Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135352e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135352e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          AtcH9oQHj4bcBlZ3G6oVMAxgJy/3cBgjXx3aYKBDTtQ=
Subject key identifier:   BC:F0:DF:DC:32:E3:D2:B9:E4:4F:D8:F0:F8:39:B5:89:FD:55:5D:9F
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       129EBB8845125159B1F325C647AE6D4FFE4C70A4
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135352e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:28 +0000
ROA not before:           Mon 09 Jun 2025 20:16:28 +0000
ROA not after:            Mon 08 Jun 2026 20:21:28 +0000
asID:                     52339
IP address blocks:        190.151.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9e:bb:88:45:12:51:59:b1:f3:25:c6:47:ae:6d:4f:fe:4c:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:28 2025 GMT
            Not After : Jun  8 20:21:28 2026 GMT
        Subject: CN=BCF0DFDC32E3D2B9E44FD8F0F839B589FD555D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:d9:93:38:af:ed:e2:a8:88:e8:9d:ba:0b:
                    e0:d8:04:44:58:82:70:a2:4b:8b:f6:f2:fd:ac:64:
                    7e:76:40:68:8e:05:e2:45:34:a1:fc:da:ba:da:89:
                    18:28:e1:04:d1:f9:e1:79:e9:79:da:cc:1e:60:50:
                    94:d0:89:59:38:e9:23:7b:92:19:84:bc:d1:f6:eb:
                    03:ba:5e:83:04:3b:40:34:60:59:44:b2:f5:ea:ee:
                    a5:a3:53:fb:c5:15:34:0e:8c:00:79:4a:4b:ad:e2:
                    5f:d3:6d:48:35:b0:cf:79:7a:d3:14:63:65:fd:95:
                    83:5f:3c:c0:a6:d0:44:90:54:dc:df:35:00:d0:ee:
                    03:82:b2:9b:f2:83:0a:13:16:23:6e:ab:0d:ac:56:
                    a2:ad:57:e7:47:a6:06:6b:11:88:fc:56:55:04:83:
                    47:79:26:10:8c:34:3d:0f:a1:9e:7d:2d:5d:1c:97:
                    27:5b:ed:a5:ab:f0:69:7a:22:e5:ef:62:97:52:01:
                    d5:52:33:27:16:74:7b:e0:fb:d7:f6:28:08:34:2a:
                    b7:1c:15:6f:7b:dc:63:8c:7a:66:3b:fa:f4:7e:ec:
                    34:75:96:e9:b2:48:15:a0:da:c9:9d:6b:4f:fd:47:
                    68:3b:23:a6:10:ef:82:55:5b:ac:de:59:36:c8:4f:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F0:DF:DC:32:E3:D2:B9:E4:4F:D8:F0:F8:39:B5:89:FD:55:5D:9F
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135352e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:37:ed:9b:a7:7b:9d:8b:6a:65:4a:8b:83:df:83:6b:36:fb:
         41:e2:1c:44:f2:a1:b8:02:98:8b:d1:76:c6:f0:f4:9e:f8:d8:
         13:1f:59:f2:35:ec:80:aa:06:43:b8:24:c5:0c:b1:10:46:68:
         7f:84:ac:60:bd:22:d9:d9:82:83:91:ad:92:b3:f3:94:d2:d0:
         e6:bb:72:81:7c:e7:84:59:a9:4a:cb:45:48:4b:30:21:a2:a0:
         57:d3:75:fa:0f:77:7e:64:8a:f9:67:df:97:67:00:67:cb:4d:
         36:a7:3b:83:35:f4:da:0d:15:fe:2f:e1:db:b0:00:b3:61:55:
         f7:d2:30:ae:cc:a4:3e:5a:75:a7:a0:17:a7:eb:60:37:e7:2b:
         af:02:ba:91:38:52:53:63:d0:48:a6:d9:02:8f:ae:07:c4:fa:
         64:e7:d9:96:a0:65:a2:ee:8a:07:b2:b1:59:d5:9a:9e:60:b1:
         2e:cf:4c:c6:38:51:0e:a8:b6:a5:26:9c:3a:47:05:86:e4:b2:
         15:e8:3f:99:b1:02:51:88:82:22:0e:bc:7f:e3:d6:ec:df:77:
         bd:11:e2:32:83:fd:cc:30:22:6e:1e:c4:70:db:b6:73:04:1e:
         92:a7:9c:2e:43:9c:92:a6:37:d8:8f:92:ff:52:08:06:b3:51:
         37:f4:06:34
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEp67iEUSUVmx8yXGR65tT/5McKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MjhaFw0yNjA2MDgyMDIxMjhaMDMxMTAvBgNV
BAMTKEJDRjBERkRDMzJFM0QyQjlFNDRGRDhGMEY4MzlCNTg5RkQ1NTVEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsNmTOK/t4qiI6J26C+DYBERY
gnCiS4v28v2sZH52QGiOBeJFNKH82rraiRgo4QTR+eF56XnazB5gUJTQiVk46SN7
khmEvNH26wO6XoMEO0A0YFlEsvXq7qWjU/vFFTQOjAB5Skut4l/TbUg1sM95etMU
Y2X9lYNfPMCm0ESQVNzfNQDQ7gOCspvygwoTFiNuqw2sVqKtV+dHpgZrEYj8VlUE
g0d5JhCMND0PoZ59LV0clydb7aWr8Gl6IuXvYpdSAdVSMycWdHvg+9f2KAg0Krcc
FW973GOMemY7+vR+7DR1lumySBWg2smda0/9R2g7I6YQ74JVW6zeWTbIT5cJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvPDf3DLj0rnkT9jw+Dm1if1VXZ8wHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpeb
MA0GCSqGSIb3DQEBCwUAA4IBAQC3N+2bp3udi2plSouD34NrNvtB4hxE8qG4ApiL
0XbG8PSe+NgTH1nyNeyAqgZDuCTFDLEQRmh/hKxgvSLZ2YKDka2Ss/OU0tDmu3KB
fOeEWalKy0VISzAhoqBX03X6D3d+ZIr5Z9+XZwBny002pzuDNfTaDRX+L+HbsACz
YVX30jCuzKQ+WnWnoBen62A35yuvArqROFJTY9BIptkCj64HxPpk59mWoGWi7ooH
srFZ1ZqeYLEuz0zGOFEOqLalJpw6RwWG5LIV6D+ZsQJRiIIiDrx/49bs33e9EeIy
g/3MMCJuHsRw27ZzBB6Sp5wuQ5ySpjfYj5L/UggGs1E39AY0
-----END CERTIFICATE-----
Generated at Mon Jun 23 06:34:34 2025 by rpki-client