Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232332e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3232332e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          J71nsYtMP4SM0zwcPY4ED7+2rXIxb9kapak78rspu24=
Subject key identifier:   54:A8:1E:CE:09:F4:68:BB:4A:B5:8E:DE:CF:89:B0:F9:7B:6A:84:01
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       606EB5EC63AA52AB7B25239BF7B30C68B17D2811
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232332e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:29 +0000
ROA not before:           Mon 09 Jun 2025 20:16:29 +0000
ROA not after:            Mon 08 Jun 2026 20:21:29 +0000
asID:                     52339
IP address blocks:        190.107.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6e:b5:ec:63:aa:52:ab:7b:25:23:9b:f7:b3:0c:68:b1:7d:28:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:29 2025 GMT
            Not After : Jun  8 20:21:29 2026 GMT
        Subject: CN=54A81ECE09F468BB4AB58EDECF89B0F97B6A8401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:ed:a9:2b:98:c0:81:ca:f5:fe:ea:3b:bd:
                    e2:14:38:66:55:cf:6c:5e:eb:63:e0:62:68:95:ee:
                    2a:ac:7c:c7:65:d8:33:dc:1d:43:36:35:12:61:dd:
                    57:ab:1a:2d:b6:2d:16:5f:82:49:6c:e0:45:00:99:
                    e5:89:ee:ca:7f:6c:a7:b4:16:13:0e:1f:55:d0:1e:
                    eb:97:0b:f8:47:46:23:a1:ad:91:36:9e:9e:31:b8:
                    46:71:08:0e:59:66:53:a3:73:fa:f9:d0:4d:1a:06:
                    1e:eb:f6:74:bf:4e:21:e3:4e:d8:aa:0d:7a:4c:45:
                    43:bf:9b:41:d5:4e:a1:fd:b4:6a:c5:ea:0c:ef:a7:
                    f5:6c:b9:f9:8f:cb:06:b6:09:72:08:80:e3:cc:6b:
                    35:b1:0b:af:b2:04:ff:83:cd:a1:a5:58:81:fb:1e:
                    21:40:8f:e3:f4:2a:7a:2f:9e:dd:45:85:27:7f:8b:
                    6d:8c:f3:b6:10:d5:04:6b:ed:ce:61:49:30:a0:86:
                    af:c6:72:9a:95:19:81:84:3d:c7:8e:12:c5:ad:e5:
                    99:02:9f:ff:3b:97:46:08:9f:f1:59:c8:07:1b:33:
                    0b:87:5c:7a:e2:79:bb:f1:99:8f:c7:af:8a:8c:5e:
                    c8:c0:d4:89:b3:12:a2:b5:f0:17:95:a1:12:98:2e:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A8:1E:CE:09:F4:68:BB:4A:B5:8E:DE:CF:89:B0:F9:7B:6A:84:01
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232332e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:01:4b:f1:a0:ba:1d:95:9c:d4:71:c6:c6:16:17:03:bd:
         ec:8c:2e:f7:01:0a:ec:a5:4d:24:5a:8f:84:17:68:c1:a7:3f:
         30:50:1e:d9:6a:c8:0f:60:21:4a:83:58:d3:fc:d4:dc:9d:36:
         32:2e:58:77:66:cb:77:78:0a:b3:ba:26:f3:16:17:d2:a7:a4:
         df:e9:28:86:ad:e1:37:f9:4f:a1:4c:bb:fa:ff:74:73:8e:aa:
         b8:5d:bb:96:24:27:c9:06:6c:a5:e2:50:96:95:ea:33:38:ac:
         a1:7a:d5:cb:85:a4:2e:95:a1:54:6b:d7:dd:62:a3:36:52:85:
         a3:22:f3:b6:2b:29:19:87:d5:d7:6c:87:17:83:51:69:1c:ae:
         bf:37:ed:71:27:35:51:d4:68:fb:6e:99:83:16:e8:02:d2:78:
         33:72:33:ca:38:a8:10:1d:c5:31:6e:96:41:81:9f:88:b3:57:
         06:80:32:dc:79:84:4b:69:6e:dd:08:e3:bf:27:bf:c4:f6:b4:
         9d:ca:8f:78:3b:61:26:88:74:48:1e:4d:24:9e:83:2a:c4:cc:
         ad:6b:61:bf:f8:45:7a:21:20:67:15:58:09:8b:e7:37:de:72:
         c8:94:21:29:25:94:27:36:32:36:13:0e:c0:c2:bb:59:47:fa:
         5e:99:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:26:40 2025 by rpki-client