Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131362e302e302f31342d3234203d3e2036353335.roa
File:                     3139312e3131362e302e302f31342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          f1ynW+1IJkMSUdClV25L3nFEF+IvyHi7fgSR7siA0eo=
Subject key identifier:   A4:E4:84:C6:39:66:5A:DE:40:F7:7F:BE:82:1D:8E:75:E5:45:82:EE
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       55B9A986997B1CB9FE3973DDF943B6CE2194B68F
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131362e302e302f31342d3234203d3e2036353335.roa
Signing time:             Tue 21 Oct 2025 05:15:01 +0000
ROA not before:           Tue 21 Oct 2025 05:10:01 +0000
ROA not after:            Tue 20 Oct 2026 05:15:01 +0000
asID:                     6535
IP address blocks:        191.116.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Oct 2025 12:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b9:a9:86:99:7b:1c:b9:fe:39:73:dd:f9:43:b6:ce:21:94:b6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Oct 21 05:10:01 2025 GMT
            Not After : Oct 20 05:15:01 2026 GMT
        Subject: CN=A4E484C639665ADE40F77FBE821D8E75E54582EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:2d:b9:78:b5:2a:55:ec:8e:35:c2:76:36:
                    9a:29:25:4c:3b:86:51:62:ac:8b:ab:35:51:69:8b:
                    77:23:7a:e5:d6:60:54:cb:c3:15:44:34:52:67:17:
                    b5:99:11:80:0d:b6:c8:dd:6e:f1:80:2c:c1:55:7d:
                    47:2c:f0:95:0a:6a:c1:0e:d0:e2:31:0d:1d:23:f2:
                    a9:ff:8c:74:49:8d:5f:21:40:e1:f3:5b:f1:3e:b2:
                    e0:eb:8f:64:b8:d8:d0:3a:04:74:b5:ad:07:af:90:
                    ec:99:40:e9:14:32:97:85:5e:76:28:7a:a8:a0:df:
                    c0:ca:ba:8f:49:9d:99:71:c5:ed:53:39:59:3c:31:
                    bf:e7:c5:40:1e:61:29:49:97:66:76:53:b9:e7:56:
                    c8:7e:04:f9:25:95:e5:00:94:9c:f9:8a:f9:f2:73:
                    34:d4:78:b7:ce:d5:2c:67:4e:b3:ac:f5:f8:db:d4:
                    5a:50:52:7c:bf:f7:fe:e9:52:cd:20:af:fe:87:f4:
                    35:24:80:cd:39:fa:36:5d:22:84:76:92:ab:a6:16:
                    df:e9:4c:b1:f7:86:14:df:3a:e2:e5:e4:4c:39:a1:
                    ee:e2:13:5a:70:c0:4c:42:2b:ad:d0:e3:e4:e4:49:
                    a4:79:e6:8a:29:99:10:d3:42:f9:a4:71:84:d9:3e:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:84:C6:39:66:5A:DE:40:F7:7F:BE:82:1D:8E:75:E5:45:82:EE
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131362e302e302f31342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.116.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:bf:e9:dd:39:70:b7:25:fb:94:fb:74:0c:19:cb:e9:bf:
         e1:3d:27:86:4a:af:ee:d1:04:1e:b3:63:df:dd:d3:49:f4:31:
         a6:99:74:aa:cd:cd:d2:32:16:ee:5a:a9:e1:f0:0d:5f:7f:78:
         03:61:ff:21:2e:ad:09:48:30:fc:8b:26:08:15:a4:c2:c2:5c:
         40:16:44:21:24:c2:da:cd:0f:76:9e:a8:85:a6:47:6d:35:d3:
         30:82:22:aa:f6:cd:ff:bb:85:d9:e7:7a:34:9c:9e:c8:77:c1:
         65:f0:05:79:7c:89:2d:23:b8:e2:06:99:9c:a9:78:27:5d:24:
         d5:e8:81:80:0c:3e:f9:f8:b8:7a:32:b9:b4:bc:c7:9f:07:33:
         cc:6a:83:58:69:9f:6b:e7:73:2a:3c:df:6a:0a:b7:75:e9:b0:
         17:a0:cb:3e:b4:53:57:4e:fd:f2:a2:06:4b:e4:df:82:c0:b5:
         13:22:e6:74:95:83:0b:35:32:7b:9a:e9:fc:0f:38:8e:fb:c0:
         e5:a3:a2:88:91:1b:af:c3:88:7a:ba:56:4e:7b:dc:30:1f:fd:
         29:65:61:35:67:10:fe:b9:76:18:37:37:62:c0:f8:c4:97:6d:
         27:13:ba:ad:79:a3:30:c7:4b:69:e1:94:9f:b3:d7:59:0e:9c:
         cd:10:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:34:04 2025 by rpki-client