Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          WeCn+DRxkAs3IdyFy8nPQovjaSbgmM4eMDFNpxvMDHA=
Subject key identifier:   31:3F:66:B2:04:38:24:16:09:FB:A2:73:59:65:F0:83:D2:F1:45:43
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4935C02B3BDA15758D203FEC411FFDD1CE62D809
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 19 Aug 2025 05:25:01 +0000
ROA not before:           Tue 19 Aug 2025 05:20:01 +0000
ROA not after:            Tue 18 Aug 2026 05:25:01 +0000
asID:                     6535
IP address blocks:        190.110.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:35:c0:2b:3b:da:15:75:8d:20:3f:ec:41:1f:fd:d1:ce:62:d8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 19 05:20:01 2025 GMT
            Not After : Aug 18 05:25:01 2026 GMT
        Subject: CN=313F66B20438241609FBA2735965F083D2F14543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:c8:e5:30:cc:62:2f:77:2d:80:20:5c:a6:
                    78:67:e5:0d:a6:e4:a4:0f:32:3c:bc:44:20:d7:2a:
                    7d:b9:bc:a4:14:ba:9c:3d:1a:07:2d:b1:3f:cc:a9:
                    58:98:29:6f:f9:07:9b:0f:5f:61:a9:29:a2:69:f6:
                    5b:7f:a2:ff:0f:7c:ec:c9:89:05:33:cc:41:2d:79:
                    5a:82:18:8d:66:04:80:78:0e:32:ee:da:c8:4f:fb:
                    ee:84:f1:d5:77:2d:ee:ff:17:76:d8:16:f1:69:d8:
                    c3:7d:bc:92:46:c3:06:eb:3f:41:59:ba:dd:9b:ee:
                    9e:b5:a4:71:59:aa:05:3c:7a:12:95:78:47:90:7a:
                    1d:78:48:42:ad:58:2d:a1:70:54:57:28:d6:ce:db:
                    56:5f:c3:b7:a5:36:32:98:b1:49:e2:f4:ab:bd:00:
                    02:fd:68:d0:23:74:fc:bd:76:73:e1:7a:4a:be:54:
                    01:b3:ab:75:bd:80:97:d5:99:76:0f:45:08:b2:55:
                    9b:eb:00:ba:d2:d9:d2:ba:f2:40:ba:b5:9b:84:16:
                    e5:d7:b4:e9:de:39:6a:38:f8:02:b7:f4:f9:53:d5:
                    f6:89:b1:67:df:6e:8d:c6:8d:41:76:e3:b7:fb:20:
                    ce:63:93:1e:b5:54:ad:48:54:10:69:fd:bb:04:a3:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3F:66:B2:04:38:24:16:09:FB:A2:73:59:65:F0:83:D2:F1:45:43
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135322e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:b7:78:d4:61:da:12:3c:24:89:7f:0d:9e:26:b2:85:1c:e4:
         65:a5:2d:bf:34:ca:26:67:16:f5:4c:db:c2:e0:8f:77:6c:76:
         7d:3d:1d:cb:7a:e2:74:b0:92:bc:1e:f9:6b:05:70:b1:e0:e1:
         65:17:50:f1:60:2d:93:40:9d:7c:aa:7c:52:88:cf:e3:d5:91:
         5c:a2:78:82:0b:e7:3c:96:09:d6:30:3b:6c:4d:a9:16:36:20:
         94:19:4b:cc:9b:03:dd:88:de:4a:ef:b9:64:a6:3f:eb:7e:d8:
         5e:5a:e4:9c:16:3f:12:6d:8b:8b:4f:c5:0b:80:01:0e:57:27:
         9d:01:c5:cb:64:a2:e4:e3:ad:74:3d:64:6d:ff:76:9b:60:88:
         8e:02:9c:7d:14:99:21:c0:a2:bf:e2:23:82:63:bb:4a:66:c1:
         d9:22:18:de:15:01:14:60:5e:ac:14:6a:b6:f4:35:e4:d6:d0:
         e9:1e:17:f7:72:20:c7:02:bf:a0:e8:a8:7e:07:81:b9:cc:ae:
         3d:19:8b:2d:e9:ab:b2:fc:3c:ae:32:36:56:5b:1a:3d:a5:bd:
         09:d1:0f:89:ef:63:4e:27:c4:65:7d:d2:31:18:bc:e4:e6:da:
         9c:fc:e1:66:af:1a:90:f6:fc:4f:66:7d:3c:55:94:25:4a:b1:
         04:e9:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:22:34 2025 by rpki-client