Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          qECG9/qHX8XHcsNxkjE8cB2GhJRaVbThZqOQhnkdty0=
Subject key identifier:   81:A2:18:EA:CA:B2:1C:E3:86:E5:E9:57:2D:07:BE:A8:A5:1C:6B:38
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       06BAB22F61A59C11962E9FE1C8ACD6314ECF9532
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:29 +0000
ROA not before:           Mon 09 Jun 2025 20:16:29 +0000
ROA not after:            Mon 08 Jun 2026 20:21:29 +0000
asID:                     52339
IP address blocks:        190.151.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ba:b2:2f:61:a5:9c:11:96:2e:9f:e1:c8:ac:d6:31:4e:cf:95:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:29 2025 GMT
            Not After : Jun  8 20:21:29 2026 GMT
        Subject: CN=81A218EACAB21CE386E5E9572D07BEA8A51C6B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:05:ca:52:70:86:3f:aa:76:bc:ca:d3:39:
                    99:e3:70:db:70:94:39:3d:aa:b9:8f:4e:bb:49:8b:
                    2b:03:d0:15:5f:02:99:f2:65:a5:ef:3a:5b:83:0a:
                    84:31:77:66:3e:82:1f:b9:b4:09:2d:8a:1d:cc:88:
                    02:85:52:27:28:d1:f3:68:23:08:ff:f1:ea:25:25:
                    d0:56:6e:33:de:76:d1:36:04:91:09:29:1c:14:18:
                    68:8d:50:00:43:68:bf:6c:e1:86:87:38:be:61:0c:
                    a8:95:9a:df:24:c0:42:0a:29:77:ce:56:96:5b:83:
                    d1:b4:62:40:49:a8:0a:8b:b2:a7:4a:29:64:f9:9f:
                    91:69:6e:80:be:b6:5a:06:60:a6:e4:c3:d9:6e:a5:
                    a4:30:d4:73:54:56:af:d2:84:dd:b4:09:b8:85:ec:
                    b3:fc:64:14:e9:ef:57:23:ec:c4:12:14:2a:52:f2:
                    c5:f1:83:0a:90:82:88:c5:7a:80:33:1c:d3:2e:38:
                    9a:37:25:38:65:bc:72:9f:d5:87:b1:8b:19:6d:be:
                    be:c9:77:1b:91:6a:d6:f6:fb:55:93:23:b5:ef:2a:
                    1f:14:da:bf:54:62:90:70:bf:c9:a2:49:12:63:8a:
                    47:54:a0:9b:91:cf:87:f4:33:87:43:f2:68:55:f9:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:18:EA:CA:B2:1C:E3:86:E5:E9:57:2D:07:BE:A8:A5:1C:6B:38
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:44:9e:7e:47:28:56:e7:27:64:be:e0:ac:ef:40:e0:30:
         5e:48:97:bd:7c:9b:4e:43:d9:cc:f6:36:5e:86:b9:4a:31:13:
         f3:1f:f9:5e:9d:98:d2:c5:fd:b9:f4:d1:3e:0f:44:26:04:82:
         cc:9a:a1:68:f8:85:71:f2:9b:f0:cb:63:03:b6:8d:1f:14:af:
         7d:00:33:cf:68:b2:90:f6:bd:55:74:12:df:06:00:e5:fa:38:
         f8:f0:ad:9c:da:17:da:01:76:8c:40:9d:7b:e2:6b:3e:5c:03:
         d0:4e:bc:27:9e:b5:95:3c:b3:b8:99:8d:70:b2:10:ff:bf:79:
         ef:19:2f:b9:b6:53:4b:af:d0:e7:67:09:36:c0:58:97:60:6d:
         71:f8:f0:90:1b:65:3e:a1:d4:80:96:d7:5a:5f:6f:e3:11:5b:
         a1:07:fd:f7:86:01:b5:46:98:97:49:e9:e1:a5:4e:b9:a4:ad:
         47:00:c2:45:8c:f9:d5:60:5e:4f:27:1e:e6:d5:47:ff:29:ae:
         06:c2:de:d5:56:96:b3:17:a9:1d:a2:b0:fb:cf:2f:a9:84:3e:
         cd:71:8a:11:7c:f9:d7:f7:6f:68:74:31:f9:b9:37:2e:30:08:
         a3:73:99:fc:04:89:46:39:4a:be:dd:92:6d:8a:de:bc:3f:ca:
         59:d5:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:34:35 2025 by rpki-client