Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135342e302f32342d3234203d3e2036353335.roa
File:                     3139302e3131302e3135342e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          ybI2+rXag4HtiflKuGQDC49WErP+WMy20hrcRuc6+eA=
Subject key identifier:   CF:C3:D3:B9:5C:83:A8:F7:D8:17:D0:ED:A4:71:8B:62:D2:EB:3B:D9
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4C907332822F4F20353E23CB43DA68249DD5D5BB
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135342e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 19 Aug 2025 05:25:02 +0000
ROA not before:           Tue 19 Aug 2025 05:20:02 +0000
ROA not after:            Tue 18 Aug 2026 05:25:02 +0000
asID:                     6535
IP address blocks:        190.110.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:73:32:82:2f:4f:20:35:3e:23:cb:43:da:68:24:9d:d5:d5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 19 05:20:02 2025 GMT
            Not After : Aug 18 05:25:02 2026 GMT
        Subject: CN=CFC3D3B95C83A8F7D817D0EDA4718B62D2EB3BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:6d:9e:00:b4:f9:c0:e4:cc:a5:fa:49:18:
                    6e:1f:f4:ab:72:b2:a4:b3:83:c7:3c:18:ee:5a:fa:
                    be:5f:42:30:f4:f6:97:95:66:7e:a0:60:02:f2:f2:
                    b6:fa:81:73:1a:8b:56:7a:38:01:fe:85:ed:79:61:
                    72:3b:6b:e3:36:ec:d5:0b:a9:1f:da:49:37:c6:a9:
                    be:aa:04:21:e7:0b:08:5c:3a:6f:92:43:69:4c:65:
                    51:0c:a8:49:5c:6b:34:88:d2:26:97:e8:34:3c:4b:
                    08:27:ab:1f:20:6a:ac:d1:f1:d8:d9:c0:46:cc:11:
                    1f:3e:47:30:1a:38:f7:6f:51:fe:21:5c:39:6d:aa:
                    b3:e2:57:03:ae:94:e5:31:eb:a3:af:14:c4:2d:c2:
                    ae:a8:89:51:38:98:b6:0e:ca:ba:a4:e0:38:c4:ce:
                    37:af:29:b6:b8:f5:ee:a8:8e:d3:82:8e:e8:3c:ec:
                    95:02:82:3f:45:59:83:00:9e:80:2a:ff:b6:51:0d:
                    24:9d:ea:5d:b8:65:20:f2:0e:28:63:40:70:02:9c:
                    ab:1f:32:fc:75:b4:01:77:52:18:99:d9:00:39:44:
                    69:5a:de:8f:ca:ff:37:6d:4c:7c:d4:5d:f8:8b:29:
                    d8:5b:ca:f9:c1:d1:8a:a5:45:73:28:c9:81:43:0c:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C3:D3:B9:5C:83:A8:F7:D8:17:D0:ED:A4:71:8B:62:D2:EB:3B:D9
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135342e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:6d:bc:48:6f:1b:de:54:da:2b:54:99:bc:4a:3d:c6:ee:
         06:33:91:93:7f:4d:60:4b:19:be:e1:0d:d1:91:c9:ab:3d:43:
         c9:18:03:5a:ef:ae:7c:94:6d:4c:36:b1:51:06:d6:c3:1c:f3:
         75:45:8d:d9:8d:ec:b1:98:41:e6:45:07:e5:69:1e:5d:bf:b0:
         4d:5c:98:58:2d:56:10:78:10:5c:f1:f2:f4:38:53:34:ff:12:
         3a:4a:cd:d4:33:de:5a:00:ef:83:0d:0b:4f:1a:6e:22:1c:c7:
         87:28:f9:88:9f:92:44:4f:12:8e:eb:f9:98:da:1c:4d:e8:a8:
         c1:dc:de:c5:63:e6:bb:27:c0:3b:fd:24:51:60:a4:ca:d7:49:
         61:ea:00:90:5f:5f:bc:07:ad:9b:eb:6a:db:ef:72:ae:01:23:
         78:0e:09:00:79:2b:32:68:34:53:4e:5a:59:0d:29:b4:3e:07:
         b4:4b:a2:64:97:fb:9b:7d:fe:5c:3e:c2:d0:ff:b4:25:02:59:
         58:eb:cf:5e:40:8a:67:a9:4d:92:5e:81:64:66:b9:58:90:e1:
         0d:fb:a0:84:c7:33:c8:02:64:ce:fc:12:2b:9d:81:fd:31:45:
         54:ff:d1:37:72:3a:af:3d:9c:7c:61:8c:14:cb:fb:91:c3:75:
         09:f4:0a:f2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTJBzMoIvTyA1PiPLQ9poJJ3V1bswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNTA4MTkwNTIwMDJaFw0yNjA4MTgwNTI1MDJaMDMxMTAvBgNV
BAMTKENGQzNEM0I5NUM4M0E4RjdEODE3RDBFREE0NzE4QjYyRDJFQjNCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXrW2eALT5wOTMpfpJGG4f9Kty
sqSzg8c8GO5a+r5fQjD09peVZn6gYALy8rb6gXMai1Z6OAH+he15YXI7a+M27NUL
qR/aSTfGqb6qBCHnCwhcOm+SQ2lMZVEMqElcazSI0iaX6DQ8Swgnqx8gaqzR8djZ
wEbMER8+RzAaOPdvUf4hXDltqrPiVwOulOUx66OvFMQtwq6oiVE4mLYOyrqk4DjE
zjevKba49e6ojtOCjug87JUCgj9FWYMAnoAq/7ZRDSSd6l24ZSDyDihjQHACnKsf
Mvx1tAF3UhiZ2QA5RGla3o/K/zdtTHzUXfiLKdhbyvnB0YqlRXMoyYFDDHblAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUz8PTuVyDqPfYF9DtpHGLYtLrO9kwHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzkzMDJlMzEzMTMwMmUzMTM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5umjAN
BgkqhkiG9w0BAQsFAAOCAQEATNhtvEhvG95U2itUmbxKPcbuBjORk39NYEsZvuEN
0ZHJqz1DyRgDWu+ufJRtTDaxUQbWwxzzdUWN2Y3ssZhB5kUH5WkeXb+wTVyYWC1W
EHgQXPHy9DhTNP8SOkrN1DPeWgDvgw0LTxpuIhzHhyj5iJ+SRE8Sjuv5mNocTeio
wdzexWPmuyfAO/0kUWCkytdJYeoAkF9fvAetm+tq2+9yrgEjeA4JAHkrMmg0U05a
WQ0ptD4HtEuiZJf7m33+XD7C0P+0JQJZWOvPXkCKZ6lNkl6BZGa5WJDhDfughMcz
yAJkzvwSK52B/TFFVP/RN3I6rz2cfGGMFMv7kcN1CfQK8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:54 2025 by rpki-client