Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          /k/QWJ7g05/Tg5kXvL7Eq8xWzLBniUr/uCxzMOMP560=
Subject key identifier:   86:19:7B:47:62:37:CD:EB:0F:68:16:DC:B5:1F:32:0C:50:1A:FE:06
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       72167870CEF27E20CDD6C1DE8E9C6066393C53A0
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 21 Jul 2026 06:15:08 +0000
ROA not before:           Tue 21 Jul 2026 06:10:08 +0000
ROA not after:            Tue 20 Jul 2027 06:15:08 +0000
asID:                     6535
IP address blocks:        190.110.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:78:70:ce:f2:7e:20:cd:d6:c1:de:8e:9c:60:66:39:3c:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jul 21 06:10:08 2026 GMT
            Not After : Jul 20 06:15:08 2027 GMT
        Subject: CN=86197B476237CDEB0F6816DCB51F320C501AFE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:f1:09:70:43:47:d6:c8:00:56:9d:60:2a:
                    a1:c9:3b:1d:e2:31:18:68:ea:ec:83:1d:5b:5a:a9:
                    17:89:f5:c8:7e:6b:6f:a2:14:0c:98:b4:78:f6:35:
                    a3:52:a5:28:fa:a1:22:96:cf:8a:1b:31:45:09:c4:
                    03:d7:d7:8c:9e:24:42:34:9a:4c:07:8d:58:82:66:
                    76:75:bc:ba:5d:0d:90:a6:45:74:b8:00:70:4e:f5:
                    e3:ea:a2:18:e5:3a:2b:05:fe:69:ed:48:26:45:9f:
                    09:02:33:3f:94:4e:6c:fe:9f:0b:e2:d0:c6:47:74:
                    52:49:29:79:5f:82:81:f4:ba:b4:a2:69:4e:f8:4b:
                    3a:90:39:5d:92:a6:68:5d:df:0f:f4:c6:2a:f2:8a:
                    9b:b9:c2:dc:e3:f0:73:5d:57:58:b4:d0:b2:88:e5:
                    99:94:45:4c:31:be:b0:3e:d8:45:04:7f:a4:81:fd:
                    3f:0c:43:05:a9:c3:bc:e5:a6:f5:a5:6f:16:d1:8c:
                    43:19:97:bd:9a:95:25:72:ba:3f:f1:28:0d:54:40:
                    01:a0:c3:5e:7f:b1:b5:49:f0:4c:70:ea:bf:16:b4:
                    0e:0e:0a:79:38:f5:74:a1:20:1b:9a:47:7d:70:c5:
                    b1:6e:8e:9a:45:0b:4b:26:86:77:36:00:da:9d:c0:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:7B:47:62:37:CD:EB:0F:68:16:DC:B5:1F:32:0C:50:1A:FE:06
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:51:65:3d:23:f5:c9:39:a0:6f:91:0d:21:36:fa:43:59:
         00:a2:4b:d7:8e:3a:2d:8c:8b:87:4b:47:1f:5e:6c:d2:15:e9:
         8d:88:2f:4f:9d:4a:55:78:52:03:c7:1e:1c:5d:80:e4:37:59:
         90:7b:ca:9a:d4:79:83:e7:f8:42:ad:47:59:a1:9d:8b:cf:d7:
         16:68:4a:f0:e9:dc:d3:9c:a4:f5:e6:60:a3:da:db:ad:b8:b6:
         be:df:15:de:a1:4e:4d:19:23:a6:21:f8:23:bf:1d:2f:02:49:
         e6:ff:09:9c:24:9d:66:28:7d:3f:22:36:fc:c4:08:01:35:65:
         f1:35:09:42:17:98:c5:3b:20:44:bb:2c:dc:79:dc:4d:26:9c:
         4a:9c:14:f9:bd:2d:12:3f:83:a3:0e:12:d7:12:52:59:1d:1c:
         c3:81:99:79:ee:23:13:c4:55:e4:0f:31:b1:76:4d:e8:1c:1f:
         de:f8:2c:96:3c:7b:6f:2b:8a:3b:61:45:d9:ed:51:e5:c2:41:
         69:57:92:1a:16:97:25:22:b7:3a:9e:e9:2c:45:62:3b:bc:03:
         e8:0f:12:31:81:35:f1:48:c7:76:38:b1:61:1a:ed:84:b8:2f:
         ee:15:c0:1d:e9:c1:63:ce:d9:aa:16:e5:2a:cb:1e:ea:8b:5d:
         df:ed:6e:a3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUchZ4cM7yfiDN1sHejpxgZjk8U6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNjA3MjEwNjEwMDhaFw0yNzA3MjAwNjE1MDhaMDMxMTAvBgNV
BAMTKDg2MTk3QjQ3NjIzN0NERUIwRjY4MTZEQ0I1MUYzMjBDNTAxQUZFMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDvEJcENH1sgAVp1gKqHJOx3i
MRho6uyDHVtaqReJ9ch+a2+iFAyYtHj2NaNSpSj6oSKWz4obMUUJxAPX14yeJEI0
mkwHjViCZnZ1vLpdDZCmRXS4AHBO9ePqohjlOisF/mntSCZFnwkCMz+UTmz+nwvi
0MZHdFJJKXlfgoH0urSiaU74SzqQOV2Spmhd3w/0xiryipu5wtzj8HNdV1i00LKI
5ZmURUwxvrA+2EUEf6SB/T8MQwWpw7zlpvWlbxbRjEMZl72alSVyuj/xKA1UQAGg
w15/sbVJ8Exw6r8WtA4OCnk49XShIBuaR31wxbFujppFC0smhnc2ANqdwPEFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhhl7R2I3zesPaBbctR8yDFAa/gYwHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzkzMDJlMzEzMTMwMmUzMTM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5umDAN
BgkqhkiG9w0BAQsFAAOCAQEAS09RZT0j9ck5oG+RDSE2+kNZAKJL1446LYyLh0tH
H15s0hXpjYgvT51KVXhSA8ceHF2A5DdZkHvKmtR5g+f4Qq1HWaGdi8/XFmhK8Onc
05yk9eZgo9rbrbi2vt8V3qFOTRkjpiH4I78dLwJJ5v8JnCSdZih9PyI2/MQIATVl
8TUJQheYxTsgRLss3HncTSacSpwU+b0tEj+Dow4S1xJSWR0cw4GZee4jE8RV5A8x
sXZN6Bwf3vgsljx7byuKO2FF2e1R5cJBaVeSGhaXJSK3Op7pLEViO7wD6A8SMYE1
8UjHdjixYRrthLgv7hXAHenBY87ZqhblKsse6otd3+1uow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:28 2026 by rpki-client