Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135332e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135332e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          OZGW/ROe+XVZNr+jIFf27IhB/E1WhJKLvMJSBej/O/0=
Subject key identifier:   33:62:9A:AE:33:AE:71:89:7A:AE:A7:61:CA:65:46:59:F3:01:70:A3
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       2E3F22F5D3E127CDD0A48BD05188A4D5F3126A04
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135332e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:55:00 +0000
ROA not before:           Mon 08 Jul 2024 19:50:00 +0000
ROA not after:            Mon 07 Jul 2025 19:55:00 +0000
asID:                     52339
IP address blocks:        190.151.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3f:22:f5:d3:e1:27:cd:d0:a4:8b:d0:51:88:a4:d5:f3:12:6a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:50:00 2024 GMT
            Not After : Jul  7 19:55:00 2025 GMT
        Subject: CN=33629AAE33AE71897AAEA761CA654659F30170A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:89:7b:30:21:b6:f5:d5:10:19:c9:e9:9c:
                    25:39:07:82:3f:5e:fe:48:5b:6a:d3:a8:9d:37:2a:
                    1c:e4:ce:0d:f1:12:9c:50:17:a8:98:12:95:49:28:
                    46:89:54:28:b9:6b:5c:76:41:1f:ce:1a:6e:b3:ac:
                    09:ba:92:31:f0:e1:d1:35:7d:65:da:e7:06:6a:a9:
                    17:34:be:73:ba:0f:66:df:6f:83:dc:46:78:f8:3d:
                    f6:e7:5f:b9:93:dc:e3:fd:81:73:fe:58:e8:46:53:
                    40:14:45:63:ed:d2:f2:ea:b6:fe:33:9b:eb:f2:d1:
                    4d:a4:a4:02:eb:25:5b:78:24:81:64:cb:1b:3d:d8:
                    18:9d:a9:48:e2:a7:6c:0d:e5:83:0e:68:a7:15:e2:
                    23:ff:3b:43:55:1c:7a:e7:cb:f7:00:40:ab:9b:89:
                    db:fd:bf:f3:b8:8b:1a:92:69:2d:82:30:9c:b3:03:
                    ed:58:d4:01:c0:81:0f:ff:2b:b7:45:ed:bf:33:07:
                    26:05:27:a3:92:5e:c7:4a:0b:35:a2:fa:71:d7:05:
                    f4:b3:1c:59:2e:63:4e:c1:bf:52:7a:8c:b0:cc:6f:
                    43:61:fe:f0:8c:e6:c4:b5:28:bb:b6:0f:6a:77:b8:
                    4a:27:ec:79:d4:fc:7f:db:a5:b9:2c:f2:b9:8e:2b:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:9A:AE:33:AE:71:89:7A:AE:A7:61:CA:65:46:59:F3:01:70:A3
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135332e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:6d:42:81:2c:86:da:15:89:5c:88:ab:46:ea:a9:77:01:
         da:d8:b2:7d:f7:aa:9b:1d:3c:28:c8:84:40:30:6d:ff:23:95:
         2b:68:89:af:1e:f1:c7:99:53:38:b9:6f:5a:21:80:db:b7:90:
         bc:b2:50:33:55:b2:bb:50:9f:74:68:70:93:ab:64:70:27:cc:
         7e:5e:b8:a2:03:94:3f:60:1c:42:86:08:7c:ea:33:ec:2e:70:
         70:a6:f6:44:4a:a1:b1:fa:c5:2b:26:f6:f0:36:bb:9d:a0:7e:
         9d:09:5a:69:d9:36:cf:69:79:82:77:d9:5c:94:21:2e:5f:9f:
         66:95:d7:e0:8a:18:a2:c8:ad:20:6d:47:c1:3d:a9:54:36:93:
         0a:23:e4:46:7d:fb:a1:fa:43:4a:f2:d3:11:21:ce:e5:56:0f:
         a1:dd:41:df:87:95:bc:65:b4:4b:b9:dd:22:03:61:95:a8:bd:
         72:1b:ca:58:ae:77:1b:ae:ce:f9:75:6b:3d:46:a5:bd:a9:b3:
         b1:48:b1:be:82:c6:18:cf:b0:23:28:ae:e2:b1:cb:aa:66:e5:
         9f:9d:c5:1b:56:d9:81:d4:24:c4:8c:b5:58:12:7d:10:71:49:
         5b:6c:18:88:92:8b:d7:01:05:b0:e9:7f:ca:ef:2a:32:e6:1d:
         6a:6d:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org