Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133352e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3133352e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          CFaqIqh1y9YUXJ7zvHFI4hpei5l/xNxK1OZ7WMZscqo=
Subject key identifier:   3D:16:7A:89:9D:97:86:56:C9:3A:A4:33:26:B8:B3:33:E0:2F:18:BD
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       50C150B30A02B65EC63DD4A54145562DA48A7898
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133352e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 21 Jul 2026 06:15:09 +0000
ROA not before:           Tue 21 Jul 2026 06:10:09 +0000
ROA not after:            Tue 20 Jul 2027 06:15:09 +0000
asID:                     6535
IP address blocks:        190.110.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c1:50:b3:0a:02:b6:5e:c6:3d:d4:a5:41:45:56:2d:a4:8a:78:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jul 21 06:10:09 2026 GMT
            Not After : Jul 20 06:15:09 2027 GMT
        Subject: CN=3D167A899D978656C93AA43326B8B333E02F18BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:a3:ee:bf:2b:fc:27:88:1c:1f:45:25:15:
                    5f:ad:ba:d6:c9:0e:c3:5d:88:5e:3c:f6:bd:79:42:
                    42:c1:5b:6c:51:52:d6:05:c8:8e:06:0f:6f:ff:4c:
                    04:3f:37:11:b7:f3:4a:71:18:3d:e9:a3:89:07:7e:
                    eb:5b:b1:0c:33:f5:91:54:c3:6c:fd:d3:10:e2:79:
                    57:57:b5:4a:b0:89:f0:94:95:56:46:b0:03:ac:fa:
                    ca:9d:f2:bf:77:6c:8c:4d:04:7b:04:1a:b0:ea:5d:
                    04:4c:57:60:9f:27:7b:bf:87:0d:fd:47:33:7f:90:
                    62:db:6b:43:1a:e5:77:f7:14:f0:5a:07:5b:4b:7a:
                    c2:7b:4b:de:b8:b5:40:f1:8d:83:04:d2:d2:5e:45:
                    5e:1b:c2:96:58:8c:24:c3:6c:85:46:06:1d:9c:6b:
                    b2:b8:0f:e8:2a:ba:ee:c8:56:bd:51:2b:23:48:b6:
                    98:ad:c7:b9:16:96:0f:0e:58:f3:8c:c9:a0:14:3d:
                    2b:13:91:2a:2f:8b:fa:b9:f9:01:e7:dd:60:ca:07:
                    f0:26:15:24:cf:f4:45:b6:5d:ea:ea:a9:4a:18:3a:
                    37:18:bc:ed:73:51:f9:30:d3:05:46:1c:18:13:7d:
                    6c:58:88:74:43:c7:26:34:65:9e:40:db:3c:b7:22:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:7A:89:9D:97:86:56:C9:3A:A4:33:26:B8:B3:33:E0:2F:18:BD
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133352e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:26:a3:a8:80:da:91:17:da:08:86:0a:dc:8c:47:f2:52:00:
         84:15:fc:a7:18:82:6b:59:4d:f9:44:61:96:01:a0:db:e2:6d:
         67:ab:a2:51:7d:6e:8c:c2:fe:13:1d:51:fe:ab:af:97:85:89:
         d5:c2:85:d5:2a:e3:4e:25:2b:d9:70:9f:2a:0e:99:5b:c1:76:
         04:bf:ce:50:cb:9e:cd:60:fe:46:2c:41:0e:30:fc:7f:1e:07:
         ac:7c:b1:10:94:e6:12:a2:3b:ca:51:30:20:ef:ac:fd:80:5e:
         43:38:35:9a:ff:14:45:be:e9:95:66:19:10:97:24:bd:e5:d5:
         94:e5:2b:a8:1a:40:73:16:ee:78:7c:44:79:0c:9d:21:5d:b9:
         81:22:ba:a2:04:a7:01:41:a2:14:e8:d7:cd:0c:38:b8:43:fc:
         70:21:17:ad:9a:25:21:3c:67:35:fc:fa:5d:6f:e8:15:c7:87:
         15:5d:db:fe:61:cd:2a:0a:74:9d:10:8c:aa:fc:cf:3a:22:29:
         3b:5b:bb:9a:bd:72:86:71:ed:4c:f9:9b:3f:78:b2:ab:3a:c1:
         ac:78:f5:12:99:11:8f:38:e3:2b:c7:c6:02:ac:e9:ae:bc:f1:
         a6:d0:a8:80:a7:30:76:75:69:5c:19:03:12:a7:b9:3e:ed:ce:
         2c:d0:f6:f8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUMFQswoCtl7GPdSlQUVWLaSKeJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNjA3MjEwNjEwMDlaFw0yNzA3MjAwNjE1MDlaMDMxMTAvBgNV
BAMTKDNEMTY3QTg5OUQ5Nzg2NTZDOTNBQTQzMzI2QjhCMzMzRTAyRjE4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbaPuvyv8J4gcH0UlFV+tutbJ
DsNdiF489r15QkLBW2xRUtYFyI4GD2//TAQ/NxG380pxGD3po4kHfutbsQwz9ZFU
w2z90xDieVdXtUqwifCUlVZGsAOs+sqd8r93bIxNBHsEGrDqXQRMV2CfJ3u/hw39
RzN/kGLba0Ma5Xf3FPBaB1tLesJ7S964tUDxjYME0tJeRV4bwpZYjCTDbIVGBh2c
a7K4D+gquu7IVr1RKyNItpitx7kWlg8OWPOMyaAUPSsTkSovi/q5+QHn3WDKB/Am
FSTP9EW2XerqqUoYOjcYvO1zUfkw0wVGHBgTfWxYiHRDxyY0ZZ5A2zy3Ij+ZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPRZ6iZ2XhlbJOqQzJrizM+AvGL0wHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzkzMDJlMzEzMTMwMmUzMTMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5uhzAN
BgkqhkiG9w0BAQsFAAOCAQEArCajqIDakRfaCIYK3IxH8lIAhBX8pxiCa1lN+URh
lgGg2+JtZ6uiUX1ujML+Ex1R/quvl4WJ1cKF1SrjTiUr2XCfKg6ZW8F2BL/OUMue
zWD+RixBDjD8fx4HrHyxEJTmEqI7ylEwIO+s/YBeQzg1mv8URb7plWYZEJckveXV
lOUrqBpAcxbueHxEeQydIV25gSK6ogSnAUGiFOjXzQw4uEP8cCEXrZolITxnNfz6
XW/oFceHFV3b/mHNKgp0nRCMqvzPOiIpO1u7mr1yhnHtTPmbP3iyqzrBrHj1EpkR
jzjjK8fGAqzprrzxptCogKcwdnVpXBkDEqe5Pu3OLND2+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:37 2026 by rpki-client