Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/3139302e39372e3132382e302f31392d3234203d3e203139343239.roa
File:                     3139302e39372e3132382e302f31392d3234203d3e203139343239.roa (raw, json)
Hash identifier:          9eyDFMRrKYURvEvJWfPUxN4uLMM3/E9HhOlerMlnCHo=
Subject key identifier:   B5:52:9B:4F:4D:F4:AA:C8:17:12:54:4E:BA:19:16:B2:6A:CC:4E:AD
Certificate issuer:       /CN=5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3
Certificate serial:       5B85409A6A21CE1C9F36B5789A039313E5FEE2E5
Authority key identifier: 5C:9D:24:50:11:0D:4C:E5:AC:AF:DB:64:D9:DC:3C:5D:8A:F4:08:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/3139302e39372e3132382e302f31392d3234203d3e203139343239.roa
Signing time:             Thu 29 May 2025 16:20:23 +0000
ROA not before:           Thu 29 May 2025 16:15:23 +0000
ROA not after:            Thu 28 May 2026 16:20:23 +0000
asID:                     19429
IP address blocks:        190.97.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 20:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:85:40:9a:6a:21:ce:1c:9f:36:b5:78:9a:03:93:13:e5:fe:e2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3
        Validity
            Not Before: May 29 16:15:23 2025 GMT
            Not After : May 28 16:20:23 2026 GMT
        Subject: CN=B5529B4F4DF4AAC81712544EBA1916B26ACC4EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:c7:67:02:3e:94:9d:ca:d6:60:b2:80:8a:
                    c6:8e:0a:63:2f:f5:dc:fb:f0:4e:ad:84:f1:cf:4b:
                    b6:d1:1e:d4:f8:ef:40:4a:e8:f7:50:b4:37:27:98:
                    08:9e:93:07:93:0e:d1:c2:e4:7e:a8:c0:e6:03:e8:
                    f8:07:b8:fa:c9:9c:ec:df:d8:45:63:f6:cd:6c:1f:
                    a4:93:b7:97:f0:7e:07:62:8e:3f:06:23:29:05:54:
                    d1:26:62:1f:86:81:10:6b:c6:b0:d4:bb:48:da:6b:
                    e8:99:73:4e:83:29:49:86:b5:28:88:d1:7c:f2:e9:
                    25:54:23:9b:38:22:8a:13:a6:fa:f6:03:fc:a5:6a:
                    18:47:76:81:1e:1d:bb:02:bd:99:c4:fe:a3:66:93:
                    53:38:1f:5a:d9:77:52:08:5c:4c:b1:36:5f:7a:c5:
                    d2:0f:3e:21:3d:a7:02:74:ea:1c:04:d0:8d:d8:b8:
                    dc:c3:fe:30:9a:a1:31:5c:67:06:49:8b:ee:5c:18:
                    a5:f2:5b:e9:89:ab:74:da:cc:3b:b1:23:f0:70:36:
                    9c:7d:bd:a3:d7:36:e1:46:6a:c9:8f:69:87:02:b4:
                    bd:aa:bc:e5:82:03:e5:d0:65:60:82:3f:82:79:f1:
                    bb:c3:14:b0:74:24:12:13:03:ca:03:23:04:30:5f:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:9B:4F:4D:F4:AA:C8:17:12:54:4E:BA:19:16:B2:6A:CC:4E:AD
            X509v3 Authority Key Identifier:
                keyid:5C:9D:24:50:11:0D:4C:E5:AC:AF:DB:64:D9:DC:3C:5D:8A:F4:08:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9D2450110D4CE5ACAFDB64D9DC3C5D8AF408D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF91C54C92CCC19AF12FA0B4A3101048D5D88D7AD24A8395B3F03710350658E/0/3139302e39372e3132382e302f31392d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:69:f4:7c:7f:c2:03:c0:70:96:24:a9:88:4f:32:9f:ce:8f:
         bd:74:e0:68:2e:46:f6:54:d7:ad:b0:aa:82:5d:3b:91:ed:c3:
         86:6c:22:aa:60:37:d7:7c:9c:5c:99:3e:f3:23:e5:04:65:de:
         9e:b9:4a:5c:75:85:99:66:3c:67:00:d8:35:f4:9a:64:03:ac:
         99:2b:65:d3:b9:17:d9:0b:19:fc:07:94:40:e5:92:3d:a1:fd:
         58:54:7e:d2:27:f0:c9:6e:87:07:5e:fa:df:d3:11:27:46:a7:
         43:91:1b:a3:1b:79:09:68:b4:dc:45:bb:06:86:6a:cc:c5:ad:
         25:68:6f:a9:79:3e:d0:67:93:d6:fa:6d:11:1b:db:c4:d4:ba:
         0f:06:19:66:9f:ee:98:14:d1:94:ad:db:4d:f4:16:6c:17:3a:
         93:1c:22:00:c1:8f:95:51:9f:e7:f8:57:55:40:71:92:ff:9e:
         65:6f:af:2c:f0:6d:1f:17:b5:14:bc:8a:15:15:d7:62:c0:00:
         d0:cb:59:c2:ca:e1:c1:8b:20:df:af:d1:49:db:16:8f:fc:90:
         9c:3c:b8:e4:f5:45:86:89:dc:34:f8:42:c8:81:83:75:41:86:
         fc:54:e0:55:10:18:21:41:8b:a2:69:e4:bf:57:0f:44:db:b8:
         ba:b8:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:10:44 2025 by rpki-client