Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232312e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3232312e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          iSLOAAFd296nJJKtSljR+2vwHOZr6DzGTr8rGVXoFhE=
Subject key identifier:   E3:D6:90:07:8B:C5:58:41:CA:5C:FF:17:C8:6B:D6:50:21:98:F9:29
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       3613A90191FF9D9311089A7FEF9EB523BF420540
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232312e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:36 +0000
ROA not before:           Mon 09 Jun 2025 20:16:36 +0000
ROA not after:            Mon 08 Jun 2026 20:21:36 +0000
asID:                     52339
IP address blocks:        190.107.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:13:a9:01:91:ff:9d:93:11:08:9a:7f:ef:9e:b5:23:bf:42:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:36 2025 GMT
            Not After : Jun  8 20:21:36 2026 GMT
        Subject: CN=E3D690078BC55841CA5CFF17C86BD6502198F929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:bf:e0:66:9d:94:4f:85:50:7a:4e:f9:9d:
                    f2:ef:4a:cd:5e:a1:c9:dd:b2:0e:b2:0e:21:de:07:
                    20:a6:48:52:cd:72:70:db:3d:77:f1:40:28:14:dd:
                    a5:0c:69:c9:75:c6:8e:84:8e:e2:5e:30:af:7d:62:
                    30:6c:e7:37:fa:da:61:8b:da:93:67:f9:9c:0f:e2:
                    1b:b6:78:26:cd:30:13:3f:9b:29:45:5d:b5:11:f4:
                    73:0a:c4:f5:18:e0:2c:9c:03:19:f6:20:73:d1:a7:
                    e9:57:d5:cb:73:20:98:6c:8b:5d:72:1b:f9:93:e4:
                    7f:e7:04:3d:6f:fd:5a:3a:a3:1d:e4:6d:41:87:e1:
                    05:1c:9f:0b:56:5e:5b:de:59:a9:f6:fe:96:d5:6c:
                    ca:8e:4a:31:6e:bb:eb:b1:be:19:13:3c:07:08:0f:
                    95:72:8c:13:da:ec:86:fb:93:d2:3c:2a:da:77:9a:
                    e4:8c:8d:d7:d9:69:13:8f:5a:49:fd:05:32:de:ed:
                    bf:3a:4e:c7:2c:78:25:1e:96:ac:96:c7:f7:0f:44:
                    95:97:1e:4d:a3:08:7c:b4:8e:6b:58:c9:94:3b:82:
                    3a:da:de:de:28:3f:e5:65:a1:49:f5:2b:2e:f1:3d:
                    96:5d:46:17:41:75:1a:5f:62:44:fb:d8:a2:9f:08:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D6:90:07:8B:C5:58:41:CA:5C:FF:17:C8:6B:D6:50:21:98:F9:29
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232312e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:50:6e:cb:16:cf:b4:10:5c:74:90:ba:d3:7e:68:ed:3b:
         7b:0e:a8:4b:68:57:92:55:2d:a1:33:3f:67:8d:1c:1b:e5:4d:
         de:4f:fb:20:60:77:fd:36:d4:bb:d2:2b:75:c9:6f:17:28:1a:
         bc:ad:b7:8f:9f:74:2a:3b:5b:d4:db:00:d4:66:83:b9:0b:d4:
         96:0c:56:31:9c:17:5c:9d:5b:58:22:df:51:3d:08:a6:1e:5b:
         0b:5a:5e:5e:c2:49:1f:14:a8:03:c1:b5:45:a7:22:ff:43:1b:
         f7:90:f1:e3:9a:1f:ec:fb:2c:14:66:97:b5:a0:b7:40:2c:b3:
         88:84:64:4c:87:8a:28:bf:fc:39:20:8d:a3:6a:a8:67:88:99:
         5d:9e:6d:07:ae:a2:e0:c8:1f:c5:8b:49:b0:aa:25:f5:18:a8:
         17:be:91:a5:50:70:8a:5d:ad:a3:b8:47:21:fd:7b:98:f1:99:
         0e:35:af:18:ed:e9:77:08:ac:d6:fd:98:7b:7a:70:13:15:a4:
         6d:2d:71:90:2a:90:6a:f0:9d:de:df:04:b3:72:b5:ae:d4:39:
         e9:ce:46:86:dc:77:3a:be:21:5b:94:89:a2:2d:f0:30:d0:b6:
         bd:d3:b7:c4:e2:a7:39:69:a5:28:55:03:a7:89:52:a8:34:21:
         f0:1e:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:29:55 2025 by rpki-client