Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135342e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135342e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          74raNbwZ51+P8JyxfFf9qkxQDZfA2DONDqSM/P5mu4A=
Subject key identifier:   F5:8C:81:EB:04:8A:20:42:12:A7:23:97:C5:7D:D4:FA:5D:68:0C:FD
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       63850319169D5D92FBD10B17CD6A5487A022A490
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135342e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:26 +0000
ROA not before:           Mon 09 Jun 2025 20:16:26 +0000
ROA not after:            Mon 08 Jun 2026 20:21:26 +0000
asID:                     52339
IP address blocks:        190.151.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:03:19:16:9d:5d:92:fb:d1:0b:17:cd:6a:54:87:a0:22:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:26 2025 GMT
            Not After : Jun  8 20:21:26 2026 GMT
        Subject: CN=F58C81EB048A204212A72397C57DD4FA5D680CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:63:61:e8:a5:1c:8a:68:58:7c:9e:17:1b:
                    15:d0:d5:f2:1e:de:e8:98:08:7f:f3:5a:bb:5f:13:
                    a9:59:74:22:22:9e:e5:67:0f:79:6d:0e:2b:0c:8b:
                    a5:53:a8:6d:38:e1:4c:ed:99:cf:f1:f2:f1:89:04:
                    b5:04:79:87:7c:f1:1d:1f:f1:26:83:43:37:83:57:
                    ed:65:0f:57:65:36:92:94:84:9e:8c:dd:98:8e:19:
                    20:59:48:cf:60:46:a3:fa:f3:8a:27:21:b7:31:ee:
                    1a:46:de:e9:4b:ee:a3:e7:15:48:60:15:f5:b8:b1:
                    ba:be:48:0e:a4:ce:52:f1:e1:f9:96:c2:e6:aa:7c:
                    9c:9e:9f:61:c5:59:2c:93:bf:5a:48:ea:5c:8e:7b:
                    e2:eb:e6:a0:f5:3b:34:41:fd:a7:9e:20:92:98:62:
                    4d:2f:a9:cb:dd:ee:67:cf:cc:b4:af:21:cd:08:91:
                    e1:2b:42:e0:60:2c:b9:61:4b:94:79:eb:ce:95:8d:
                    9e:08:3f:b1:8a:7b:b1:28:0e:e6:76:b4:c1:55:75:
                    f4:ae:67:64:b8:07:fe:f6:de:8a:09:b0:ea:9f:fa:
                    b7:ca:3d:af:a3:d5:a0:2e:c1:1e:1c:1c:2d:86:8f:
                    3c:b1:06:b5:f7:da:35:6f:4f:65:16:4b:09:bf:76:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:81:EB:04:8A:20:42:12:A7:23:97:C5:7D:D4:FA:5D:68:0C:FD
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135342e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:10:b4:cc:90:d4:74:57:f3:5a:8a:74:d7:ab:15:f1:ee:69:
         46:ee:1e:76:52:61:e7:04:e1:03:26:4d:04:e0:7f:f2:98:ac:
         aa:e2:a8:fb:2e:2a:28:d6:36:34:52:3b:28:d0:65:b7:fb:6c:
         b4:1e:31:c8:a9:21:ff:ee:08:0f:d6:d3:f0:94:c0:dc:ea:ef:
         ba:e9:52:86:95:fa:78:4f:37:4d:c3:7e:df:26:9e:bf:d4:4d:
         c9:a9:69:26:b1:96:9b:c1:55:d0:3e:d6:6f:24:6d:79:dc:35:
         90:75:f3:25:4f:68:4c:47:15:cd:a2:3a:5c:ee:22:ed:d8:b0:
         9e:54:f4:6a:64:14:70:ad:fc:34:a1:0e:5f:a3:66:9c:1c:70:
         ab:08:b3:19:2a:a8:51:1d:de:1a:de:65:e1:bf:86:a7:c1:1b:
         12:58:4b:0a:46:85:1c:bc:ed:7a:66:a5:47:4d:d6:04:31:e7:
         d6:94:7a:e3:d5:b3:8d:b8:bd:f2:b8:05:e1:0a:a9:cb:98:67:
         6b:f6:86:11:b2:57:2b:9f:67:0d:76:5f:4a:14:9d:5a:48:6b:
         7c:84:fb:2a:48:61:cc:4f:b5:da:ce:46:a3:ab:b7:31:1c:72:
         06:a6:8e:14:9a:5c:95:69:b5:82:78:08:e0:91:24:30:36:bf:
         e8:79:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 03:50:45 2025 by rpki-client