Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135392e302f32342d3234203d3e203532333339.roa
File:                     3139302e3135312e3135392e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          VU8TdKL6XWqdUBftvqgSpWD4xEzzGZAXFaPoqmuBmpM=
Subject key identifier:   63:CF:1B:4E:FE:D1:C0:04:B0:FA:67:72:1F:C1:F5:99:D0:7F:9B:57
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       030785EB402B9F8AA6C65B3DEBC811CB68F2C2C0
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135392e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:28 +0000
ROA not before:           Mon 09 Jun 2025 20:16:28 +0000
ROA not after:            Mon 08 Jun 2026 20:21:28 +0000
asID:                     52339
IP address blocks:        190.151.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:07:85:eb:40:2b:9f:8a:a6:c6:5b:3d:eb:c8:11:cb:68:f2:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:28 2025 GMT
            Not After : Jun  8 20:21:28 2026 GMT
        Subject: CN=63CF1B4EFED1C004B0FA67721FC1F599D07F9B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:3c:29:10:24:e6:64:66:20:f3:e4:4b:20:
                    26:63:63:15:1a:8f:11:5e:9d:33:3f:00:ec:8f:2b:
                    45:6d:73:be:5e:32:29:42:71:c7:79:9d:83:38:ec:
                    03:d2:d6:1a:ef:21:4d:7c:61:55:a3:a8:c8:c5:bc:
                    dc:f0:60:70:c1:66:8b:c1:e5:88:62:5b:29:10:bf:
                    df:df:a8:98:da:88:5b:d5:36:f2:20:f9:d3:43:e3:
                    37:49:8e:27:ad:d6:14:5a:bd:c9:9d:c4:4e:bd:83:
                    8f:00:ac:5c:53:ae:36:d8:46:3d:ad:35:12:4e:bc:
                    29:6e:fc:6b:05:ec:fe:d0:bd:2a:ed:af:b7:ce:d7:
                    23:be:f3:7f:82:60:b0:17:05:25:c3:00:bf:cd:8d:
                    41:d5:d6:a3:17:e9:d9:00:bd:66:25:c6:51:85:c6:
                    fc:5c:90:c9:53:27:c1:cd:41:9f:90:55:31:a7:16:
                    5b:82:ab:be:0c:a4:d7:f0:4f:e9:98:e3:16:58:76:
                    81:d6:83:d6:0f:92:7d:40:96:32:e9:76:6b:58:74:
                    86:a1:fa:63:3e:bc:8d:6b:05:51:da:de:4d:1a:69:
                    f0:d4:c6:00:7a:42:81:fe:27:e7:65:ca:15:e6:98:
                    7f:94:57:a4:9f:1d:3a:05:cc:6e:95:14:63:ed:d2:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CF:1B:4E:FE:D1:C0:04:B0:FA:67:72:1F:C1:F5:99:D0:7F:9B:57
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135392e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:6b:2d:90:50:d8:9e:88:49:60:2e:54:56:c0:15:a1:73:
         b1:70:68:44:dc:91:07:5b:c4:35:46:80:72:d8:66:43:f5:80:
         b0:56:b7:28:16:0a:33:da:f9:12:10:b4:52:5f:40:9f:34:1a:
         fd:c5:3c:32:11:e5:06:5c:b8:f4:c8:46:c0:53:08:2b:fc:ad:
         a1:17:83:7c:e8:b7:3f:60:69:14:29:c3:d7:9e:83:66:2b:ff:
         7e:cb:85:9a:f0:d9:35:50:bd:f0:a8:b8:9d:56:01:63:05:5f:
         87:62:05:46:cd:26:48:8b:a8:ba:cf:6b:7f:10:eb:d7:61:d0:
         3f:c8:be:6c:2c:1d:62:5b:aa:fd:af:0f:a3:56:b3:cc:10:f7:
         e6:c0:e1:bc:97:e3:10:c0:0a:63:d0:b4:29:97:c0:96:64:ec:
         9a:c3:2a:f3:31:7d:16:28:7e:33:29:03:ce:6b:25:31:a7:8d:
         35:df:b9:66:67:19:73:06:35:93:dd:2a:7f:9d:09:43:fd:82:
         e5:b1:b7:6f:8e:33:20:84:9e:1a:5b:c7:94:bc:9d:69:80:ab:
         23:9a:8a:70:ca:17:4a:0a:09:25:3a:2d:98:92:9f:a3:22:aa:
         05:84:c8:d8:b6:2d:e0:75:a1:c9:89:e2:f3:7c:06:71:39:53:
         47:a7:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:30:26 2025 by rpki-client