Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134302e302e302f31352d3234203d3e203138383039.roa
File:                     3139302e3134302e302e302f31352d3234203d3e203138383039.roa (raw, json)
Hash identifier:          1Y+ce9xZmtGqZc6FIraBeZkrQ6B4e+51oLXJdfV9EKE=
Subject key identifier:   8A:D6:4E:10:68:88:70:53:DF:E4:F7:95:46:A1:EB:E7:90:7E:0D:AF
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       66103625F726D74F820489E977C31A36A2E2FBC2
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134302e302e302f31352d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:50 +0000
ROA not before:           Fri 25 Sep 2026 14:31:50 +0000
ROA not after:            Fri 24 Sep 2027 14:36:50 +0000
asID:                     18809
IP address blocks:        190.140.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:10:36:25:f7:26:d7:4f:82:04:89:e9:77:c3:1a:36:a2:e2:fb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:50 2026 GMT
            Not After : Sep 24 14:36:50 2027 GMT
        Subject: CN=8AD64E1068887053DFE4F79546A1EBE7907E0DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:62:fe:2a:04:d1:c1:45:22:39:27:b3:3a:
                    fb:00:b6:2b:cd:0c:95:52:32:03:1e:c4:0f:39:f6:
                    e2:7b:78:b1:94:87:f7:68:fa:f9:e5:ea:4f:01:5f:
                    9c:d9:40:47:0f:32:01:4d:45:8b:87:39:a8:01:2f:
                    f3:b4:1b:9a:45:f6:67:ae:ea:3c:84:63:96:98:6f:
                    9c:86:fd:e9:84:c5:3f:d0:36:d5:95:6a:51:8e:33:
                    a2:a2:57:b7:70:82:89:77:71:e8:f0:13:c9:bc:de:
                    c3:bd:37:24:61:55:52:41:fe:26:87:ef:e0:59:c6:
                    a1:18:a2:2e:e4:49:78:d5:5f:bb:0b:70:7d:b2:e2:
                    56:49:8c:cb:32:fe:67:b0:5a:ab:7e:98:44:cf:87:
                    24:c6:03:4b:52:ca:f8:e8:8e:ac:e8:b4:f3:c4:6f:
                    38:ae:2c:d8:a8:d7:11:1a:a9:ff:b2:13:62:48:1f:
                    6a:2d:7b:bb:d4:5b:9c:b8:36:86:39:78:2a:00:3b:
                    9f:ca:8a:2d:1a:82:0c:bb:6a:d7:37:11:f2:8e:2f:
                    82:0f:65:85:24:3e:4c:23:11:1d:14:1a:51:9f:db:
                    2b:f3:d0:c6:5f:21:4e:b2:4b:a5:3d:93:49:b5:87:
                    b7:26:83:09:46:e7:8b:fb:05:e1:d1:bb:0c:d5:f8:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:4E:10:68:88:70:53:DF:E4:F7:95:46:A1:EB:E7:90:7E:0D:AF
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134302e302e302f31352d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.140.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:ce:31:ea:73:66:54:44:3d:65:ad:5a:fb:01:c6:cc:82:
         a3:0c:bb:88:7f:8b:26:f0:f9:0f:d2:e2:d4:81:9d:ff:5e:b9:
         ed:69:0d:4b:8b:62:91:d3:60:06:25:90:fd:10:47:76:43:e8:
         88:e5:40:c9:d7:b5:d0:7a:be:03:16:0f:25:12:0e:a9:ca:3d:
         45:e3:8c:87:4e:fd:1b:e2:68:cf:dc:f0:5e:c2:71:eb:6e:46:
         cb:34:a6:f7:1a:c9:42:bb:1c:77:23:15:42:6c:b7:61:9a:fd:
         bc:fb:76:3e:41:5a:6a:61:d2:0f:4a:b3:80:2d:c0:04:80:5e:
         7b:c3:d4:f4:e9:5e:73:45:79:5f:b7:65:c6:8d:90:17:21:2f:
         2d:4e:1e:c4:bf:2a:f3:99:48:21:38:e3:eb:4e:0d:35:68:70:
         18:71:64:a8:9c:ab:c6:27:b4:6c:f6:35:f9:04:91:03:f7:5c:
         da:b1:c0:f7:a6:be:a7:6e:f6:0f:75:28:5c:0e:d5:f3:84:fa:
         81:a7:c8:36:51:e8:1f:68:ed:44:97:6c:ef:01:d8:3e:a9:23:
         63:d1:e4:fe:85:fc:c9:05:07:1d:25:bb:7a:22:60:b2:da:71:
         d3:cb:bf:ee:3c:7d:17:4f:e9:a8:a5:cc:49:f4:67:c7:81:be:
         85:e0:66:14
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZhA2Jfcm10+CBInpd8MaNqLi+8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNTBaFw0yNzA5MjQxNDM2NTBaMDMxMTAvBgNV
BAMTKDhBRDY0RTEwNjg4ODcwNTNERkU0Rjc5NTQ2QTFFQkU3OTA3RTBEQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmGL+KgTRwUUiOSezOvsAtivN
DJVSMgMexA859uJ7eLGUh/do+vnl6k8BX5zZQEcPMgFNRYuHOagBL/O0G5pF9meu
6jyEY5aYb5yG/emExT/QNtWValGOM6KiV7dwgol3cejwE8m83sO9NyRhVVJB/iaH
7+BZxqEYoi7kSXjVX7sLcH2y4lZJjMsy/mewWqt+mETPhyTGA0tSyvjojqzotPPE
bziuLNio1xEaqf+yE2JIH2ote7vUW5y4NoY5eCoAO5/Kii0aggy7atc3EfKOL4IP
ZYUkPkwjER0UGlGf2yvz0MZfIU6yS6U9k0m1h7cmgwlG54v7BeHRuwzV+K6bAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUitZOEGiIcFPf5PeVRqHr55B+Da8wHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzkzMDJlMzEzNDMwMmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMxMzgzODMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG+jDANBgkq
hkiG9w0BAQsFAAOCAQEAPETOMepzZlREPWWtWvsBxsyCowy7iH+LJvD5D9Li1IGd
/1657WkNS4tikdNgBiWQ/RBHdkPoiOVAyde10Hq+AxYPJRIOqco9ReOMh079G+Jo
z9zwXsJx625GyzSm9xrJQrscdyMVQmy3YZr9vPt2PkFaamHSD0qzgC3ABIBee8PU
9Olec0V5X7dlxo2QFyEvLU4exL8q85lIITjj604NNWhwGHFkqJyrxie0bPY1+QSR
A/dc2rHA96a+p272D3UoXA7V84T6gafINlHoH2jtRJds7wHYPqkjY9Hk/oX8yQUH
HSW7eiJgstpx08u/7jx9F0/pqKXMSfRnx4G+heBmFA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:53:30 2026 by rpki-client