Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa
File:                     3139302e352e3136302e302f32302d3234203d3e203238303135.roa (raw, json)
Hash identifier:          pLX52YVvq94oGfQ2jVzryMFsH2jE2DoFthktPxNDjAM=
Subject key identifier:   35:C3:BD:4C:68:74:6F:96:35:89:82:10:B6:7F:B1:2C:96:D1:DA:44
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       1A1CA26AE73B6C75B27CACD12A5BB6BC98CE9EB3
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa
Signing time:             Tue 06 Jan 2026 20:56:49 +0000
ROA not before:           Tue 06 Jan 2026 20:51:49 +0000
ROA not after:            Tue 05 Jan 2027 20:56:49 +0000
asID:                     28015
IP address blocks:        190.5.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 14:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:a2:6a:e7:3b:6c:75:b2:7c:ac:d1:2a:5b:b6:bc:98:ce:9e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Jan  6 20:51:49 2026 GMT
            Not After : Jan  5 20:56:49 2027 GMT
        Subject: CN=35C3BD4C68746F9635898210B67FB12C96D1DA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:a6:19:d1:66:19:bd:32:35:ed:18:88:bf:
                    e7:a8:78:0a:2d:6c:f1:ef:36:ec:16:15:9d:64:ff:
                    06:d0:e9:78:eb:ac:e1:27:a1:3e:56:ae:6c:68:38:
                    33:5c:dc:6b:bf:a3:47:08:3d:c3:0a:fb:12:b1:23:
                    e3:58:8b:55:4d:78:0b:cf:a3:a3:8b:d9:df:d7:0d:
                    44:a3:b8:c2:88:44:3f:e2:5a:4c:79:d1:61:6c:5a:
                    77:32:36:cd:cb:d9:8b:d9:ad:37:4f:97:41:40:ec:
                    cd:a9:99:06:57:b4:c4:eb:97:89:6f:a9:3e:6f:5e:
                    10:f2:5d:ea:97:01:77:64:82:db:af:b3:48:de:a9:
                    a0:9d:3f:4e:39:39:64:4f:a6:7a:ec:26:c5:36:95:
                    c6:36:be:6a:cc:f7:51:43:c5:9d:71:0c:5b:f9:48:
                    bc:95:49:6b:df:ed:54:60:fa:89:b8:db:24:92:03:
                    10:62:8d:7f:9d:89:f8:1d:44:bc:b9:9d:b6:38:ff:
                    33:3d:a6:ab:2e:e2:05:b6:f2:a4:66:50:09:d2:c1:
                    ba:d9:59:9f:b3:aa:3b:8a:d4:ff:f6:64:14:53:12:
                    62:13:7b:af:27:90:07:40:7a:4d:29:af:bf:ac:b0:
                    36:9f:bd:7b:91:a5:36:8c:9c:b0:6b:a5:89:4a:e9:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C3:BD:4C:68:74:6F:96:35:89:82:10:B6:7F:B1:2C:96:D1:DA:44
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:df:2d:35:b6:96:3e:d7:4f:50:c1:03:9b:32:47:b9:b2:
         df:48:a0:8f:0d:0f:bb:1a:77:04:1e:96:e5:79:20:c9:70:db:
         0d:c5:81:1a:34:2e:a3:db:9e:d1:f3:dd:c5:69:c8:8e:8a:5c:
