Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa
File:                     3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa (raw, json)
Hash identifier:          JjWMJ6u1PBYKOCApfoR0EsmZ1/cc1Ik+vmPTF24LAx8=
Subject key identifier:   0E:69:A5:6A:D1:CC:EF:33:B0:86:C3:6B:40:48:6E:7B:95:ED:7E:CC
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       5C96A822D200544D0A0385679A0AA9D53362130D
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:30 +0000
ROA not before:           Mon 09 Jun 2025 20:16:30 +0000
ROA not after:            Mon 08 Jun 2026 20:21:30 +0000
asID:                     52339
IP address blocks:        190.107.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:96:a8:22:d2:00:54:4d:0a:03:85:67:9a:0a:a9:d5:33:62:13:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:30 2025 GMT
            Not After : Jun  8 20:21:30 2026 GMT
        Subject: CN=0E69A56AD1CCEF33B086C36B40486E7B95ED7ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:a8:cd:ab:fe:75:96:29:40:6e:a6:7b:22:
                    ec:ea:80:5a:d1:98:4f:b9:14:cc:69:3f:d5:98:b8:
                    f7:94:a3:ff:de:18:83:1c:11:60:64:21:aa:04:6e:
                    6e:e2:d2:ec:6a:07:db:e0:68:83:dd:ae:22:56:dc:
                    a8:00:db:56:76:57:61:ba:ef:9c:22:27:c5:85:d8:
                    65:85:55:10:e3:fc:3b:c2:94:b6:97:35:a8:ea:ec:
                    e1:56:23:e6:3e:ec:e6:11:65:85:ce:8c:c2:ca:41:
                    d3:af:23:ff:8a:53:be:96:9f:ff:ad:4f:90:05:be:
                    f0:b7:fd:02:c6:0b:02:ba:29:3a:7d:69:4e:2f:53:
                    2c:af:bd:ea:3c:7c:f1:aa:c8:ac:ea:52:08:64:bd:
                    09:b8:45:cb:2c:ea:4c:85:17:8b:89:20:41:96:bd:
                    64:57:60:20:2e:92:b2:49:cd:a8:90:10:e6:c7:8a:
                    bc:0c:95:43:df:b5:15:b9:50:11:0c:0f:2d:2f:68:
                    dc:0a:5e:cd:70:7d:e3:25:b3:c0:67:30:73:12:64:
                    7f:4a:05:63:40:e3:22:fb:f3:51:68:2b:11:46:0d:
                    6b:06:d3:df:2d:1e:62:99:47:da:a3:46:55:20:e7:
                    df:7c:18:03:8e:ec:ea:77:e9:84:5b:06:ef:92:04:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:69:A5:6A:D1:CC:EF:33:B0:86:C3:6B:40:48:6E:7B:95:ED:7E:CC
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:68:46:c4:bb:50:41:12:e6:13:0d:fa:ac:2e:ff:ea:ae:
         e6:81:7f:5c:94:03:5b:61:bf:86:73:cf:04:04:30:96:97:3f:
         eb:9f:99:df:be:7b:0b:9c:ee:be:57:47:c8:8f:fc:6b:ae:95:
         b8:ad:25:7c:0d:23:26:dd:d4:c6:19:24:72:5b:1d:29:e6:c3:
         a7:47:ee:96:4c:47:5f:f5:f6:4b:6c:7a:64:fb:9d:ab:88:93:
         26:28:58:ab:30:4a:d2:99:07:7e:14:7c:81:e7:72:25:62:66:
         89:06:f1:19:88:95:7c:8a:a7:66:4d:69:54:ca:f4:cf:27:71:
         3a:54:f3:4d:4a:45:d2:f7:40:0a:f7:e3:6e:ed:9f:10:04:6a:
         65:e4:fd:5c:fc:8e:df:53:65:b6:38:a8:a0:a8:7a:b3:79:c2:
         4e:42:f0:28:1d:9c:7b:2e:45:c0:f1:42:7c:a2:df:cb:e9:04:
         4f:15:c3:e8:90:ca:64:40:87:6d:37:bc:d2:e1:4b:02:34:4c:
         cc:1a:b8:4b:c5:3e:72:7f:d2:0d:27:76:49:72:2e:8e:45:c3:
         27:26:68:a3:22:89:86:4f:a7:cb:27:2b:fd:b8:69:aa:6a:b5:
         d4:0a:ce:2f:3e:e4:97:50:88:9e:82:77:08:e2:2f:2b:77:f1:
         e9:06:f0:49
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXJaoItIAVE0KA4Vnmgqp1TNiEw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MzBaFw0yNjA2MDgyMDIxMzBaMDMxMTAvBgNV
BAMTKDBFNjlBNTZBRDFDQ0VGMzNCMDg2QzM2QjQwNDg2RTdCOTVFRDdFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyqjNq/51lilAbqZ7IuzqgFrR
mE+5FMxpP9WYuPeUo//eGIMcEWBkIaoEbm7i0uxqB9vgaIPdriJW3KgA21Z2V2G6
75wiJ8WF2GWFVRDj/DvClLaXNajq7OFWI+Y+7OYRZYXOjMLKQdOvI/+KU76Wn/+t
T5AFvvC3/QLGCwK6KTp9aU4vUyyvveo8fPGqyKzqUghkvQm4Rcss6kyFF4uJIEGW
vWRXYCAukrJJzaiQEObHirwMlUPftRW5UBEMDy0vaNwKXs1wfeMls8BnMHMSZH9K
BWNA4yL781FoKxFGDWsG098tHmKZR9qjRlUg5998GAOO7Op36YRbBu+SBD79AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDmmlatHM7zOwhsNrQEhue5XtfswwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvmvU
MA0GCSqGSIb3DQEBCwUAA4IBAQA65GhGxLtQQRLmEw36rC7/6q7mgX9clANbYb+G
c88EBDCWlz/rn5nfvnsLnO6+V0fIj/xrrpW4rSV8DSMm3dTGGSRyWx0p5sOnR+6W
TEdf9fZLbHpk+52riJMmKFirMErSmQd+FHyB53IlYmaJBvEZiJV8iqdmTWlUyvTP
J3E6VPNNSkXS90AK9+Nu7Z8QBGpl5P1c/I7fU2W2OKigqHqzecJOQvAoHZx7LkXA
8UJ8ot/L6QRPFcPokMpkQIdtN7zS4UsCNEzMGrhLxT5yf9INJ3ZJci6ORcMnJmij
IomGT6fLJyv9uGmqarXUCs4vPuSXUIiegncI4i8rd/HpBvBJ
-----END CERTIFICATE-----
Generated at Mon Jun 23 03:55:13 2025 by rpki-client