Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/3139302e3132342e35392e302f32342d3234203d3e20323734303439.roa
File:                     3139302e3132342e35392e302f32342d3234203d3e20323734303439.roa (raw, json)
Hash identifier:          Yn+O1GMd/wEMmnUxnx8ge8///R2/r+e7N3Gk7Qgcn6U=
Subject key identifier:   C0:32:63:05:DC:82:92:DF:AC:B6:91:F9:85:C1:D4:7A:AB:EF:3B:F6
Certificate issuer:       /CN=75323213903033FA305DE97901F7E8814A3002CD
Certificate serial:       1FC575EBC6883A628F260AECA6227E0F82B62FA2
Authority key identifier: 75:32:32:13:90:30:33:FA:30:5D:E9:79:01:F7:E8:81:4A:30:02:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75323213903033FA305DE97901F7E8814A3002CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/3139302e3132342e35392e302f32342d3234203d3e20323734303439.roa
Signing time:             Wed 04 Jun 2025 16:15:00 +0000
ROA not before:           Wed 04 Jun 2025 16:10:00 +0000
ROA not after:            Wed 03 Jun 2026 16:15:00 +0000
asID:                     274049
IP address blocks:        190.124.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/75323213903033FA305DE97901F7E8814A3002CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/75323213903033FA305DE97901F7E8814A3002CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75323213903033FA305DE97901F7E8814A3002CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 04:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c5:75:eb:c6:88:3a:62:8f:26:0a:ec:a6:22:7e:0f:82:b6:2f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75323213903033FA305DE97901F7E8814A3002CD
        Validity
            Not Before: Jun  4 16:10:00 2025 GMT
            Not After : Jun  3 16:15:00 2026 GMT
        Subject: CN=C0326305DC8292DFACB691F985C1D47AABEF3BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:2f:46:e6:15:fb:ee:d2:8e:66:56:09:4b:
                    f6:27:06:3e:6a:13:dc:c4:44:13:fb:80:34:05:69:
                    e8:6d:ac:fe:da:62:d0:d8:5a:17:b6:b5:d2:ae:04:
                    ad:92:5d:d4:99:f0:4c:37:0c:81:75:e8:dc:81:15:
                    d3:1f:a4:38:6e:a0:1a:70:96:69:06:92:04:b5:4b:
                    49:cf:14:78:81:af:50:e6:f6:34:5e:97:e7:cc:be:
                    d6:9f:a5:67:3c:94:a3:1d:b0:cc:2f:76:ac:ca:24:
                    61:fc:eb:76:7f:ff:1b:57:0c:51:17:94:b5:01:e5:
                    45:7e:1c:79:4f:b7:0e:bf:36:42:98:34:ea:9d:d3:
                    56:fd:b0:3b:d9:80:36:e7:5a:a7:5c:b7:d2:05:06:
                    2c:92:6c:51:ed:41:e1:39:79:07:55:7f:05:34:a1:
                    8a:12:3e:d5:1e:1a:c6:d1:9f:ab:7d:00:bf:51:5f:
                    d0:09:8c:e5:0d:0b:fc:17:ce:6d:fc:db:2d:c5:02:
                    7f:25:12:14:d7:09:ae:12:27:08:cc:2f:03:08:5b:
                    a6:90:38:89:eb:6b:87:9e:89:69:1c:06:27:16:0f:
                    93:2e:c8:24:a8:f4:8e:0c:ca:42:1c:c3:74:73:3a:
                    99:29:1c:0e:d4:bb:dd:35:f9:d0:14:f9:c5:24:46:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:63:05:DC:82:92:DF:AC:B6:91:F9:85:C1:D4:7A:AB:EF:3B:F6
            X509v3 Authority Key Identifier:
                keyid:75:32:32:13:90:30:33:FA:30:5D:E9:79:01:F7:E8:81:4A:30:02:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/75323213903033FA305DE97901F7E8814A3002CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75323213903033FA305DE97901F7E8814A3002CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/3139302e3132342e35392e302f32342d3234203d3e20323734303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:31:7c:d6:18:94:5c:5c:d5:8d:03:47:f0:f9:9d:e7:9d:33:
         de:2a:cb:db:dd:d4:f0:0b:db:d1:d1:89:44:0c:05:82:fe:f0:
         ad:6d:e2:72:76:c0:f3:d7:c3:54:ae:5c:56:ec:d0:5d:a2:4c:
         75:5a:a5:de:91:12:a1:12:3e:1f:83:ce:bc:27:7a:1a:37:31:
         6c:13:ff:50:78:52:19:3b:97:57:86:a4:30:6b:db:bc:d4:22:
         1b:25:91:fa:e3:25:88:15:10:06:d0:64:ec:0e:d3:ba:25:25:
         2d:e6:8c:71:ed:49:9f:b4:b4:54:ab:46:14:f9:b2:1a:e0:6d:
         86:03:43:ce:f8:05:54:11:0d:0d:fb:bb:c5:80:58:78:e9:ad:
         76:61:28:93:5f:5e:e4:63:52:ae:0b:fd:99:b3:bb:cf:f5:30:
         48:1b:eb:1d:6f:bc:33:78:d2:e3:9a:46:c9:7f:68:c5:a4:71:
         49:6d:be:cf:10:8f:c1:5a:46:84:72:ac:b9:bd:04:2f:30:91:
         de:0e:3b:63:20:40:b0:04:6b:ad:aa:4a:26:f4:2b:14:0f:24:
         5b:f3:f0:e4:97:83:c1:dc:28:ae:81:ed:81:96:f2:f6:2e:44:
         1b:0f:af:c2:ed:1a:d6:fa:96:8a:1b:3d:ea:82:58:c1:ac:c3:
         7d:a8:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:56:35 2025 by rpki-client