Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          aOn8cM+b+nMTUAIlYLsnLbUKsXvKVoPQBtnlRQBLi+o=
Subject key identifier:   48:53:75:E8:DC:0D:64:D2:00:F1:8B:13:3C:80:79:30:AB:17:63:DB
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       185D7A89C1DC0BEF5472147AB8F2D1C5506E1AD5
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 19 Aug 2025 05:25:02 +0000
ROA not before:           Tue 19 Aug 2025 05:20:02 +0000
ROA not after:            Tue 18 Aug 2026 05:25:02 +0000
asID:                     6535
IP address blocks:        190.110.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:7a:89:c1:dc:0b:ef:54:72:14:7a:b8:f2:d1:c5:50:6e:1a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 19 05:20:02 2025 GMT
            Not After : Aug 18 05:25:02 2026 GMT
        Subject: CN=485375E8DC0D64D200F18B133C807930AB1763DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:3b:18:0d:20:0c:a6:cd:bb:93:52:9f:a1:
                    5a:2f:09:eb:7b:0f:c7:a6:63:5a:c4:ed:41:ae:c0:
                    e1:e7:36:bc:7c:ac:a8:05:f5:9c:67:59:ed:f6:a9:
                    84:e8:ef:3e:a3:7c:57:fb:38:a5:7f:b4:e8:89:0f:
                    32:95:45:31:32:de:57:bf:38:e1:8d:9e:80:e6:6b:
                    a4:d5:b5:ef:01:0d:55:ed:05:43:85:34:1e:cf:39:
                    c1:89:ae:4c:32:30:ed:ff:e9:41:59:da:a3:15:73:
                    18:a2:63:57:56:8d:46:f2:a8:ae:7a:19:fd:a8:b4:
                    1c:ae:7a:ff:8f:ff:0d:b8:f9:bd:22:e0:1c:3f:93:
                    a2:75:d2:76:ba:c6:6a:e5:11:1d:30:34:e8:ae:dc:
                    04:9b:56:30:23:de:48:b0:a0:4d:6d:d3:fe:2e:6f:
                    ac:00:cc:3c:8b:0f:df:52:d2:2b:9e:d6:65:10:36:
                    8b:95:80:e3:df:6a:d8:c0:cc:30:84:51:df:a3:c2:
                    7b:59:2d:0d:8b:1f:6e:3a:cc:5a:98:89:b8:3b:33:
                    ce:17:bf:7d:4d:69:7e:e0:f6:a0:a5:6a:23:00:75:
                    8d:21:2f:f5:6a:58:f7:03:11:d7:72:c5:09:e5:c9:
                    32:a2:e9:b1:06:b6:24:74:f8:e6:34:01:79:8c:8f:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:53:75:E8:DC:0D:64:D2:00:F1:8B:13:3C:80:79:30:AB:17:63:DB
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3133382e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:74:69:c6:d5:a2:cd:b2:a3:29:29:c4:dc:ef:e4:94:6a:1a:
         69:f1:48:aa:3d:31:0c:1f:cf:a3:68:05:19:7f:ba:aa:f6:51:
         02:77:24:8b:2d:c6:bd:bc:86:80:af:e2:25:ea:73:50:6f:d6:
         4b:b4:eb:23:e3:7d:43:24:a4:55:18:ea:58:e9:51:76:05:11:
         37:c8:d3:07:cf:bc:b3:13:7a:01:04:cb:8a:e7:f9:fb:59:ce:
         29:e9:eb:65:0f:fa:de:9c:6a:19:24:c4:92:33:6c:ff:d0:4f:
         0f:20:ad:3e:f1:07:44:e9:e4:a9:4b:e6:f7:bc:f9:cc:59:aa:
         d9:7e:7a:74:ba:17:bf:c1:6c:c0:a2:b3:51:89:26:7d:65:97:
         89:c2:a1:1d:07:48:19:35:eb:e9:1c:55:f9:62:fe:08:75:03:
         fe:ef:56:cd:78:c3:2c:99:56:ca:19:64:ec:d7:2d:1c:fb:fd:
         ca:ec:9e:c7:34:85:67:0a:e8:68:20:02:e5:be:5e:b7:bd:db:
         96:e6:4a:05:53:bf:7e:76:04:2f:c9:1e:3a:61:7f:db:15:77:
         9c:89:fb:86:68:11:ed:d8:a9:9b:82:fc:d6:ed:16:bb:fa:a6:
         3c:d8:24:73:e5:72:cd:dc:5e:19:2e:4a:b0:0b:9f:d3:17:f6:
         77:01:cb:50
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGF16icHcC+9UchR6uPLRxVBuGtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNTA4MTkwNTIwMDJaFw0yNjA4MTgwNTI1MDJaMDMxMTAvBgNV
BAMTKDQ4NTM3NUU4REMwRDY0RDIwMEYxOEIxMzNDODA3OTMwQUIxNzYzREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCzsYDSAMps27k1KfoVovCet7
D8emY1rE7UGuwOHnNrx8rKgF9ZxnWe32qYTo7z6jfFf7OKV/tOiJDzKVRTEy3le/
OOGNnoDma6TVte8BDVXtBUOFNB7POcGJrkwyMO3/6UFZ2qMVcxiiY1dWjUbyqK56
Gf2otByuev+P/w24+b0i4Bw/k6J10na6xmrlER0wNOiu3ASbVjAj3kiwoE1t0/4u
b6wAzDyLD99S0iue1mUQNouVgOPfatjAzDCEUd+jwntZLQ2LH246zFqYibg7M84X
v31NaX7g9qClaiMAdY0hL/VqWPcDEddyxQnlyTKi6bEGtiR0+OY0AXmMj6XdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSFN16NwNZNIA8YsTPIB5MKsXY9swHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzkzMDJlMzEzMTMwMmUzMTMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5uijAN
BgkqhkiG9w0BAQsFAAOCAQEAU3RpxtWizbKjKSnE3O/klGoaafFIqj0xDB/Po2gF
GX+6qvZRAnckiy3GvbyGgK/iJepzUG/WS7TrI+N9QySkVRjqWOlRdgURN8jTB8+8
sxN6AQTLiuf5+1nOKenrZQ/63pxqGSTEkjNs/9BPDyCtPvEHROnkqUvm97z5zFmq
2X56dLoXv8FswKKzUYkmfWWXicKhHQdIGTXr6RxV+WL+CHUD/u9WzXjDLJlWyhlk
7NctHPv9yuyexzSFZwroaCAC5b5et73bluZKBVO/fnYEL8keOmF/2xV3nIn7hmgR
7dipm4L81u0Wu/qmPNgkc+VyzdxeGS5KsAuf0xf2dwHLUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:21:16 2025 by rpki-client