Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa
File:                     3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa (raw, json)
Hash identifier:          Yd/grQrVuz42VM7/ihlQP1peVcfgz6D/pW5jDoSgA+Y=
Subject key identifier:   31:81:DD:24:0E:2E:50:FA:EA:C5:D3:3E:3F:21:C9:1C:C1:DB:31:58
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       5B0E2C812628C7326F24AE10B727410C4FE85EB5
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa
Signing time:             Tue 22 Sep 2026 05:36:23 +0000
ROA not before:           Tue 22 Sep 2026 05:31:23 +0000
ROA not after:            Tue 21 Sep 2027 05:36:23 +0000
asID:                     6535
IP address blocks:        190.110.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0e:2c:81:26:28:c7:32:6f:24:ae:10:b7:27:41:0c:4f:e8:5e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Sep 22 05:31:23 2026 GMT
            Not After : Sep 21 05:36:23 2027 GMT
        Subject: CN=3181DD240E2E50FAEAC5D33E3F21C91CC1DB3158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:56:50:72:68:25:73:ca:c0:85:95:54:cd:
                    d8:27:02:e9:d3:e6:27:ff:b5:c0:48:71:c6:b8:cf:
                    92:32:55:3a:de:af:58:c9:20:e6:06:d5:f6:fe:64:
                    23:ea:49:2f:89:a6:8f:ec:80:33:2b:89:b9:ff:85:
                    a3:91:5d:ff:7e:e7:51:ee:f9:af:c7:0a:54:2c:6d:
                    84:fe:8c:ce:4f:1d:ac:cc:e0:f8:ef:37:70:43:86:
                    d2:b0:fe:b1:be:17:7c:52:3c:bc:24:1c:aa:52:7a:
                    46:73:ef:1c:14:a3:74:f9:99:b3:b3:3f:9e:a3:32:
                    ff:f6:ec:16:6a:02:38:18:a9:c4:d5:ac:48:e8:0a:
                    b4:4b:48:78:8f:78:d9:01:7c:1e:5e:88:b6:a8:d4:
                    80:63:17:65:3e:f5:7e:c4:59:d3:b2:83:91:03:c4:
                    d4:87:70:f1:91:7e:74:d7:1a:38:24:7e:d7:f4:17:
                    11:49:0c:1e:ea:5e:2d:e1:38:7e:03:a9:3e:c4:ce:
                    09:e5:a1:bc:6f:6e:11:47:9f:ef:e8:c5:4e:cb:f0:
                    66:82:cd:c9:87:3e:4f:fe:1d:46:9f:dc:a7:e0:cb:
                    5f:65:a0:b8:84:e3:21:36:8d:65:4d:7e:e2:0c:d0:
                    0b:4d:2c:ed:e8:5e:e0:6e:13:34:42:20:35:84:64:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:DD:24:0E:2E:50:FA:EA:C5:D3:3E:3F:21:C9:1C:C1:DB:31:58
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:bd:11:b4:a7:96:34:c7:6f:74:cd:74:79:02:8c:f9:ba:
         88:33:a5:fe:bc:69:88:ba:83:6f:45:0c:12:45:05:e2:b1:fe:
         a1:c4:39:43:af:1e:8c:49:98:84:f8:59:a4:82:58:28:5b:53:
         14:df:52:09:ce:ee:91:92:7e:ab:75:13:8d:83:26:07:41:be:
         34:54:47:9b:82:c3:2b:46:99:de:bc:fc:19:fd:55:3d:85:26:
         65:bb:ea:a4:f0:6b:e8:eb:0b:ef:93:a1:3c:fe:21:12:7f:e6:
         82:90:db:8e:66:7d:8c:c4:2c:4c:25:93:b3:fb:be:3c:83:0d:
         de:b6:54:68:00:2a:81:a8:21:7b:66:2e:05:d4:2d:88:b8:f5:
         cd:eb:5d:dc:4c:7c:f2:1f:07:69:88:db:fd:f8:a1:c8:c4:e5:
         fd:7e:21:d7:98:35:89:67:3b:99:09:4d:43:40:99:1e:41:82:
         a3:85:dc:e2:04:70:b8:a3:a2:95:d1:86:68:32:77:f7:19:d4:
         9c:ab:1f:33:24:33:02:30:60:88:1e:ec:c3:73:65:3d:3a:fd:
         99:97:6d:3d:52:77:f3:07:00:00:1e:94:8e:39:2a:a8:ca:b8:
         2d:22:0f:47:85:84:b5:be:e1:59:fa:d3:38:f9:ef:ee:55:2c:
         e4:8e:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:43:09 2026 by rpki-client