Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131382e302e302f31362d3234203d3e2036353335.roa
File:                     3139312e3131382e302e302f31362d3234203d3e2036353335.roa (raw, json)
Hash identifier:          jZ08d8OlrO0t+LOtYbnUfcmMaThN7ci3kLMWtJ6wn0Q=
Subject key identifier:   74:BA:9A:18:23:43:E2:13:49:CF:C8:16:B2:06:02:43:9C:F1:E9:05
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       1EA2B2F4F342C860F00DBD757B86BBB87915B2D5
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131382e302e302f31362d3234203d3e2036353335.roa
Signing time:             Tue 21 Jul 2026 06:15:08 +0000
ROA not before:           Tue 21 Jul 2026 06:10:08 +0000
ROA not after:            Tue 20 Jul 2027 06:15:08 +0000
asID:                     6535
IP address blocks:        191.118.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a2:b2:f4:f3:42:c8:60:f0:0d:bd:75:7b:86:bb:b8:79:15:b2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jul 21 06:10:08 2026 GMT
            Not After : Jul 20 06:15:08 2027 GMT
        Subject: CN=74BA9A182343E21349CFC816B20602439CF1E905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:2c:63:91:32:e3:f7:92:c9:a2:18:3e:76:
                    f4:48:00:20:f6:ba:b4:b2:e9:63:6d:ff:a1:a6:12:
                    f8:43:92:9f:c1:44:9e:c0:f0:a2:89:97:0a:1b:ce:
                    e7:aa:19:76:5f:9a:16:be:c3:31:33:ad:62:9a:d1:
                    1e:4e:bb:ec:85:5c:b5:40:46:5a:d9:7a:c4:56:e4:
                    12:58:08:37:df:cd:3c:5c:79:1b:2f:b2:83:d5:09:
                    eb:e6:be:11:e9:33:e0:d3:c9:20:4b:96:96:2b:c6:
                    19:a6:2b:60:e5:e7:94:27:10:00:f7:80:ea:0c:51:
                    4f:7b:16:9a:9a:01:ff:56:4a:8f:96:b1:d1:98:c1:
                    5c:9a:be:58:2e:08:71:47:05:52:1e:0b:91:89:64:
                    51:e9:16:6c:8b:37:bd:2d:0a:63:2f:71:31:92:5c:
                    2d:50:39:64:5c:46:56:aa:9c:48:b9:4b:7e:ab:fb:
                    2c:bd:75:01:4f:37:9e:28:fa:ce:67:47:95:51:a5:
                    49:1e:d5:99:51:4c:48:39:40:14:31:e9:7b:cc:e9:
                    41:36:e9:43:e4:2a:f9:ef:25:3c:89:9c:c5:3b:5b:
                    af:29:49:e7:49:2c:23:6b:3b:cd:b2:43:6f:f2:7c:
                    a5:1f:ba:78:5e:88:18:04:76:83:fd:3d:60:7b:e9:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BA:9A:18:23:43:E2:13:49:CF:C8:16:B2:06:02:43:9C:F1:E9:05
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131382e302e302f31362d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:70:ff:e9:ea:72:5c:44:e1:88:75:89:b8:64:18:ba:6e:e7:
         d1:56:00:77:a2:ca:9c:b5:ca:f7:01:ac:ff:5c:c0:a3:05:70:
         be:ce:c5:f6:d9:da:7b:9f:76:4d:15:4b:07:e7:4e:2d:f6:bb:
         0d:59:f6:77:fc:7f:d9:5e:86:f4:7f:21:2f:59:1d:6f:72:e7:
         c5:db:9d:2d:19:00:72:da:b4:28:34:8a:03:be:a5:5a:35:b8:
         6c:80:02:9b:8f:0b:0e:b7:51:89:c0:d8:c2:c2:e4:a8:a3:2e:
         97:28:f0:91:2f:48:aa:e7:2c:af:38:c3:df:f0:dd:b7:58:e1:
         3e:c8:61:ac:4d:66:94:37:85:0f:1a:38:d0:da:f1:66:dc:89:
         0b:8d:a8:56:af:a7:97:20:1a:62:6d:af:99:27:69:3a:57:bb:
         5f:38:17:db:d7:ad:e4:6e:e8:a9:c6:8d:18:0c:6b:2e:de:1e:
         86:71:37:f7:e0:c6:51:08:b5:88:f3:b9:d2:64:45:54:6e:51:
         6f:26:5e:aa:ec:42:fa:2b:58:52:9b:e5:9e:63:0a:15:da:b2:
         a2:6b:94:51:bd:f5:52:f3:46:47:e1:72:71:c7:70:e5:be:ac:
         00:97:99:63:3e:21:c1:a5:62:c2:55:34:b5:a5:fe:4f:8e:ca:
         cb:6f:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:51:40 2026 by rpki-client