Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135312e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3135312e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          f+Do+9yDd5KxPWzh/A56yWlmz5J+48M3NaqN6QIrwIY=
Subject key identifier:   92:AB:72:F3:F1:19:B8:3E:B1:EF:58:00:A5:6D:44:3F:7D:AC:D8:B3
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4A3C9610153816B9D8265C0C88DC5AA9C5249819
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135312e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 19 Aug 2025 05:25:00 +0000
ROA not before:           Tue 19 Aug 2025 05:20:00 +0000
ROA not after:            Tue 18 Aug 2026 05:25:00 +0000
asID:                     6535
IP address blocks:        190.110.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3c:96:10:15:38:16:b9:d8:26:5c:0c:88:dc:5a:a9:c5:24:98:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 19 05:20:00 2025 GMT
            Not After : Aug 18 05:25:00 2026 GMT
        Subject: CN=92AB72F3F119B83EB1EF5800A56D443F7DACD8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:68:83:f8:02:53:2c:0b:04:8e:99:0c:15:
                    9b:7a:39:8c:c2:17:d3:68:50:58:b2:48:de:2c:c6:
                    ac:45:3c:0e:fa:5c:23:69:b9:43:56:b0:51:eb:15:
                    9f:14:3e:f9:de:41:d3:5d:2e:4a:24:b0:a8:60:fc:
                    23:9b:8b:cc:ad:fa:e9:34:57:56:a1:b0:24:17:05:
                    72:c1:db:13:64:f3:27:a0:97:1e:0a:10:06:f3:3c:
                    c2:08:47:7e:95:ed:9c:cd:04:ec:1e:cb:64:2a:f6:
                    ff:a8:b3:41:08:12:23:f0:58:24:23:16:3b:32:89:
                    eb:ae:70:3c:38:7a:97:88:bd:0f:5d:6c:37:e6:eb:
                    ac:87:ea:69:61:06:07:d8:3a:a3:03:c4:55:8f:77:
                    ba:87:c3:cd:0b:87:a9:b1:b8:fb:9c:62:06:7c:ad:
                    b5:c3:1e:f5:b6:12:e4:88:bc:8c:d3:a0:61:40:b0:
                    0c:62:47:6f:a3:0f:04:d4:29:a7:e7:34:13:0e:2a:
                    66:87:5d:12:e5:72:85:f2:3f:21:80:d9:6b:1d:a1:
                    54:30:61:fc:27:22:e9:d3:20:c0:63:78:9f:7e:83:
                    49:50:14:cc:3a:c3:42:1d:d6:e2:7d:92:0b:32:3b:
                    ed:78:f9:46:c1:48:1d:dd:83:bc:2d:70:9e:54:49:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:72:F3:F1:19:B8:3E:B1:EF:58:00:A5:6D:44:3F:7D:AC:D8:B3
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135312e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f4:50:a7:6f:c7:b0:e6:8d:7f:65:19:84:5d:25:ad:a8:c3:
         23:b1:7c:4d:f5:77:11:54:fc:d2:a7:7c:64:6c:ed:4c:15:d9:
         d5:4e:81:c6:9c:9f:75:90:f1:7c:60:60:64:07:d4:96:1b:ed:
         3e:5a:26:9d:5d:a6:6f:35:87:67:2d:ea:63:71:74:ed:3d:3c:
         04:d0:01:11:48:e0:1d:de:e3:b5:e2:83:36:72:83:d3:80:e4:
         f1:44:2a:bd:73:28:ee:7b:db:fa:33:85:2d:43:5d:d9:94:79:
         1f:8e:99:7a:9c:47:4e:11:01:4f:bc:28:89:01:57:f8:bc:13:
         d4:4e:d0:00:0f:2a:3e:20:79:81:43:33:df:74:1c:25:bd:0d:
         9b:4e:34:1c:61:16:73:c9:9f:53:c5:f8:18:11:ba:a3:1c:83:
         f5:75:c5:b8:f6:70:29:24:1f:7d:48:bd:35:9d:b2:ca:ca:16:
         c1:9f:13:c2:7c:89:18:ee:d9:d3:ad:d4:83:0e:9c:87:9a:8d:
         37:31:3e:fe:f9:e6:9a:d6:cb:00:a6:9e:3b:f9:05:1d:20:b4:
         84:b8:a5:b7:9b:d8:64:fc:e6:dc:48:eb:4a:37:a5:06:5a:68:
         49:9d:80:9c:48:5e:c5:2f:54:f7:51:bc:46:fb:85:f9:4f:72:
         ca:9f:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:59:31 2025 by rpki-client