Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          RKEuiXVlr+NiPC14Rrnl0c2WC5yuv3mkbWwvpBZ3H7w=
Subject key identifier:   D2:AF:12:A4:FC:00:A2:48:6A:AF:0C:64:75:9B:F9:79:77:FD:EF:A3
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6D73DB36EB854F7F94161C0E3AA6297F24E00B2A
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:55:02 +0000
ROA not before:           Mon 08 Jul 2024 19:50:02 +0000
ROA not after:            Mon 07 Jul 2025 19:55:02 +0000
asID:                     52339
IP address blocks:        190.151.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:73:db:36:eb:85:4f:7f:94:16:1c:0e:3a:a6:29:7f:24:e0:0b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:50:02 2024 GMT
            Not After : Jul  7 19:55:02 2025 GMT
        Subject: CN=D2AF12A4FC00A2486AAF0C64759BF97977FDEFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:b5:f5:3a:91:aa:c9:26:85:1b:08:ba:d9:
                    e7:91:33:1d:c4:4f:eb:7e:0a:88:c5:d1:9c:16:e4:
                    75:19:bc:a4:12:7b:67:53:51:98:1c:20:33:64:ff:
                    5d:da:5e:44:f4:38:ab:1d:e5:11:78:1b:fe:68:1c:
                    97:80:02:af:d7:69:d7:67:6f:2c:82:d3:59:ce:f3:
                    c1:57:5d:5e:4b:13:17:83:b1:4e:05:a3:4e:ce:b4:
                    0d:b2:d3:78:4f:87:d8:7b:23:52:23:88:00:a6:7d:
                    fc:65:e5:fc:1b:87:56:2e:38:83:f9:53:84:42:02:
                    df:bc:3d:a8:4d:06:03:72:be:7d:f1:0b:94:93:fe:
                    69:19:f0:59:ff:7f:0b:03:f5:a8:12:a0:1b:42:19:
                    4d:c6:55:0e:24:1e:b3:06:a8:6d:df:71:d6:8e:5f:
                    d0:9d:48:0e:fd:21:1f:06:84:23:ff:78:ee:16:3c:
                    6d:f5:22:95:d9:e5:b9:8e:0e:ae:0a:3c:a5:4d:2a:
                    1a:f3:6c:c5:8b:1a:a5:64:bb:d0:05:38:c0:f5:21:
                    75:c1:a1:80:1b:61:fe:e6:de:09:5d:5c:00:b6:29:
                    5f:70:2f:9e:78:8d:e0:c9:6c:2b:98:a0:4f:59:c7:
                    ce:b2:5f:ab:a0:c7:57:76:1c:aa:0a:05:36:0e:e5:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:12:A4:FC:00:A2:48:6A:AF:0C:64:75:9B:F9:79:77:FD:EF:A3
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:eb:64:f3:d0:f4:54:f7:7c:66:9b:3e:d1:ed:f5:af:19:
         27:fb:ee:85:5e:65:03:cb:10:7e:e3:c4:44:9e:cb:1c:4f:d3:
         d9:ca:29:69:2d:c7:66:6d:bb:64:a2:bf:00:84:f2:4b:8d:de:
         0b:1e:68:ad:56:63:00:68:cb:42:e7:a1:9b:c2:b1:ce:94:ec:
         85:b3:18:2b:b2:86:28:14:0e:db:47:f1:51:b0:88:87:51:b1:
         6f:da:a4:41:09:81:9e:9c:87:59:6f:f1:11:5a:ea:0a:f0:b4:
         80:51:48:ca:48:6b:b7:aa:60:27:67:f0:1d:7e:ad:5e:83:04:
         c0:f2:3e:e2:d9:07:71:1b:84:29:a6:14:0b:1f:90:12:37:49:
         b3:db:d6:03:04:34:9e:86:18:ae:dc:d0:a9:19:c3:a1:19:a1:
         38:c4:70:49:fd:44:c3:bc:b0:ea:8c:98:9d:43:85:83:3e:81:
         a7:37:19:e1:3e:b6:ab:01:67:66:cc:19:6e:da:d4:bd:63:ba:
         58:3b:c4:c8:eb:f2:ca:8c:1e:df:3c:90:ee:67:f6:3d:e7:68:
         7d:db:4f:19:3a:39:9e:2e:c7:50:c4:8b:29:d7:e7:63:51:a1:
         d8:2b:ec:20:9c:bc:58:8d:c8:46:03:98:7f:6b:49:ca:cf:49:
         ff:23:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org