Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa
File:                     3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa (raw, json)
Hash identifier:          1PyRDsRmiNu62Gx+HlCb3mXDumkoUgl1ap/Kdghwcy4=
Subject key identifier:   88:4B:66:30:40:D4:B1:9E:AB:6D:BE:9B:D3:66:A0:3D:6F:AF:6F:06
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       470F6EB43554C947DB6F84D04803C6392A31D411
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa
Signing time:             Tue 05 Mar 2024 18:00:04 +0000
ROA not before:           Tue 05 Mar 2024 17:55:04 +0000
ROA not after:            Tue 04 Mar 2025 18:00:04 +0000
asID:                     263795
IP address blocks:        190.105.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0f:6e:b4:35:54:c9:47:db:6f:84:d0:48:03:c6:39:2a:31:d4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Mar  5 17:55:04 2024 GMT
            Not After : Mar  4 18:00:04 2025 GMT
        Subject: CN=884B663040D4B19EAB6DBE9BD366A03D6FAF6F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:2f:ea:3c:51:77:d0:b4:9a:03:8f:35:22:
                    c7:5d:34:df:23:a0:51:10:a6:ab:f7:90:d8:c2:14:
                    23:4e:2a:e9:19:4d:28:76:2e:41:00:c1:d6:c5:7e:
                    cd:f9:72:c4:13:3c:73:ed:f4:4b:a3:d3:b6:b0:d5:
                    17:63:55:84:fb:c5:c5:e3:47:2d:bb:5a:29:df:d9:
                    c4:2d:42:e9:a5:33:f1:78:c3:1f:8d:82:bc:02:b0:
                    60:63:05:94:af:23:92:dc:8a:f6:5b:c5:e6:58:e8:
                    e4:ee:43:f4:3d:b7:f8:90:e8:3d:87:53:95:8d:6f:
                    3b:51:d5:ce:22:f5:28:f5:e1:df:4c:8d:0e:2c:fa:
                    f0:ca:5e:79:ea:a2:85:07:39:50:a2:bc:a3:5a:09:
                    35:9a:39:92:d5:88:03:8b:d2:af:64:8d:3f:98:54:
                    21:22:1a:7c:c5:2d:81:b1:61:b8:2a:12:fd:c0:ba:
                    98:c3:47:c5:75:d7:29:9f:2a:c5:c2:64:b3:68:b3:
                    bb:ce:b0:1a:30:ea:4a:c9:88:4d:1a:57:11:7f:65:
                    a9:05:c5:c2:d7:1e:58:07:85:c0:4d:16:1a:e8:42:
                    c4:93:ab:0e:08:75:ea:c8:43:9c:db:52:34:0f:bc:
                    aa:43:2d:8f:e7:35:c1:a6:af:2e:02:50:a1:b8:36:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:66:30:40:D4:B1:9E:AB:6D:BE:9B:D3:66:A0:3D:6F:AF:6F:06
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3139302e3130352e3136382e302f32322d3234203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:1e:96:36:66:1c:52:fd:3d:00:c0:e1:58:76:07:b4:8f:31:
         5f:94:61:62:08:41:3e:6a:e9:78:fd:b7:17:5b:58:4d:3c:b2:
         ce:e7:42:e8:05:31:18:6c:68:fd:70:08:de:cf:dd:09:c4:d2:
         fe:b3:da:82:d0:7a:3d:6c:e9:4e:19:52:6f:06:42:18:80:12:
         97:73:f7:5a:ab:70:1b:fb:6f:72:72:7f:cd:50:46:9a:08:5a:
         f3:e1:50:85:71:4f:79:fb:54:b5:d8:9d:29:09:23:1f:bb:33:
         ef:5f:f4:8d:23:ce:8a:a0:21:fe:b2:45:29:32:15:0e:63:b1:
         2b:49:0d:7c:65:07:e2:1b:fd:68:8f:87:f1:ee:91:5e:11:fa:
         d3:b2:02:78:98:0c:35:f5:38:16:06:38:b4:9c:54:ee:fa:ab:
         62:b6:20:f0:65:60:32:f3:7d:93:01:e6:bd:94:3e:c6:09:ba:
         60:28:33:06:6b:85:6d:58:92:98:c8:bc:34:3d:1b:d4:91:d3:
         3d:5d:34:5e:7a:14:c8:1d:dd:ab:e8:07:ea:5a:9a:09:27:46:
         49:b4:9a:53:2c:ed:2c:b7:25:0b:79:a4:03:e9:82:19:79:19:
         a1:c6:ff:15:0b:3a:cc:b0:40:8d:4c:5e:bc:a1:f2:01:7d:4c:
         06:3b:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org