Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3134322e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3134322e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          /CxPoqWM50xriqwpeohU5WQ4yrezFu7TCbET/gMKCLk=
Subject key identifier:   27:6C:00:A4:10:78:F5:58:FA:78:2C:E5:4C:10:6E:1C:CF:BF:39:C1
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       5A322E93C9F40943B79E78B6D9BAA4EA7D8FD7B8
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3134322e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 19 Aug 2025 05:25:03 +0000
ROA not before:           Tue 19 Aug 2025 05:20:03 +0000
ROA not after:            Tue 18 Aug 2026 05:25:03 +0000
asID:                     6535
IP address blocks:        190.110.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:32:2e:93:c9:f4:09:43:b7:9e:78:b6:d9:ba:a4:ea:7d:8f:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 19 05:20:03 2025 GMT
            Not After : Aug 18 05:25:03 2026 GMT
        Subject: CN=276C00A41078F558FA782CE54C106E1CCFBF39C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:62:6c:0a:3b:42:16:2c:ca:40:e5:25:ee:
                    50:b4:17:84:d8:63:0b:71:db:75:b4:98:4a:1c:b1:
                    c4:fa:b2:90:f7:59:47:50:65:ba:b1:97:fd:ed:98:
                    77:b1:47:16:9c:ae:75:d1:33:7e:af:f7:89:4f:67:
                    45:a3:d3:ea:c8:31:3f:ec:3b:89:5e:ce:bc:22:80:
                    79:3f:5e:5f:b5:f1:d8:e8:11:d8:73:df:d1:03:a2:
                    94:fd:97:ce:f4:86:1b:11:e6:76:a0:25:38:df:8c:
                    7d:d4:dc:0f:87:0f:e7:82:6f:03:0e:82:e2:5e:24:
                    79:17:88:ad:af:64:7e:e0:37:c4:e2:f2:1e:1b:b5:
                    d5:b2:6d:c2:14:b0:0b:78:f1:e9:f7:8b:77:2f:5d:
                    a7:2d:26:dc:34:69:13:5d:fa:0a:96:7c:d0:c6:eb:
                    42:10:08:0b:95:4b:64:ed:49:01:6b:36:a7:6f:b0:
                    40:fd:32:a0:c7:11:0c:ba:e8:b7:f8:d2:84:08:cf:
                    ce:5e:94:92:5f:ab:1c:bf:58:44:9d:13:16:ad:4c:
                    9e:ca:bd:a7:00:b4:b5:40:cf:20:18:41:55:ad:38:
                    51:42:e4:91:84:d5:89:d3:c4:d6:0b:f0:46:71:0b:
                    fe:0a:6d:c1:11:0d:eb:dd:70:a6:82:01:08:b8:1e:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:00:A4:10:78:F5:58:FA:78:2C:E5:4C:10:6E:1C:CF:BF:39:C1
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3134322e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:3a:9e:bb:fd:fa:c4:08:66:ec:73:46:ba:ec:d5:ea:3b:54:
         1c:fd:c5:13:d9:11:53:1d:40:83:8e:5b:da:37:ef:a6:f0:f4:
         4f:58:fd:35:e8:7b:ca:67:65:6e:f3:f5:a3:96:05:88:bd:09:
         82:d5:74:ef:32:22:0c:7b:08:21:78:fc:75:92:b9:b0:f0:40:
         9a:60:b2:14:56:8f:b5:d1:a4:19:af:4d:8a:52:b1:d3:e1:49:
         c9:8e:93:9a:1f:4d:33:17:09:7f:8c:b2:17:bb:f1:33:7f:70:
         96:7d:7b:1e:e6:5e:88:48:d3:84:9e:26:92:fb:4b:54:7b:d6:
         5b:a9:a4:17:74:c6:92:e1:83:b9:2f:69:2b:5e:0b:59:b0:be:
         3d:82:68:54:90:d4:49:e3:de:e7:73:64:56:5f:a0:3c:b9:f4:
         ca:b9:f2:ab:f4:c7:73:6d:58:fa:ff:d4:f5:91:76:30:ca:c9:
         72:9b:5f:74:b6:f4:0e:99:1e:22:6d:4a:59:c7:94:c9:8a:3d:
         f2:18:db:b1:ef:61:a5:33:70:6a:a0:08:f0:35:85:9f:2e:b4:
         da:9f:b0:bd:6a:43:dc:48:c6:1e:16:06:49:8d:63:6b:ed:a4:
         ca:52:76:1b:62:ee:61:20:97:75:db:96:33:f5:0f:9b:c1:9a:
         b9:54:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:04 2025 by rpki-client