Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32342d3234203d3e203532333339.roa
File:                     3139302e31332e3131322e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          Sd+0QalPiM7P1vGxV7oOVfuoEF5sVYRo2izj3eMc2Uc=
Subject key identifier:   F6:16:29:CA:F4:53:64:6D:0A:F4:EA:B4:DF:EB:B7:61:4B:7F:BF:57
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       2EBB0929D9876D6D8B466B3DB69E1A70A2ABE87F
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:30 +0000
ROA not before:           Mon 09 Jun 2025 20:16:30 +0000
ROA not after:            Mon 08 Jun 2026 20:21:30 +0000
asID:                     52339
IP address blocks:        190.13.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:09:29:d9:87:6d:6d:8b:46:6b:3d:b6:9e:1a:70:a2:ab:e8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:30 2025 GMT
            Not After : Jun  8 20:21:30 2026 GMT
        Subject: CN=F61629CAF453646D0AF4EAB4DFEBB7614B7FBF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:4b:3d:50:f6:57:40:02:8b:ef:6a:b0:eb:
                    d8:8d:ab:4e:cc:e0:89:e8:c5:84:9a:37:fb:44:3e:
                    58:0c:02:70:ad:4d:f4:29:0e:83:97:44:8b:04:4d:
                    5b:e9:3c:64:a1:f6:9b:17:61:ba:2a:dd:a7:3e:e3:
                    ab:06:36:ab:cc:b4:a5:60:d2:c2:25:58:0b:1f:01:
                    00:31:1a:30:af:24:39:e0:3d:5f:0d:c7:9c:9e:22:
                    fd:e6:69:df:be:10:93:db:ff:ea:76:b8:e5:25:54:
                    6c:90:c0:88:ae:0f:ed:58:0a:1b:2d:d5:b8:6e:b3:
                    69:98:69:71:df:dc:dc:ae:3c:c6:e3:8f:a1:52:57:
                    95:c9:8a:f6:26:13:66:54:da:19:5c:b3:ff:88:47:
                    5a:84:f7:a6:6f:fb:42:36:c0:91:3e:33:71:78:9b:
                    9f:e2:c0:ca:13:e6:d6:6f:f5:7c:b4:0e:ac:05:68:
                    55:b0:2a:91:09:9c:fb:8e:39:b1:de:9c:b6:8e:c3:
                    8c:da:62:ef:8e:24:98:29:39:d4:ea:22:03:31:12:
                    62:29:d8:2f:87:27:8f:16:90:4f:c5:c4:fc:5c:20:
                    bd:5f:bf:65:e3:fc:03:2b:f2:d4:d7:c1:65:b2:c2:
                    42:f5:c6:eb:5b:f9:38:30:20:5f:1f:5d:c4:dd:8b:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:16:29:CA:F4:53:64:6D:0A:F4:EA:B4:DF:EB:B7:61:4B:7F:BF:57
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:31:71:e5:35:96:bc:a7:37:e9:99:96:fb:68:88:c3:5b:
         0a:90:fc:96:c7:39:32:ab:4a:6c:98:09:fc:90:08:dd:b1:15:
         ab:81:00:59:8e:3e:28:3e:1d:62:cd:04:67:2a:32:77:19:a1:
         fb:b1:11:98:55:af:52:c2:e7:fb:fa:27:f7:0e:08:ac:3b:d4:
         90:1c:19:cc:b4:d3:5b:0b:b5:21:cc:2d:4c:fe:2a:1c:34:e9:
         c5:1f:37:c0:cf:a8:bb:fc:3f:b1:62:71:8f:31:ca:fb:fb:c3:
         17:90:2f:16:ff:58:a7:07:8c:d3:16:26:50:59:6c:50:84:ee:
         1a:ec:af:ac:fe:65:2a:8a:2d:7e:ed:a9:5b:9e:1b:d4:b1:ed:
         3b:b7:e1:15:77:06:f6:03:8a:6f:e8:92:cf:a1:23:9c:a1:05:
         b4:6a:b3:dc:4c:c0:38:e4:1c:dc:3f:7e:6a:2d:ae:36:29:4e:
         fe:89:f4:5e:cd:84:67:d1:a3:12:2c:2b:ad:cb:35:bd:09:a8:
         a3:6c:64:98:b6:91:f4:c6:56:5f:b8:f6:8c:e2:39:ef:d3:ed:
         01:8e:d8:7f:01:66:67:96:73:3d:0a:91:37:d0:6f:20:f6:b1:
         1c:3b:75:68:8a:38:69:95:91:1a:b3:a9:31:91:f2:4d:c5:9b:
         ba:7c:c5:93
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULrsJKdmHbW2LRms9tp4acKKr6H8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MzBaFw0yNjA2MDgyMDIxMzBaMDMxMTAvBgNV
BAMTKEY2MTYyOUNBRjQ1MzY0NkQwQUY0RUFCNERGRUJCNzYxNEI3RkJGNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0ks9UPZXQAKL72qw69iNq07M
4InoxYSaN/tEPlgMAnCtTfQpDoOXRIsETVvpPGSh9psXYboq3ac+46sGNqvMtKVg
0sIlWAsfAQAxGjCvJDngPV8Nx5yeIv3mad++EJPb/+p2uOUlVGyQwIiuD+1YChst
1bhus2mYaXHf3NyuPMbjj6FSV5XJivYmE2ZU2hlcs/+IR1qE96Zv+0I2wJE+M3F4
m5/iwMoT5tZv9Xy0DqwFaFWwKpEJnPuOObHenLaOw4zaYu+OJJgpOdTqIgMxEmIp
2C+HJ48WkE/FxPxcIL1fv2Xj/AMr8tTXwWWywkL1xutb+TgwIF8fXcTdizdpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9hYpyvRTZG0K9Oq03+u3YUt/v1cwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMzJlMzEzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4NcDAN
BgkqhkiG9w0BAQsFAAOCAQEAX2wxceU1lrynN+mZlvtoiMNbCpD8lsc5MqtKbJgJ
/JAI3bEVq4EAWY4+KD4dYs0EZyoydxmh+7ERmFWvUsLn+/on9w4IrDvUkBwZzLTT
Wwu1IcwtTP4qHDTpxR83wM+ou/w/sWJxjzHK+/vDF5AvFv9YpweM0xYmUFlsUITu
GuyvrP5lKootfu2pW54b1LHtO7fhFXcG9gOKb+iSz6EjnKEFtGqz3EzAOOQc3D9+
ai2uNilO/on0Xs2EZ9GjEiwrrcs1vQmoo2xkmLaR9MZWX7j2jOI579PtAY7YfwFm
Z5ZzPQqRN9BvIPaxHDt1aIo4aZWRGrOpMZHyTcWbunzFkw==
-----END CERTIFICATE-----
Generated at Mon Jun 23 03:50:53 2025 by rpki-client