Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135312e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135312e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          BRFmeZi7/9R6o3aHSQAp0bxc0YE6yLBMovhp6GN8Trc=
Subject key identifier:   47:B2:D4:7F:38:BA:73:2B:9D:B2:0C:31:B3:05:65:69:CC:1C:B5:6B
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       032C90B937B47E4A2F6901B3C166338FADD18EA1
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135312e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:55:01 +0000
ROA not before:           Mon 08 Jul 2024 19:50:01 +0000
ROA not after:            Mon 07 Jul 2025 19:55:01 +0000
asID:                     52339
IP address blocks:        190.151.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2c:90:b9:37:b4:7e:4a:2f:69:01:b3:c1:66:33:8f:ad:d1:8e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:50:01 2024 GMT
            Not After : Jul  7 19:55:01 2025 GMT
        Subject: CN=47B2D47F38BA732B9DB20C31B3056569CC1CB56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:e3:eb:3d:03:30:16:19:ce:d8:11:3d:73:
                    03:67:2f:a8:32:25:54:03:f4:3a:c3:ba:d7:a2:28:
                    11:18:20:cd:39:57:87:6f:d3:f6:aa:b9:d7:36:07:
                    4b:58:c7:90:60:e5:a8:44:35:2e:47:06:a8:53:64:
                    2c:e9:65:e6:5c:f0:99:58:f6:4f:a5:62:06:f2:41:
                    59:ce:c8:bd:2e:d0:da:d6:83:de:96:61:97:16:8a:
                    db:6d:e7:b3:3b:01:8b:a3:bb:0b:81:20:c5:b6:02:
                    7d:68:f3:40:fa:95:64:5f:ea:86:52:83:b4:fe:43:
                    df:64:09:79:54:fa:83:ad:40:79:d9:e1:f2:53:6a:
                    ee:e1:97:09:5b:64:4a:30:78:58:41:df:69:57:5c:
                    42:36:c6:6b:ea:4d:96:5c:1e:6d:fe:64:ed:b2:4a:
                    fb:f0:be:b2:73:c8:22:45:ad:b9:8e:29:7d:5f:dd:
                    23:61:24:ee:c8:a3:1a:a9:74:e2:f1:d7:38:5a:89:
                    2b:4e:fc:77:91:e5:3a:0c:63:ad:45:c1:a2:dd:70:
                    c3:19:95:b6:3f:a0:5b:f0:8a:7c:a4:63:fa:18:7b:
                    6a:0d:82:35:5a:1a:be:cf:b7:0e:2e:ab:96:6e:26:
                    e2:e4:99:55:4d:ea:55:58:f1:b3:61:0d:fc:ad:ce:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:D4:7F:38:BA:73:2B:9D:B2:0C:31:B3:05:65:69:CC:1C:B5:6B
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135312e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:09:7a:a5:09:1b:f2:64:96:a2:87:44:0f:63:54:54:97:
         48:0d:71:1f:52:82:04:23:f9:35:52:dc:08:f5:73:d6:16:78:
         bd:eb:6e:53:a4:73:36:0f:fd:e5:9a:a2:d4:53:a8:3b:15:36:
         6a:61:31:16:f2:a4:90:ee:d9:6c:71:ad:42:52:dc:84:b6:f6:
         70:40:23:45:4a:c9:9b:44:f3:70:24:cc:2c:03:47:c4:0a:f3:
         63:2f:1a:5b:0f:0d:6d:b4:6a:f0:b4:1b:66:c3:1c:1a:77:ab:
         94:79:70:3e:29:3d:cb:80:98:6d:7a:e4:8e:47:89:04:85:29:
         c1:45:89:87:4b:2c:06:a6:10:ef:93:16:9f:5f:ca:a3:05:b3:
         68:fa:07:19:37:32:53:1c:f1:d3:7b:3d:c8:9e:74:1a:e2:5a:
         ad:cf:a0:0d:96:74:92:86:96:4d:fa:fc:dd:66:58:aa:f6:e5:
         c2:2b:b1:47:ae:41:9f:a9:a0:44:9f:d6:de:2a:71:a3:c9:c5:
         65:79:f3:44:ef:a3:ef:aa:d9:ec:d7:d5:69:4c:6c:7e:55:0c:
         d4:77:2d:21:ea:03:1b:a3:fe:6f:d7:eb:23:e4:d4:93:30:8e:
         32:38:88:e8:a4:33:4b:c2:f7:d9:f4:ef:9a:fd:d3:76:4c:0a:
         5d:63:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org