Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          0xh16u4hVtWmDaKB4iEjhO+5aoF606jkbuV3HrmIw0I=
Subject key identifier:   07:EB:D2:5C:F1:3A:02:02:17:DD:35:B6:12:A5:A1:76:ED:AD:B4:6F
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       04B7525FC29FD926E5550E6D407A06D79D441819
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:35 +0000
ROA not before:           Mon 09 Jun 2025 20:16:35 +0000
ROA not after:            Mon 08 Jun 2026 20:21:35 +0000
asID:                     52339
IP address blocks:        190.151.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:52:5f:c2:9f:d9:26:e5:55:0e:6d:40:7a:06:d7:9d:44:18:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:35 2025 GMT
            Not After : Jun  8 20:21:35 2026 GMT
        Subject: CN=07EBD25CF13A020217DD35B612A5A176EDADB46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:7f:3b:52:c1:a7:fa:d4:41:5d:93:7b:74:
                    3e:37:8d:65:dd:63:25:e8:90:fa:09:04:40:d1:db:
                    0d:a6:c4:91:ec:7a:90:0e:9e:a6:98:6c:44:0a:7b:
                    05:28:b1:e9:50:18:6e:bc:3a:e5:33:bc:0d:cd:a7:
                    0c:64:c7:0c:fe:86:84:cf:1c:dd:36:57:d2:20:bb:
                    e6:81:b1:c7:7e:c0:67:24:af:5e:2c:a9:a2:d7:f9:
                    45:30:33:8c:31:ea:fd:0b:0a:21:05:42:78:f0:23:
                    e2:0e:db:21:03:4b:43:41:d2:8e:43:80:8e:e3:57:
                    6e:85:11:da:a9:8e:8c:bf:45:65:1a:35:65:5f:48:
                    14:0b:3e:dd:2f:bb:c5:68:b9:95:07:25:5f:53:da:
                    88:e7:09:c0:af:d6:96:34:e7:1a:e7:9d:65:5a:cf:
                    e5:0e:c2:9a:29:38:bb:fc:ee:7e:ab:6f:3a:0b:d1:
                    c9:aa:0d:ad:ef:26:bb:4e:49:51:1b:c6:8f:8c:ca:
                    c5:71:23:d5:78:8e:5d:95:88:27:53:33:ce:c1:51:
                    5c:04:de:19:a5:b4:a9:ca:5c:ec:cf:5d:b1:93:4d:
                    13:d9:7b:f9:12:02:3e:cf:f2:2e:2d:d8:ff:50:0b:
                    44:e1:5b:0b:a3:17:1f:2e:85:65:ef:0c:51:12:21:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EB:D2:5C:F1:3A:02:02:17:DD:35:B6:12:A5:A1:76:ED:AD:B4:6F
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:2a:5a:3d:54:e3:5b:d6:fb:7e:16:54:85:7b:2a:e3:69:df:
         ad:9c:8f:76:9c:53:59:81:1d:50:85:1b:68:80:58:32:ee:2f:
         ff:b2:ad:ef:9a:09:82:42:60:e9:c1:a7:94:69:65:48:11:32:
         f4:68:22:65:05:9d:9f:55:52:9c:75:63:7e:cb:df:2e:b8:a3:
         77:56:4b:7e:8c:bf:54:fa:b1:d0:e9:b9:a9:1d:e5:4c:c7:7d:
         39:89:35:07:30:74:b7:26:bf:46:de:df:15:7e:c5:c9:bc:b4:
         97:00:0c:97:6a:10:ec:4f:4e:a1:7b:2e:8a:16:ae:3f:b6:82:
         c9:03:fe:74:2e:d4:53:2c:6b:16:e9:fd:0c:ac:ee:12:ca:e4:
         0e:6e:e7:6d:f8:40:e2:98:6c:1b:e7:e4:d2:15:0d:42:04:95:
         13:85:39:d2:47:00:b3:e0:dd:1b:82:82:95:17:e0:5c:c0:27:
         d6:fe:1d:06:d0:0a:57:f4:dc:85:1d:34:62:4c:1a:bb:90:f1:
         5b:4a:81:b0:d7:34:75:fc:1d:fb:98:2b:14:a1:0c:ff:84:fe:
         92:93:dd:d5:f3:ea:8d:d7:e5:b4:64:77:10:49:1d:38:79:ec:
         05:e1:d3:e3:bb:6f:e8:7f:ce:cf:a9:1b:26:a0:97:23:ad:27:
         c7:40:fe:ae
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBLdSX8Kf2SblVQ5tQHoG151EGBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MzVaFw0yNjA2MDgyMDIxMzVaMDMxMTAvBgNV
BAMTKDA3RUJEMjVDRjEzQTAyMDIxN0REMzVCNjEyQTVBMTc2RURBREI0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzR387UsGn+tRBXZN7dD43jWXd
YyXokPoJBEDR2w2mxJHsepAOnqaYbEQKewUoselQGG68OuUzvA3Npwxkxwz+hoTP
HN02V9Igu+aBscd+wGckr14sqaLX+UUwM4wx6v0LCiEFQnjwI+IO2yEDS0NB0o5D
gI7jV26FEdqpjoy/RWUaNWVfSBQLPt0vu8VouZUHJV9T2ojnCcCv1pY05xrnnWVa
z+UOwpopOLv87n6rbzoL0cmqDa3vJrtOSVEbxo+MysVxI9V4jl2ViCdTM87BUVwE
3hmltKnKXOzPXbGTTRPZe/kSAj7P8i4t2P9QC0ThWwujFx8uhWXvDFESIRtrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUB+vSXPE6AgIX3TW2EqWhdu2ttG8wHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvped
MA0GCSqGSIb3DQEBCwUAA4IBAQC9Klo9VONb1vt+FlSFeyrjad+tnI92nFNZgR1Q
hRtogFgy7i//sq3vmgmCQmDpwaeUaWVIETL0aCJlBZ2fVVKcdWN+y98uuKN3Vkt+
jL9U+rHQ6bmpHeVMx305iTUHMHS3Jr9G3t8VfsXJvLSXAAyXahDsT06hey6KFq4/
toLJA/50LtRTLGsW6f0MrO4SyuQObudt+EDimGwb5+TSFQ1CBJUThTnSRwCz4N0b
goKVF+BcwCfW/h0G0ApX9NyFHTRiTBq7kPFbSoGw1zR1/B37mCsUoQz/hP6Sk93V
8+qN1+W0ZHcQSR04eewF4dPju2/of87PqRsmoJcjrSfHQP6u
-----END CERTIFICATE-----
Generated at Mon Jun 23 03:51:47 2025 by rpki-client