Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3134342e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          yiqaMNwD1XjKvOt8OE3as77SyKzE5c1XnxmYxg9CJKY=
Subject key identifier:   45:A8:47:6B:D6:39:F9:B1:3C:B7:A8:82:EA:C9:4E:8F:88:1A:F1:B8
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       55BD3D1A91BCA9C7AECB6B4171889DB79FA16312
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:32 +0000
ROA not before:           Mon 09 Jun 2025 20:16:32 +0000
ROA not after:            Mon 08 Jun 2026 20:21:32 +0000
asID:                     52339
IP address blocks:        190.151.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:3d:1a:91:bc:a9:c7:ae:cb:6b:41:71:88:9d:b7:9f:a1:63:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:32 2025 GMT
            Not After : Jun  8 20:21:32 2026 GMT
        Subject: CN=45A8476BD639F9B13CB7A882EAC94E8F881AF1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:43:12:44:a6:f2:81:21:bf:ec:1c:3d:fd:
                    d7:13:98:97:c5:d9:5e:3c:f9:57:21:f2:e8:21:ba:
                    72:ea:f5:67:48:b2:c1:26:a8:37:b8:db:cb:b9:a5:
                    d8:0b:70:b4:ed:13:db:19:77:70:18:a7:fc:83:eb:
                    fa:51:da:fa:7c:11:72:ec:80:6c:3a:ed:cb:e9:bb:
                    d7:96:78:8b:53:d8:56:1b:ac:8d:48:cc:cb:dd:1c:
                    f1:c5:03:6e:e3:c8:e6:c6:dc:8d:2d:8c:7a:8f:2f:
                    4a:21:f3:99:c7:9d:81:3b:b6:76:4a:ba:4e:5d:d0:
                    5c:54:4c:77:bb:d7:0f:a2:ea:87:1f:55:ee:de:f6:
                    4b:44:d8:ac:e2:56:69:6c:ec:97:72:27:86:0b:37:
                    79:c2:c2:d5:5d:cd:c5:b9:f6:39:2c:8b:8f:5b:b9:
                    0d:5d:25:ac:19:c0:90:75:5d:00:cd:fc:ec:92:7c:
                    38:98:59:7e:e5:42:f0:cd:45:de:a7:e3:9f:8b:d6:
                    fd:8a:e5:32:15:c3:8d:09:a7:94:c8:0b:ff:29:16:
                    3f:68:f1:88:69:0c:56:db:80:2c:1c:3c:e5:51:1d:
                    58:28:92:02:e3:50:c1:8a:d7:5d:c7:4c:b9:c1:f0:
                    81:4c:d3:04:ee:f3:ff:19:d1:2d:08:75:2f:e3:47:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:47:6B:D6:39:F9:B1:3C:B7:A8:82:EA:C9:4E:8F:88:1A:F1:B8
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:78:52:13:6c:05:71:b9:3d:8e:22:fa:d3:aa:04:f1:d8:15:
         3b:70:5c:7f:0e:54:9f:30:e0:6b:4e:9f:2b:70:ad:2e:dd:50:
         4c:0f:73:05:69:d5:bb:b1:91:b6:79:01:1a:72:ea:32:28:cf:
         be:66:0d:19:ec:5a:11:8c:4f:0c:54:eb:6c:ac:43:50:e4:d0:
         27:37:c0:83:55:af:1d:68:7e:20:62:6a:13:80:0b:a1:df:f2:
         d5:7d:9c:b3:b9:82:01:21:93:8c:d1:ad:c8:8a:e2:b2:7d:49:
         7b:67:d8:72:7b:84:76:0c:2c:b7:9c:eb:72:03:38:5c:1d:47:
         02:39:d7:9e:da:aa:34:f4:fa:3d:d5:c7:49:04:e5:eb:bc:d6:
         cf:ff:0d:8f:f3:c4:29:3c:1d:ef:fe:b6:52:fb:91:67:3f:1c:
         d9:e1:f1:8c:83:3b:c6:a2:24:4b:89:c4:7e:94:9e:f2:06:ec:
         5b:a5:f0:8d:0c:cb:e3:42:2f:70:76:45:55:f6:9d:a1:80:06:
         59:07:63:06:be:42:8d:02:fe:ff:22:ce:c8:06:b4:37:11:8b:
         da:d5:c2:f1:3b:28:71:ba:88:7f:e1:9d:8f:38:2c:2d:eb:af:
         f5:6f:7c:25:eb:7c:17:78:30:44:dd:aa:e9:d5:9a:ce:64:fb:
         b8:44:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:24:49 2025 by rpki-client