Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134302e3235302e302f32342d3234203d3e203134373039.roa
File:                     3139302e3134302e3235302e302f32342d3234203d3e203134373039.roa (raw, json)
Hash identifier:          fk6KZHYgYXKp7eVL1N2ikKG1vTBiV6r6PAIJHYaY8pA=
Subject key identifier:   D5:56:AA:B4:24:05:6D:3E:0C:35:9E:1C:12:60:62:B6:61:C2:FB:D6
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7A9CB2A3BD214775EBE9B6D71D73CD0F58D8859C
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134302e3235302e302f32342d3234203d3e203134373039.roa
Signing time:             Fri 25 Sep 2026 14:36:58 +0000
ROA not before:           Fri 25 Sep 2026 14:31:58 +0000
ROA not after:            Fri 24 Sep 2027 14:36:58 +0000
asID:                     14709
IP address blocks:        190.140.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9c:b2:a3:bd:21:47:75:eb:e9:b6:d7:1d:73:cd:0f:58:d8:85:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:58 2026 GMT
            Not After : Sep 24 14:36:58 2027 GMT
        Subject: CN=D556AAB424056D3E0C359E1C126062B661C2FBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:95:a5:82:bb:af:e5:03:9d:76:a0:72:46:
                    90:ea:10:e9:41:71:c1:b3:76:76:10:e2:08:87:ea:
                    c5:bc:e5:c1:94:02:da:79:05:d6:77:fe:1e:03:71:
                    57:46:4d:d6:87:16:6d:bd:83:7c:9a:7f:55:ed:c8:
                    3a:31:24:c4:03:86:ed:2a:79:75:d3:22:69:11:7a:
                    b9:77:7f:27:41:1f:7a:e6:53:57:6c:8e:a9:9d:b3:
                    01:78:5c:c5:3b:bf:4d:53:78:ad:39:d5:16:8a:5b:
                    ca:3e:6d:73:c1:40:9d:b5:7e:33:44:0e:fe:b1:aa:
                    07:08:7e:8c:af:e0:01:c0:00:ca:e3:c9:c2:be:eb:
                    03:c5:f5:37:70:72:dc:6d:aa:9e:cb:b2:fb:ee:7c:
                    0e:32:cc:b8:3e:08:96:89:35:72:9d:77:5f:23:b3:
                    d5:7c:48:fd:74:a5:1a:63:dc:3c:f5:f6:0f:9d:65:
                    b0:4b:38:06:74:eb:4d:68:ad:5b:b0:61:b7:38:a6:
                    00:4e:ff:ed:e2:6c:32:32:aa:e0:c7:ef:50:eb:ce:
                    20:99:48:aa:49:65:75:44:f7:22:60:6d:73:fc:1e:
                    92:5c:19:84:b7:6a:62:0b:74:92:af:b0:cc:69:0d:
                    1b:c2:c5:0b:4d:4f:69:b6:63:14:1d:37:48:10:b4:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:AA:B4:24:05:6D:3E:0C:35:9E:1C:12:60:62:B6:61:C2:FB:D6
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134302e3235302e302f32342d3234203d3e203134373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.140.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:23:c6:85:53:73:89:1d:21:50:20:d4:18:57:cd:5c:db:
         65:78:bc:3a:1f:c2:6c:ba:5d:c3:27:25:ef:e2:af:7e:4a:68:
         e9:9f:b1:31:4d:3c:0a:ff:88:a8:b1:bd:64:7f:b9:b6:65:4f:
         65:7e:a2:e2:02:38:df:b6:0c:16:c0:dd:cd:67:f4:3d:47:e7:
         5e:25:f9:eb:2a:05:aa:d8:2a:65:76:42:7c:1a:a5:2f:93:bd:
         a1:52:bf:99:9c:78:65:65:cb:1e:4b:0b:76:c5:21:1a:7f:6f:
         82:3b:d7:46:fb:cb:f4:0d:10:92:d6:40:66:6d:05:62:bc:27:
         59:59:bc:c0:07:e6:8a:a9:a2:88:37:2a:bc:3a:1a:5c:bc:0a:
         c7:35:9b:fd:0d:7f:fc:e4:a3:2d:59:87:57:73:f1:91:c6:af:
         91:2a:d6:f4:d7:f5:43:12:8e:23:60:a0:39:7f:e6:67:71:16:
         a4:a3:43:09:ef:83:29:6a:b8:af:ca:a2:97:48:ac:7c:68:78:
         5e:73:e7:01:c1:21:df:54:7d:6e:88:e1:aa:c1:d5:ba:30:02:
         77:ab:93:90:45:f8:30:96:4c:91:b0:7e:2b:b0:f7:ad:88:7d:
         43:43:a5:e3:aa:e5:ae:fa:be:da:f6:d3:ca:38:d9:d5:92:8b:
         8e:92:ce:bf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUepyyo70hR3Xr6bbXHXPND1jYhZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNThaFw0yNzA5MjQxNDM2NThaMDMxMTAvBgNV
BAMTKEQ1NTZBQUI0MjQwNTZEM0UwQzM1OUUxQzEyNjA2MkI2NjFDMkZCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjZWlgruv5QOddqByRpDqEOlB
ccGzdnYQ4giH6sW85cGUAtp5BdZ3/h4DcVdGTdaHFm29g3yaf1XtyDoxJMQDhu0q
eXXTImkRerl3fydBH3rmU1dsjqmdswF4XMU7v01TeK051RaKW8o+bXPBQJ21fjNE
Dv6xqgcIfoyv4AHAAMrjycK+6wPF9Tdwctxtqp7LsvvufA4yzLg+CJaJNXKdd18j
s9V8SP10pRpj3Dz19g+dZbBLOAZ0601orVuwYbc4pgBO/+3ibDIyquDH71DrziCZ
SKpJZXVE9yJgbXP8HpJcGYS3amILdJKvsMxpDRvCxQtNT2m2YxQdN0gQtFU7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1VaqtCQFbT4MNZ4cEmBitmHC+9YwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzkzMDJlMzEzNDMwMmUzMjM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvoz6
MA0GCSqGSIb3DQEBCwUAA4IBAQAqkSPGhVNziR0hUCDUGFfNXNtleLw6H8Jsul3D
JyXv4q9+Smjpn7ExTTwK/4iosb1kf7m2ZU9lfqLiAjjftgwWwN3NZ/Q9R+deJfnr
KgWq2CpldkJ8GqUvk72hUr+ZnHhlZcseSwt2xSEaf2+CO9dG+8v0DRCS1kBmbQVi
vCdZWbzAB+aKqaKINyq8OhpcvArHNZv9DX/85KMtWYdXc/GRxq+RKtb01/VDEo4j
YKA5f+ZncRako0MJ74MparivyqKXSKx8aHhec+cBwSHfVH1uiOGqwdW6MAJ3q5OQ
RfgwlkyRsH4rsPetiH1DQ6XjquWu+r7a9tPKONnVkouOks6/
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:03:20 2026 by rpki-client