Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa
File:                     3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa (raw, json)
Hash identifier:          bDbDoqThBfYrcOWiEHZYkWJhSv8QyGjBakVMC7h5uT0=
Subject key identifier:   BA:BD:B1:CC:69:D5:D0:57:7A:A3:25:BC:A7:2B:2B:FE:AC:5E:94:4F
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4E22FA443AE2187026D68C8992046B3DCDDCAE58
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa
Signing time:             Tue 21 Oct 2025 05:10:00 +0000
ROA not before:           Tue 21 Oct 2025 05:05:00 +0000
ROA not after:            Tue 20 Oct 2026 05:10:00 +0000
asID:                     6535
IP address blocks:        190.110.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Oct 2025 12:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:22:fa:44:3a:e2:18:70:26:d6:8c:89:92:04:6b:3d:cd:dc:ae:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Oct 21 05:05:00 2025 GMT
            Not After : Oct 20 05:10:00 2026 GMT
        Subject: CN=BABDB1CC69D5D0577AA325BCA72B2BFEAC5E944F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:c9:f8:b4:15:82:f4:19:e8:9b:a2:bb:f1:
                    0f:88:9a:3d:0c:53:2e:f0:d9:0d:56:18:96:75:8a:
                    e7:18:4c:14:ba:d3:fe:96:dd:bf:6e:00:66:9e:e8:
                    6c:a0:f3:1d:91:33:03:5b:61:73:d2:9e:16:ae:4e:
                    e4:65:28:82:e9:13:4d:d2:e9:f2:26:4e:0d:50:76:
                    4e:33:81:e0:8b:f4:3f:ec:8b:70:bb:f9:e3:35:01:
                    e9:6a:41:a7:44:a2:c4:a0:55:56:6e:c8:7e:c1:60:
                    73:9b:71:5a:7e:41:7c:9c:93:cf:b9:7c:74:62:0e:
                    1c:6d:ac:78:87:4e:a1:65:77:8d:1d:7e:69:6c:b9:
                    80:90:41:b6:43:1e:61:ec:63:40:31:bd:a1:07:92:
                    84:66:08:c3:7e:d9:c5:64:3d:25:48:e1:b6:6f:c8:
                    9a:05:30:0e:6f:18:2b:64:82:83:05:88:4d:d5:d0:
                    34:3a:c1:db:59:f9:29:10:b3:01:35:e0:92:09:c1:
                    ee:9c:ef:5f:6a:59:e9:b6:2e:05:37:ff:0d:6c:27:
                    8a:7b:fb:ea:18:58:b1:b4:72:03:0b:26:18:72:f7:
                    7d:c0:61:40:8f:43:8a:5c:08:99:4d:95:35:89:d2:
                    52:80:77:f0:41:38:64:59:b8:dc:0f:39:c5:89:e0:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:B1:CC:69:D5:D0:57:7A:A3:25:BC:A7:2B:2B:FE:AC:5E:94:4F
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:15:97:a9:cb:74:c2:41:d9:17:a3:66:98:93:b4:cb:5d:bd:
         48:82:7e:3e:7d:e6:46:1a:a8:e6:d8:37:7a:bf:5b:3e:03:f5:
         33:5c:c9:6d:f5:fc:16:5c:6b:07:2f:d4:33:1c:12:6a:ac:1e:
         32:87:37:59:dc:5b:5f:70:5f:fa:bd:36:00:c5:7e:f8:a9:cc:
         c1:68:75:c8:30:2a:ba:90:eb:3a:95:21:59:5f:53:bf:8f:df:
         d1:fb:ff:96:51:05:45:57:b1:9e:81:a9:5d:04:38:7e:65:99:
         24:d2:d4:36:80:8a:60:a6:19:1c:bf:be:88:75:67:24:94:f5:
         70:62:3d:70:e3:e5:57:93:3b:18:f0:0d:a5:99:17:ad:d8:8d:
         bc:42:c0:3d:a0:aa:bd:05:f0:bf:4b:ef:4f:67:65:3d:6b:7e:
         52:ba:2d:e4:aa:95:e6:c4:f4:b8:17:db:41:f5:c1:eb:7e:8b:
         5b:a8:60:6f:48:f5:d4:f0:8f:e0:48:43:a5:02:da:f9:a2:3b:
         aa:9c:80:89:88:4c:4a:92:15:7e:a1:d6:dc:15:ce:ac:41:ee:
         4f:1b:a1:04:2b:1c:97:90:e3:fb:24:7a:43:9b:79:64:41:56:
         f4:06:75:12:a9:45:8f:98:59:c0:1d:01:4c:10:8a:94:66:12:
         02:17:a7:8c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTiL6RDriGHAm1oyJkgRrPc3crlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNTEwMjEwNTA1MDBaFw0yNjEwMjAwNTEwMDBaMDMxMTAvBgNV
BAMTKEJBQkRCMUNDNjlENUQwNTc3QUEzMjVCQ0E3MkIyQkZFQUM1RTk0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYisn4tBWC9Bnom6K78Q+Imj0M
Uy7w2Q1WGJZ1iucYTBS60/6W3b9uAGae6Gyg8x2RMwNbYXPSnhauTuRlKILpE03S
6fImTg1Qdk4zgeCL9D/si3C7+eM1AelqQadEosSgVVZuyH7BYHObcVp+QXyck8+5
fHRiDhxtrHiHTqFld40dfmlsuYCQQbZDHmHsY0AxvaEHkoRmCMN+2cVkPSVI4bZv
yJoFMA5vGCtkgoMFiE3V0DQ6wdtZ+SkQswE14JIJwe6c719qWem2LgU3/w1sJ4p7
++oYWLG0cgMLJhhy933AYUCPQ4pcCJlNlTWJ0lKAd/BBOGRZuNwPOcWJ4FHDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUur2xzGnV0Fd6oyW8pysr/qxelE8wHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzkzMDJlMzEzMTMwMmUzMTMyMzgy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb5ugDAN
BgkqhkiG9w0BAQsFAAOCAQEAJBWXqct0wkHZF6NmmJO0y129SIJ+Pn3mRhqo5tg3
er9bPgP1M1zJbfX8FlxrBy/UMxwSaqweMoc3WdxbX3Bf+r02AMV++KnMwWh1yDAq
upDrOpUhWV9Tv4/f0fv/llEFRVexnoGpXQQ4fmWZJNLUNoCKYKYZHL++iHVnJJT1
cGI9cOPlV5M7GPANpZkXrdiNvELAPaCqvQXwv0vvT2dlPWt+Urot5KqV5sT0uBfb
QfXB636LW6hgb0j11PCP4EhDpQLa+aI7qpyAiYhMSpIVfqHW3BXOrEHuTxuhBCsc
l5Dj+yR6Q5t5ZEFW9AZ1EqlFj5hZwB0BTBCKlGYSAhenjA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 23:34:04 2025 by rpki-client