Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e302e302f31392d3234203d3e20323632313931.roa
File:                     3139302e3130392e302e302f31392d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          kYl94qyUm9cZqszCL9UMZUuVWo2kka99jQBqM1g8zA4=
Subject key identifier:   DD:1C:90:39:B6:74:3B:E2:88:41:C1:F8:3A:02:8C:EB:2E:68:C7:47
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       0DF00D94ECDA80C59CFD07607A1D71BF002C02A3
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e302e302f31392d3234203d3e20323632313931.roa
Signing time:             Wed 13 Aug 2025 14:35:35 +0000
ROA not before:           Wed 13 Aug 2025 14:30:35 +0000
ROA not after:            Wed 12 Aug 2026 14:35:35 +0000
asID:                     262191
IP address blocks:        190.109.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:0d:94:ec:da:80:c5:9c:fd:07:60:7a:1d:71:bf:00:2c:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:35 2025 GMT
            Not After : Aug 12 14:35:35 2026 GMT
        Subject: CN=DD1C9039B6743BE28841C1F83A028CEB2E68C747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:3a:60:25:eb:7d:7e:ae:a9:41:16:12:db:
                    11:5f:cf:1b:06:b3:19:58:09:f3:a4:f8:6a:f4:75:
                    d2:39:41:57:51:ac:73:87:34:03:f5:94:56:75:48:
                    8f:3e:8e:31:7f:15:c2:d3:f3:02:22:b4:d0:92:05:
                    25:43:5e:09:60:12:1f:48:31:ce:a1:8c:59:80:83:
                    0c:ac:27:76:a1:93:b4:12:ae:eb:17:9e:eb:34:1d:
                    d2:7b:ae:c7:7e:45:a0:ff:90:d0:dd:d1:f1:2c:95:
                    07:a0:a9:7a:51:f0:c2:57:ab:ba:89:ce:6c:ff:7a:
                    79:c1:1a:b7:db:49:cb:af:80:97:7a:56:55:f4:54:
                    fa:f8:89:83:a9:16:52:e9:e0:e4:55:59:5c:5a:32:
                    6f:29:b7:5d:6a:36:e8:2b:e7:e8:9a:b3:df:8f:9e:
                    bc:f3:71:e5:9d:db:0d:21:e7:b5:80:a3:7b:ab:3f:
                    20:be:49:a3:73:4b:e9:68:ff:03:37:5a:b8:31:58:
                    77:58:14:37:f9:dd:d1:f3:0d:43:4c:74:13:26:74:
                    2c:f3:5a:44:f7:24:50:b6:9d:7d:f9:a6:91:a8:81:
                    48:93:9a:29:76:81:75:43:c3:67:99:da:69:8a:0e:
                    07:b0:70:14:68:43:91:39:c6:6d:d4:54:10:5e:27:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1C:90:39:B6:74:3B:E2:88:41:C1:F8:3A:02:8C:EB:2E:68:C7:47
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e302e302f31392d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:e5:04:92:dd:b7:ba:b2:88:41:d6:5c:b6:13:b3:3f:e3:8c:
         fb:25:40:a5:ed:9a:8e:21:a2:5e:92:90:50:0e:d1:72:37:2f:
         7b:3d:76:cf:2c:19:d0:49:76:42:1b:5e:50:09:c1:06:da:db:
         79:89:d5:ba:11:0d:f7:cd:52:bf:ab:30:13:18:43:07:4b:80:
         b3:d0:1f:97:29:47:3f:a8:c8:4f:35:d7:99:30:ce:43:1d:a6:
         ab:70:ea:4e:7a:56:f5:51:f4:51:07:e6:cf:bd:21:f0:88:70:
         18:01:71:91:a4:11:b9:8c:59:f4:f6:d6:4e:1a:cc:35:0f:c5:
         85:02:3e:7f:13:ac:76:ce:9e:f2:68:da:b7:17:af:e8:0c:79:
         82:02:dd:b2:e8:d4:0c:6c:ca:2d:f8:06:a2:85:01:45:06:f4:
         72:b0:ad:dc:e0:41:d7:5a:d9:5b:a0:1a:48:15:e7:79:8f:be:
         77:65:88:0e:09:b7:70:96:ad:b2:f1:a7:35:e2:2f:9e:4c:ad:
         8f:48:89:66:e8:08:19:52:b4:67:cb:59:0b:0f:6e:cb:9a:f9:
         6b:08:17:42:43:bc:a9:c8:26:e6:77:1f:df:28:3a:cc:1a:c6:
         59:8f:51:e2:2b:d3:dd:aa:c7:65:d8:bd:fc:f9:3d:d8:22:b4:
         bb:05:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:17:25 2025 by rpki-client