Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          pVvFlhXxZY02Vp8oaWjvVi2rS+PC4rK4SGLPBzBifbE=
Subject key identifier:   CE:32:0B:D4:45:A3:32:02:AB:29:61:50:85:69:8D:D2:F7:D2:AC:EA
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       492B89E6517AAB0BA370C6BF1108129BDE376738
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 21 Jul 2026 06:15:10 +0000
ROA not before:           Tue 21 Jul 2026 06:10:10 +0000
ROA not after:            Tue 20 Jul 2027 06:15:10 +0000
asID:                     6535
IP address blocks:        190.110.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:89:e6:51:7a:ab:0b:a3:70:c6:bf:11:08:12:9b:de:37:67:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jul 21 06:10:10 2026 GMT
            Not After : Jul 20 06:15:10 2027 GMT
        Subject: CN=CE320BD445A33202AB29615085698DD2F7D2ACEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:7b:ce:72:72:47:00:03:05:ee:0b:61:3e:
                    88:07:87:97:fd:c8:c6:3d:22:f4:6c:df:b8:18:e8:
                    38:4f:24:b9:d1:1a:df:0f:d5:0b:f4:ec:ce:73:73:
                    65:bf:03:36:aa:a0:3e:5f:70:d9:af:32:07:7f:4b:
                    2b:7c:a7:36:e8:96:73:47:8b:37:56:8a:72:cb:9a:
                    81:7f:dc:9e:f0:01:54:ec:21:aa:ee:90:44:30:7d:
                    32:b3:c9:fa:ed:24:ce:e8:0d:b1:74:c5:1b:65:51:
                    e0:d7:92:7a:5c:35:7a:b3:8b:77:f0:77:f2:20:38:
                    f7:62:61:e0:e3:2c:ba:1a:5f:fb:ba:ad:7f:c1:37:
                    99:45:42:00:af:df:f8:d5:3f:54:2f:34:43:9e:d1:
                    31:7c:7d:f6:5c:34:8b:24:9b:97:23:ba:1f:a8:ef:
                    e4:1f:ca:08:a2:2c:64:ae:84:36:b6:cc:22:26:20:
                    ee:b1:8e:24:88:4c:a6:f7:e7:ac:4a:49:bb:71:05:
                    c0:16:60:b1:e9:76:88:69:85:a5:39:d5:af:5b:27:
                    c9:1a:69:55:67:44:63:c6:21:c2:65:c5:28:5b:59:
                    6a:80:50:6a:06:c0:34:46:78:f3:9f:41:19:13:63:
                    c3:13:2f:39:eb:5c:3b:1a:26:41:30:99:ed:7a:7c:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:32:0B:D4:45:A3:32:02:AB:29:61:50:85:69:8D:D2:F7:D2:AC:EA
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:f9:87:52:ce:a5:b8:ba:1e:1e:e7:cc:24:af:ad:ff:89:
         bb:43:9c:38:f1:e2:31:2f:50:97:d7:9e:d2:50:55:b5:27:b4:
         7a:98:0d:aa:ad:3f:a3:1e:02:d1:5a:1e:07:e1:8f:0c:28:c1:
         c7:11:58:e3:30:32:ce:60:87:c4:8b:76:3c:86:b9:32:ef:ee:
         ed:f2:cb:cf:83:fe:d0:68:57:7f:1d:dd:1f:7a:0a:8e:25:ff:
         4c:db:1e:98:da:35:11:61:84:fa:50:e0:46:8d:94:7c:9d:07:
         27:e7:53:c4:62:66:4d:7d:cd:c8:b5:f1:43:c5:4b:ec:ba:e8:
         27:5f:92:2c:36:3b:0e:21:98:7c:fe:6e:88:78:a5:53:2a:59:
         e4:e1:56:6d:37:d8:3d:9d:2e:08:e7:90:fe:16:01:fc:02:ca:
         e0:6f:65:a3:3e:d4:62:10:2a:f8:5b:c8:5f:6c:dd:7f:e7:3f:
         d6:95:e1:80:9f:17:20:d9:a7:fe:25:28:7c:03:ce:00:d6:47:
         a7:37:7f:02:1e:f9:b1:56:7b:57:6c:b6:29:f7:17:b5:4c:16:
         c4:2d:7a:54:80:d5:06:94:8a:0c:6c:79:62:c6:5f:97:fe:e2:
         10:0a:76:f0:ff:48:55:f9:c0:93:fc:a5:ab:fa:e4:24:55:da:
         54:77:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:54 2026 by rpki-client