Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135322e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135322e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          kQEqPJjBSGNIt3964uds8gbYrRH/khe48Wd1xYw/SdI=
Subject key identifier:   A1:A5:EF:BC:63:78:A1:CC:2B:B1:AE:7A:49:8D:C2:98:72:39:BC:34
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       211825EFDED693B5CD5BA8864B3E027657E32BA5
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135322e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:31 +0000
ROA not before:           Mon 09 Jun 2025 20:16:31 +0000
ROA not after:            Mon 08 Jun 2026 20:21:31 +0000
asID:                     52339
IP address blocks:        190.151.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:25:ef:de:d6:93:b5:cd:5b:a8:86:4b:3e:02:76:57:e3:2b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:31 2025 GMT
            Not After : Jun  8 20:21:31 2026 GMT
        Subject: CN=A1A5EFBC6378A1CC2BB1AE7A498DC2987239BC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:86:e8:03:76:c4:7c:29:cc:20:cb:e2:8b:
                    81:94:5c:c1:04:3e:31:e7:5b:32:bd:6f:06:05:8b:
                    b8:3c:8b:77:c1:04:90:6e:ba:96:38:33:a9:fe:ab:
                    96:ce:a9:f5:fe:45:64:2d:47:85:a1:f5:93:e6:2d:
                    2b:d4:1f:79:05:0b:a0:07:ba:ac:be:9c:c7:b5:c9:
                    5a:22:31:6a:c0:48:27:5e:5f:93:bc:32:3f:65:da:
                    ba:fc:c3:da:00:6d:82:5c:d8:80:0c:47:1f:f0:7a:
                    bf:4c:8e:93:98:b0:85:47:a9:a6:c3:79:75:b8:57:
                    e8:58:2e:4c:4c:3c:0e:38:d8:7c:3d:47:4b:53:0e:
                    f7:75:a2:d4:bc:56:73:a7:76:68:14:2a:77:a8:c1:
                    45:1c:c9:76:82:fa:97:b7:a4:a9:fa:76:2f:53:f2:
                    fb:7b:2c:2d:f8:b8:93:72:5f:6d:1c:8a:14:c6:46:
                    07:01:ef:ed:aa:68:06:a7:13:11:3e:0d:2b:f8:6b:
                    a4:ff:46:30:3e:a8:53:73:b6:1e:82:94:88:92:34:
                    78:a2:42:4e:df:09:dd:3a:b6:25:36:65:3e:64:f0:
                    ff:97:bf:a9:40:7e:d2:17:e8:ee:b7:d9:1c:e3:f3:
                    e3:49:38:30:64:ca:ca:60:2b:ae:20:55:bd:c3:6c:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:EF:BC:63:78:A1:CC:2B:B1:AE:7A:49:8D:C2:98:72:39:BC:34
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135322e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:37:0c:3f:64:c9:99:1b:fc:c4:79:4a:22:0c:59:2d:d7:e0:
         d2:e2:26:94:b9:ae:09:cf:1a:6d:ac:22:5b:f4:e8:ff:26:05:
         10:16:1b:db:6d:8f:f7:f8:f8:36:5d:96:13:00:94:d1:45:68:
         15:64:ed:d6:6a:47:77:76:4d:da:b6:6b:fa:ab:ed:c4:d8:b6:
         fe:fc:69:d9:1c:fc:65:71:28:0a:bb:b3:db:f2:23:6e:64:66:
         52:24:fd:04:17:91:c0:d1:3a:0b:1f:52:8e:a1:76:51:1b:40:
         72:93:74:8f:c5:50:35:21:d3:35:0a:4b:1c:d7:0e:c0:89:9d:
         d5:d3:d0:83:90:51:30:16:d0:2d:85:a1:5b:23:59:97:90:a6:
         9f:5e:aa:44:9d:dd:c3:ed:31:ef:10:1a:a0:8c:24:4d:8c:22:
         4a:c1:03:98:78:03:e6:c9:bf:93:79:43:77:0f:78:e4:a6:e4:
         98:fb:20:aa:1d:a2:f9:7e:4e:7d:72:9c:45:30:55:ad:e1:41:
         d7:7c:5d:b2:a7:2c:e4:d6:1f:31:fa:68:8a:93:dd:95:60:9a:
         8a:71:01:31:69:7f:04:ac:ca:83:48:70:ef:26:25:da:eb:ef:
         b4:08:bf:7d:76:bb:6f:17:3f:fd:0f:3e:aa:3a:19:76:65:ef:
         5c:c1:a9:26
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIRgl797Wk7XNW6iGSz4CdlfjK6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MzFaFw0yNjA2MDgyMDIxMzFaMDMxMTAvBgNV
BAMTKEExQTVFRkJDNjM3OEExQ0MyQkIxQUU3QTQ5OERDMjk4NzIzOUJDMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3IboA3bEfCnMIMvii4GUXMEE
PjHnWzK9bwYFi7g8i3fBBJBuupY4M6n+q5bOqfX+RWQtR4Wh9ZPmLSvUH3kFC6AH
uqy+nMe1yVoiMWrASCdeX5O8Mj9l2rr8w9oAbYJc2IAMRx/wer9MjpOYsIVHqabD
eXW4V+hYLkxMPA442Hw9R0tTDvd1otS8VnOndmgUKneowUUcyXaC+pe3pKn6di9T
8vt7LC34uJNyX20cihTGRgcB7+2qaAanExE+DSv4a6T/RjA+qFNzth6ClIiSNHii
Qk7fCd06tiU2ZT5k8P+Xv6lAftIX6O632Rzj8+NJODBkyspgK64gVb3DbFpNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoaXvvGN4ocwrsa56SY3CmHI5vDQwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpeY
MA0GCSqGSIb3DQEBCwUAA4IBAQBCNww/ZMmZG/zEeUoiDFkt1+DS4iaUua4Jzxpt
rCJb9Oj/JgUQFhvbbY/3+Pg2XZYTAJTRRWgVZO3Wakd3dk3atmv6q+3E2Lb+/GnZ
HPxlcSgKu7Pb8iNuZGZSJP0EF5HA0ToLH1KOoXZRG0Byk3SPxVA1IdM1Cksc1w7A
iZ3V09CDkFEwFtAthaFbI1mXkKafXqpEnd3D7THvEBqgjCRNjCJKwQOYeAPmyb+T
eUN3D3jkpuSY+yCqHaL5fk59cpxFMFWt4UHXfF2ypyzk1h8x+miKk92VYJqKcQEx
aX8ErMqDSHDvJiXa6++0CL99drtvFz/9Dz6qOhl2Ze9cwakm
-----END CERTIFICATE-----
Generated at Mon Jun 23 03:53:21 2025 by rpki-client