Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          +1wIA+/t67aP7+Tc+siGSE22Fyq3QYFkbkVdzH1XAMY=
Subject key identifier:   A9:94:F7:7C:99:F7:59:D1:94:5D:3A:E4:53:13:03:D9:76:E7:0D:39
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       35DEDC15A3DAB061F5027558358CEB6D42466025
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:35 +0000
ROA not before:           Mon 09 Jun 2025 20:16:35 +0000
ROA not after:            Mon 08 Jun 2026 20:21:35 +0000
asID:                     52339
IP address blocks:        190.107.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:de:dc:15:a3:da:b0:61:f5:02:75:58:35:8c:eb:6d:42:46:60:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:35 2025 GMT
            Not After : Jun  8 20:21:35 2026 GMT
        Subject: CN=A994F77C99F759D1945D3AE4531303D976E70D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:7a:04:b4:19:0c:89:32:54:ff:42:e8:6c:
                    45:1f:83:02:d1:1f:9a:82:ac:ca:e5:96:03:b9:07:
                    ea:80:0a:03:8c:13:b5:06:34:c8:b7:43:1f:ad:82:
                    0a:11:02:3e:b6:86:52:a6:51:10:33:f2:8f:01:2e:
                    54:76:40:ef:a8:d9:01:4d:2b:f7:6c:9e:a0:26:71:
                    1b:21:dc:36:f4:24:3e:f5:85:05:0b:ee:a8:0f:5a:
                    be:b9:c1:7b:6d:70:0b:38:09:6d:06:81:c6:41:e4:
                    88:d0:4f:c9:29:b2:98:84:99:12:77:55:05:38:a2:
                    95:d3:c3:f2:b2:5f:d3:de:62:34:eb:03:fe:80:6e:
                    e6:0b:c0:38:50:0f:2a:49:e5:bd:ab:0c:43:93:d4:
                    9f:a6:c7:89:f6:76:5f:3b:9c:d9:b5:40:a5:f7:60:
                    03:e3:2c:c7:bf:d0:02:5c:5c:3a:bb:c5:90:3b:7b:
                    7f:c1:4a:e1:46:d7:69:34:11:56:90:2c:e3:b3:00:
                    80:14:d2:e7:bd:61:0e:5f:bf:d2:38:8b:00:5e:88:
                    5d:1b:70:88:8d:2c:c7:47:01:90:ed:69:d7:22:a8:
                    66:ca:d0:c3:30:2d:6d:25:4d:16:b4:13:ee:02:f8:
                    58:8a:f0:9e:30:93:2d:15:e0:12:c9:de:06:cc:15:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:F7:7C:99:F7:59:D1:94:5D:3A:E4:53:13:03:D9:76:E7:0D:39
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:68:9d:60:47:b2:95:8a:de:80:fd:ed:97:65:fc:6a:bb:78:
         e1:93:e5:2c:95:85:52:67:a7:e0:cb:82:5c:89:63:95:62:a5:
         b4:35:5a:e3:02:60:de:e7:c7:35:1a:09:98:f0:23:68:a4:35:
         19:1f:71:0d:73:b2:fa:ab:a3:20:2b:c9:d7:ea:0b:18:95:b7:
         f7:d8:e3:4c:f0:9d:88:5b:5a:0c:3b:14:07:ff:fa:74:e1:e3:
         cc:63:40:aa:6e:84:55:67:cf:13:37:4b:e2:b0:69:7b:42:f1:
         bd:5a:e4:83:aa:da:f5:5c:a0:d4:66:8e:99:a5:70:6d:f1:5f:
         7c:1b:38:08:0f:de:2c:e1:d7:0e:8e:9c:ec:c1:fa:c9:47:45:
         02:73:3d:34:a1:98:f4:b0:a3:91:7d:df:90:0a:13:64:1f:04:
         b2:ea:89:a8:7a:82:78:49:7f:73:f0:03:32:8b:7e:3f:c9:07:
         49:18:3e:d2:01:2c:35:3e:d6:67:8a:68:05:5d:b1:5d:62:e8:
         e0:40:0b:1b:cb:74:2e:78:47:79:40:5c:f9:fe:09:38:cc:d9:
         5a:6a:13:ff:f7:3d:75:01:c8:f2:9e:ec:1b:1e:b7:da:10:04:
         93:10:4b:52:3e:a6:d9:f7:bb:b5:32:16:55:53:83:7d:39:96:
         5a:52:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:30:23 2025 by rpki-client