Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134312e3137322e302f32342d3234203d3e203134373039.roa
File:                     3139302e3134312e3137322e302f32342d3234203d3e203134373039.roa (raw, json)
Hash identifier:          wxx85O1NwpZV6ctN3kYFGdFKx/wqRWVqx2pjD0ykm9E=
Subject key identifier:   A7:DE:B0:BD:7B:B3:74:DE:09:F9:CC:A0:9B:A7:D5:EA:EE:80:AF:8A
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       17F7C18815D2889CC2F54648EC48E5D8DAED6D4C
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134312e3137322e302f32342d3234203d3e203134373039.roa
Signing time:             Fri 25 Sep 2026 14:36:50 +0000
ROA not before:           Fri 25 Sep 2026 14:31:50 +0000
ROA not after:            Fri 24 Sep 2027 14:36:50 +0000
asID:                     14709
IP address blocks:        190.141.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f7:c1:88:15:d2:88:9c:c2:f5:46:48:ec:48:e5:d8:da:ed:6d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:50 2026 GMT
            Not After : Sep 24 14:36:50 2027 GMT
        Subject: CN=A7DEB0BD7BB374DE09F9CCA09BA7D5EAEE80AF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:da:fc:49:90:9a:97:cb:a1:27:22:35:6c:
                    89:a9:90:1c:c0:98:cf:c2:c6:d3:92:e0:66:dc:4c:
                    b4:61:f3:97:f8:a9:d4:6b:13:d5:de:75:4e:52:1a:
                    65:0c:16:05:1b:44:11:d1:2e:82:b3:e0:5f:74:b2:
                    52:51:3a:94:5c:f0:c3:7c:27:cc:cc:e8:c1:90:87:
                    d3:94:90:b4:17:17:53:67:11:23:1d:b5:9b:ae:ea:
                    97:bc:85:f5:87:e5:26:41:7c:71:25:98:7c:6a:a5:
                    89:94:aa:0e:ec:89:2c:50:d3:ea:2b:a9:f6:52:17:
                    cd:8a:ed:2e:6f:de:b2:f9:ed:e7:ad:46:7d:d7:46:
                    96:61:9d:35:aa:85:71:db:9c:2c:70:38:0d:70:03:
                    b5:3b:77:05:6f:b9:92:70:c5:a8:99:b3:eb:6c:dc:
                    e9:a0:fd:9f:cd:1b:f4:bd:bb:4e:4f:6c:2b:a7:e3:
                    51:e7:3d:f2:84:ff:e5:68:82:cf:65:6c:e4:6c:ee:
                    8e:6d:b4:ab:1f:3a:5b:74:11:7e:a5:04:dd:80:a2:
                    6c:23:f1:77:e6:c9:6a:cc:2f:f1:b2:b8:51:4a:07:
                    e7:df:a7:17:03:de:82:d6:62:e0:20:8b:7c:c0:5d:
                    e2:1e:c7:60:9f:79:e9:1a:61:ef:75:31:ef:b2:9b:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DE:B0:BD:7B:B3:74:DE:09:F9:CC:A0:9B:A7:D5:EA:EE:80:AF:8A
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134312e3137322e302f32342d3234203d3e203134373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.141.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:a8:0d:5f:d5:b5:e4:44:bf:64:49:55:cb:cc:e9:41:22:
         63:ac:ec:ef:d6:56:0a:41:f8:77:c8:de:34:7e:92:d5:22:d8:
         f3:49:51:f5:89:f8:bf:29:e8:53:51:4a:e2:50:86:f5:dc:4c:
         a1:14:bf:e2:26:b3:a9:68:be:9a:99:ff:aa:50:64:8d:63:18:
         b7:98:92:97:1c:36:73:c1:c7:b4:18:2d:d6:3a:07:95:c1:9f:
         6f:fa:13:f0:1b:be:74:71:50:77:82:22:d7:51:36:3c:98:1b:
         9b:5e:bc:b2:10:7a:f6:63:4d:73:aa:fd:a7:6b:53:f0:a3:f1:
         34:87:1f:3f:55:16:c9:f6:10:c2:2c:03:3c:24:b4:5a:12:ac:
         c2:40:37:b6:5f:df:6e:3d:b7:1b:0a:63:5e:3d:9d:06:cf:10:
         dd:2f:1a:7b:e1:e6:c7:14:52:dc:66:da:e9:5c:a4:bd:5f:3c:
         83:35:98:db:e7:26:9a:49:fb:68:01:e4:6f:76:b1:32:04:54:
         fb:e9:4b:e6:dd:dc:d5:08:cc:5e:6c:77:a8:48:7e:16:19:df:
         94:3e:e7:62:ac:bd:1f:90:f3:e9:f2:8f:22:91:51:1c:4f:3b:
         ca:b0:8c:15:ff:01:af:4f:9d:a5:62:16:7d:c9:1e:92:5e:20:
         58:c2:86:c4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUF/fBiBXSiJzC9UZI7Ejl2NrtbUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNTBaFw0yNzA5MjQxNDM2NTBaMDMxMTAvBgNV
BAMTKEE3REVCMEJEN0JCMzc0REUwOUY5Q0NBMDlCQTdENUVBRUU4MEFGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ddr8SZCal8uhJyI1bImpkBzA
mM/CxtOS4GbcTLRh85f4qdRrE9XedU5SGmUMFgUbRBHRLoKz4F90slJROpRc8MN8
J8zM6MGQh9OUkLQXF1NnESMdtZuu6pe8hfWH5SZBfHElmHxqpYmUqg7siSxQ0+or
qfZSF82K7S5v3rL57eetRn3XRpZhnTWqhXHbnCxwOA1wA7U7dwVvuZJwxaiZs+ts
3Omg/Z/NG/S9u05PbCun41HnPfKE/+Vogs9lbORs7o5ttKsfOlt0EX6lBN2Aomwj
8XfmyWrML/GyuFFKB+ffpxcD3oLWYuAgi3zAXeIex2CfeekaYe91Me+ymxebAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUp96wvXuzdN4J+cygm6fV6u6Ar4owHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzkzMDJlMzEzNDMxMmUzMTM3MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvo2s
MA0GCSqGSIb3DQEBCwUAA4IBAQAx66gNX9W15ES/ZElVy8zpQSJjrOzv1lYKQfh3
yN40fpLVItjzSVH1ifi/KehTUUriUIb13EyhFL/iJrOpaL6amf+qUGSNYxi3mJKX
HDZzwce0GC3WOgeVwZ9v+hPwG750cVB3giLXUTY8mBubXryyEHr2Y01zqv2na1Pw
o/E0hx8/VRbJ9hDCLAM8JLRaEqzCQDe2X99uPbcbCmNePZ0GzxDdLxp74ebHFFLc
ZtrpXKS9XzyDNZjb5yaaSftoAeRvdrEyBFT76Uvm3dzVCMxebHeoSH4WGd+UPudi
rL0fkPPp8o8ikVEcTzvKsIwV/wGvT52lYhZ9yR6SXiBYwobE
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:25:58 2026 by rpki-client