03:66:
                    9c:f2:1a:d4:83:00:b1:0c:d0:99:b5:1b:55:7e:93:
                    89:7b:26:30:de:df:7d:96:62:17:56:13:f4:4d:34:
                    11:4d:3e:ee:c1:2f:6f:37:83:2b:20:bf:b6:58:dd:
                    9e:90:48:27:e6:c9:1e:30:e5:e8:42:14:70:20:88:
                    74:a4:56:3f:bb:4f:ec:a7:32:32:e5:ee:0a:3b:2d:
                    45:21:93:3b:b0:cc:ee:dc:ab:9b:03:ea:cf:bc:8c:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8E:88:47:4A:AA:0B:C9:A4:0A:F7:25:71:53:E7:07:3C:C7:E9:E7
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:ea:2f:c6:ee:ba:68:11:b1:f6:a0:70:c4:76:fc:4c:76:fe:
         c5:d6:73:01:e8:66:86:4d:67:90:3c:73:ac:16:75:bc:c0:d5:
         86:95:ce:b9:61:0d:94:e9:1b:8b:3a:ba:9f:11:b5:c3:42:2a:
         df:f3:05:85:03:a3:85:85:fa:be:d2:0f:1a:98:82:b8:3d:6d:
         f5:c0:26:e9:6b:61:05:23:cf:b6:83:55:c6:ff:8e:9a:95:f5:
         17:0c:9a:72:0d:69:02:08:40:27:db:14:ba:19:87:8a:d7:1d:
         67:6c:f1:c8:1b:d9:af:5e:ec:95:69:ff:e9:4c:84:a2:a5:7b:
         05:17:70:04:7b:d0:cb:2a:64:36:3c:99:ea:c7:a0:3c:fc:fa:
         5b:49:d2:fd:35:f2:8a:09:ad:27:f2:2b:53:7f:dd:21:42:53:
         ef:c1:37:86:e1:db:8f:32:8b:f2:a6:bf:eb:d4:1d:10:5f:02:
         98:1a:fb:a2:db:cd:ac:7e:93:79:7d:12:70:ad:7b:43:1d:5a:
         0f:10:80:11:98:ed:db:25:49:92:22:65:60:94:d2:a7:4a:49:
         2c:2c:bb:97:ed:91:12:f0:0a:32:81:c4:d3:75:e4:68:a1:06:
         48:ae:dc:f1:b4:94:8c:f0:f1:9c:ae:d6:b7:e6:41:13:87:8b:
         d0:4a:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org