         85:b2:06:aa:9e:0c:06:57:de:ff:a3:9b:d4:4a:e6:b5:c3:22:
         47:91:6d:59:d5:c2:11:29:5b:da:dd:7e:62:1d:d0:96:a8:04:
         bb:29:da:4f:fe:94:1b:bf:d7:9b:ea:2e:96:a9:7c:32:0f:b8:
         8b:ca:3e:fe:36:35:1a:43:78:af:6f:ed:72:bb:e6:41:96:18:
         cc:ca:63:bb:d5:2a:f1:d2:34:8a:55:f2:a2:46:57:de:ef:b0:
         ba:35:fe:1e:cf:69:54:03:f2:a7:48:aa:47:e3:8e:96:f1:29:
         1d:38:d8:88:61:d9:02:2f:13:3c:e3:e7:78:32:f8:13:d1:95:
         dd:b3:aa:cf:9a:2b:f0:bc:6d:c8:fb:62:1c:40:f3:12:52:0a:
         5a:02:c8:59:6a:3b:10:73:fd:3a:45:f6:87:2d:d8:19:d1:11:
         21:2e:80:53:55:7c:44:ad:2f:5e:a5:36:3a:a5:02:19:fe:87:
         97:09:b6:2d:ea:d8:57:db:4e:c6:c3:25:9d:60:00:80:c4:f2:
         fe:13:19:f3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGhyiauc7bHWyfKzRKlu2vJjOnrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDMTZBRDRGODJFNzJEOTI4N0E1RDRFQjk5NzY4QjBD
NDFDODA2MTAeFw0yNjAxMDYyMDUxNDlaFw0yNzAxMDUyMDU2NDlaMDMxMTAvBgNV
BAMTKDM1QzNCRDRDNjg3NDZGOTYzNTg5ODIxMEI2N0ZCMTJDOTZEMURBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+KYZ0WYZvTI17RiIv+eoeAot
bPHvNuwWFZ1k/wbQ6XjrrOEnoT5WrmxoODNc3Gu/o0cIPcMK+xKxI+NYi1VNeAvP
o6OL2d/XDUSjuMKIRD/iWkx50WFsWncyNs3L2YvZrTdPl0FA7M2pmQZXtMTrl4lv
qT5vXhDyXeqXAXdkgtuvs0jeqaCdP045OWRPpnrsJsU2lcY2vmrM91FDxZ1xDFv5
SLyVSWvf7VRg+om42ySSAxBijX+difgdRLy5nbY4/zM9pqsu4gW28qRmUAnSwbrZ
WZ+zqjuK1P/2ZBRTEmITe68nkAdAek0pr7+ssDafvXuRpTaMnLBrpYlK6WwlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUNcO9TGh0b5Y1iYIQtn+xLJbR2kQwHwYDVR0j
BBgwFoAUtsFq1Pguctkoel1OuZdosMQcgGEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0Q1MDBERkQ3QkIxQTZBMTMyNjQ0RDkzQ0ZERjUzMTc0
Qjg0MzVBNjQwRjhCQTc0MDJFNkU2RTEzRkIwNTM2LzAvQjZDMTZBRDRGODJFNzJE
OTI4N0E1RDRFQjk5NzY4QjBDNDFDODA2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkMxNkFENEY4MkU3MkQ5Mjg3
QTVENEVCOTk3NjhCMEM0MUM4MDYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNENTAwREZEN0JCMUE2QTEzMjY0NEQ5M0NGREY1MzE3NEI4NDM1QTY0
MEY4QkE3NDAyRTZFNkUxM0ZCMDUzNi8wLzMxMzkzMDJlMzUyZTMxMzYzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+BaAwDQYJ
KoZIhvcNAQELBQADggEBAD8P3y01tpY+109QwQObMke5st9IoI8ND7sadwQeluV5
IMlw2w3FgRo0LqPbntHz3cVpyI6KXIWyBqqeDAZX3v+jm9RK5rXDIkeRbVnVwhEp
W9rdfmId0JaoBLsp2k/+lBu/15vqLpapfDIPuIvKPv42NRpDeK9v7XK75kGWGMzK
Y7vVKvHSNIpV8qJGV97vsLo1/h7PaVQD8qdIqkfjjpbxKR042Ihh2QIvEzzj53gy
+BPRld2zqs+aK/C8bcj7YhxA8xJSCloCyFlqOxBz/TpF9oct2BnRESEugFNVfESt
L16lNjqlAhn+h5cJti3q2FfbTsbDJZ1gAIDE8v4TGfM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:20 2026 by rpki-client