Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134392e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3134392e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          4jsaeOpjkc37/JOCKbfaJfOklXwbaoq3Vxk3ZC0ZPCQ=
Subject key identifier:   0D:CF:43:A6:79:7C:75:1B:87:F6:8D:DE:F8:E9:06:58:3E:CC:5E:70
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       0FFD6B4F26B4E3806125FD2684886937C4334092
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134392e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:32 +0000
ROA not before:           Mon 09 Jun 2025 20:16:32 +0000
ROA not after:            Mon 08 Jun 2026 20:21:32 +0000
asID:                     52339
IP address blocks:        190.151.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:6b:4f:26:b4:e3:80:61:25:fd:26:84:88:69:37:c4:33:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:32 2025 GMT
            Not After : Jun  8 20:21:32 2026 GMT
        Subject: CN=0DCF43A6797C751B87F68DDEF8E906583ECC5E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:66:4d:f9:c4:33:9f:94:e1:38:d8:71:ff:
                    b0:4c:e5:13:8d:03:e0:8e:a4:4d:7f:7d:02:85:c4:
                    39:47:87:73:06:61:d8:97:f4:99:0a:3e:a6:01:7f:
                    ce:1b:fb:36:f5:94:ba:c3:df:72:99:e3:4e:76:2d:
                    14:18:3b:75:cd:74:aa:e1:97:9e:dc:0e:76:09:ab:
                    69:da:78:3c:0a:fb:a4:76:ba:ae:67:2d:53:a6:6c:
                    f1:31:c2:82:7a:d2:d4:bf:66:af:67:83:48:27:68:
                    d6:a2:26:89:9e:e9:f1:07:89:07:79:e4:5a:85:1f:
                    2d:3c:17:6a:7e:d5:e5:ea:73:08:05:42:03:57:9a:
                    3c:0a:4a:2e:49:47:6f:9b:5f:d0:f0:11:29:b4:36:
                    c5:2a:f5:50:91:0a:a8:7c:a8:7f:de:01:0c:54:e0:
                    04:ae:ae:a3:46:e7:1d:2a:d6:1f:32:99:bf:0f:12:
                    7f:29:fa:48:26:5c:e0:0f:5b:97:1a:91:ab:f0:52:
                    49:b9:8a:88:e9:c0:6d:d1:4d:b9:e2:4f:1d:09:e3:
                    90:50:ce:79:68:68:ea:62:23:1e:b8:1b:1d:fe:31:
                    42:40:34:d8:ff:fb:c4:e8:e8:f9:57:dc:82:01:08:
                    08:f1:d5:ae:61:69:47:cf:44:ac:21:c4:1d:fb:18:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CF:43:A6:79:7C:75:1B:87:F6:8D:DE:F8:E9:06:58:3E:CC:5E:70
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134392e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:64:de:96:f8:e1:92:35:03:ef:28:34:ca:6f:18:46:ea:
         1b:45:d8:71:f1:57:b1:00:5a:52:50:66:55:99:fa:72:4e:91:
         36:c5:21:e1:cd:1b:a2:54:45:e0:dd:9a:00:5b:4b:27:8b:6e:
         a3:88:dd:ae:bb:1b:fc:65:75:47:95:88:58:72:50:e9:0c:9d:
         7e:ff:d5:2f:77:d1:a5:fa:03:a3:bd:cd:ea:89:eb:f3:df:f4:
         a4:f0:71:07:a9:5e:37:67:b5:38:ad:e5:b7:33:d1:2c:f8:13:
         db:07:32:94:53:40:e0:3c:4b:65:29:48:b8:60:7b:9b:ac:a2:
         bd:66:32:dd:16:af:14:b1:8a:20:09:f0:80:5f:98:15:88:31:
         05:c5:0d:60:1a:7d:51:19:e9:f2:5a:e6:9b:ff:99:3e:57:fd:
         38:83:4e:92:25:56:5c:8a:9a:ea:3c:29:fd:8e:1a:2c:4f:47:
         cb:90:0b:c8:80:6e:fb:e2:6a:42:61:a5:ab:de:4f:07:e4:40:
         3b:e6:ee:3f:c7:cd:5a:f7:97:c2:8a:6d:c7:f6:d6:a4:3d:52:
         df:d6:b8:96:dc:d9:91:d5:ee:07:12:03:48:32:3d:62:4e:38:
         7f:7b:bd:a1:89:03:9d:72:9e:6c:ca:81:54:37:a4:95:e1:a6:
         1e:4c:09:70
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD/1rTya044BhJf0mhIhpN8QzQJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MzJaFw0yNjA2MDgyMDIxMzJaMDMxMTAvBgNV
BAMTKDBEQ0Y0M0E2Nzk3Qzc1MUI4N0Y2OERERUY4RTkwNjU4M0VDQzVFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeWZN+cQzn5ThONhx/7BM5RON
A+COpE1/fQKFxDlHh3MGYdiX9JkKPqYBf84b+zb1lLrD33KZ4052LRQYO3XNdKrh
l57cDnYJq2naeDwK+6R2uq5nLVOmbPExwoJ60tS/Zq9ng0gnaNaiJome6fEHiQd5
5FqFHy08F2p+1eXqcwgFQgNXmjwKSi5JR2+bX9DwESm0NsUq9VCRCqh8qH/eAQxU
4ASurqNG5x0q1h8ymb8PEn8p+kgmXOAPW5cakavwUkm5iojpwG3RTbniTx0J45BQ
znloaOpiIx64Gx3+MUJANNj/+8To6PlX3IIBCAjx1a5haUfPRKwhxB37GGHlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDc9Dpnl8dRuH9o3e+OkGWD7MXnAwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpeV
MA0GCSqGSIb3DQEBCwUAA4IBAQC06GTelvjhkjUD7yg0ym8YRuobRdhx8VexAFpS
UGZVmfpyTpE2xSHhzRuiVEXg3ZoAW0sni26jiN2uuxv8ZXVHlYhYclDpDJ1+/9Uv
d9Gl+gOjvc3qievz3/Sk8HEHqV43Z7U4reW3M9Es+BPbBzKUU0DgPEtlKUi4YHub
rKK9ZjLdFq8UsYogCfCAX5gViDEFxQ1gGn1RGenyWuab/5k+V/04g06SJVZciprq
PCn9jhosT0fLkAvIgG774mpCYaWr3k8H5EA75u4/x81a95fCim3H9takPVLf1riW
3NmR1e4HEgNIMj1iTjh/e72hiQOdcp5syoFUN6SV4aYeTAlw
-----END CERTIFICATE-----
Generated at Mon Jun 23 11:58:44 2025 by rpki-client