Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203532333339.roa
File:                     3133312e37322e32382e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          MxDz3M61IINiU2HFnI946m8ECwAN7INpBSZ/HwIIfj8=
Subject key identifier:   A1:30:5B:BA:96:4D:3A:47:0D:E9:2D:82:20:EB:1F:19:0C:94:7D:89
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       05D600844208128D127B5D373EFB59E1C19D9118
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:33 +0000
ROA not before:           Mon 09 Jun 2025 20:16:33 +0000
ROA not after:            Mon 08 Jun 2026 20:21:33 +0000
asID:                     52339
IP address blocks:        131.72.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d6:00:84:42:08:12:8d:12:7b:5d:37:3e:fb:59:e1:c1:9d:91:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:33 2025 GMT
            Not After : Jun  8 20:21:33 2026 GMT
        Subject: CN=A1305BBA964D3A470DE92D8220EB1F190C947D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:34:94:6a:4a:2a:5a:d0:5b:22:bd:94:42:
                    4f:a3:1e:6b:49:b3:07:e9:0f:fd:57:b2:0a:9e:69:
                    d4:5f:c6:4c:ac:99:48:91:c5:8d:a8:f0:02:96:ad:
                    93:b0:17:ab:ab:95:42:70:6a:ff:37:23:e2:20:c7:
                    1a:c3:2d:ba:ee:d8:7c:94:e1:55:65:bb:52:18:83:
                    4a:12:50:55:a8:bf:3c:f5:a9:49:e7:50:ba:e5:5d:
                    18:50:44:62:b8:bd:28:9c:cb:de:11:05:48:96:2c:
                    41:f6:43:3b:53:04:df:f1:2e:8c:83:7f:c4:f5:78:
                    53:6c:c7:c2:ed:c2:67:ab:bd:c7:7e:f4:7c:05:60:
                    02:d6:77:27:c0:8f:73:e2:4a:16:ca:26:7a:20:49:
                    85:cf:8c:1d:8b:64:21:bf:3e:57:58:54:dd:5a:2c:
                    8c:2e:0b:b8:0e:32:7e:3a:8c:0c:59:08:ec:ba:ce:
                    53:ef:5a:ca:58:92:13:c5:83:43:55:bc:89:d5:95:
                    9a:f2:f9:5b:d2:23:9e:65:9c:6c:d5:5c:54:3e:06:
                    17:77:92:3e:fc:36:61:6d:3c:4d:a2:8a:17:03:5b:
                    0d:dc:e4:be:d7:cc:34:13:3e:2c:54:ee:f6:6e:80:
                    bb:64:4a:f7:a6:47:92:d9:a4:26:a1:47:91:88:50:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:5B:BA:96:4D:3A:47:0D:E9:2D:82:20:EB:1F:19:0C:94:7D:89
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:80:31:d7:ee:56:5b:16:ec:ef:0b:ce:89:f4:1d:a1:09:46:
         5f:15:9e:92:37:af:20:c0:0f:11:c6:10:35:89:e0:a9:0b:a0:
         11:23:3f:28:63:42:63:cc:7f:04:c0:ef:32:de:9a:96:c5:53:
         44:da:bd:8c:9e:64:9e:1d:47:56:af:15:ab:21:8a:b3:04:4e:
         67:6a:88:da:9d:65:26:cb:14:5c:d2:a7:91:3e:de:79:51:c1:
         d7:e7:1f:ca:a5:6d:af:33:ee:89:20:52:be:88:1a:60:7c:97:
         0e:ba:8f:bf:35:9d:4e:09:73:76:cc:d1:f0:69:ad:85:5d:26:
         28:18:f7:15:7f:06:a4:27:89:aa:53:64:35:87:6b:19:de:79:
         94:b0:dd:11:58:c1:76:82:68:66:f9:95:2a:18:5a:19:18:2a:
         5c:c4:23:c6:13:74:87:23:79:3f:24:1f:33:b0:5c:3e:5d:dd:
         f8:0e:96:46:9a:8d:2b:4f:12:92:88:0e:5d:3b:cf:46:7c:df:
         37:c4:6b:90:9d:7c:d7:82:db:6d:09:e9:39:d3:ad:4c:a3:4a:
         07:8a:90:06:d7:1c:7a:fe:c9:8d:9b:7a:67:8e:12:37:d8:dd:
         45:75:8d:b0:7f:81:92:5c:db:66:0a:8b:c3:fe:e0:36:90:b2:
         b5:50:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 03:53:25 2025 by rpki-client