Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e32382e302e302f31352d3135203d3e203133343839.roa
File:                     3139302e32382e302e302f31352d3135203d3e203133343839.roa (raw, json)
Hash identifier:          ZGO9mjv5TbZvoBBoTlRzK6F+LXFY3z5Whn/OzPCmmSM=
Subject key identifier:   8D:43:E9:8C:AD:FC:04:95:5F:B6:2A:A2:B0:63:AF:91:C0:90:57:4D
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4B6BA588B76929EE1814D573EA2F94007F51A274
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e32382e302e302f31352d3135203d3e203133343839.roa
Signing time:             Mon 01 Sep 2025 23:42:34 +0000
ROA not before:           Mon 01 Sep 2025 23:37:34 +0000
ROA not after:            Mon 31 Aug 2026 23:42:34 +0000
asID:                     13489
IP address blocks:        190.28.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6b:a5:88:b7:69:29:ee:18:14:d5:73:ea:2f:94:00:7f:51:a2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep  1 23:37:34 2025 GMT
            Not After : Aug 31 23:42:34 2026 GMT
        Subject: CN=8D43E98CADFC04955FB62AA2B063AF91C090574D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:9f:22:66:5b:26:f1:e7:fc:c3:1d:7e:a9:
                    91:54:1b:59:dd:cb:a6:b2:72:2b:e7:0f:42:9e:af:
                    97:c4:e7:1b:64:00:21:82:1c:5e:0e:bd:17:ac:38:
                    50:1a:87:bb:fe:22:8c:37:d5:fd:48:ba:d6:60:39:
                    c5:07:a1:d7:9a:ba:60:cc:72:41:b1:32:bc:95:da:
                    a0:e1:44:71:88:eb:00:75:ad:68:ef:3b:b5:0a:74:
                    94:eb:c0:d2:9c:62:6e:9c:0b:9f:6f:13:e0:43:32:
                    7d:20:46:4c:15:e3:b5:c5:9e:a6:93:75:6f:5a:be:
                    35:12:93:bc:c6:da:dc:d2:a9:88:69:ca:4b:a7:f1:
                    2f:79:85:ab:ea:36:3f:20:e9:be:04:79:24:f1:d9:
                    26:91:f7:83:1e:15:46:bd:90:af:91:8c:78:0f:ae:
                    e8:71:d6:3c:39:8b:dc:ab:36:7f:ee:d5:a6:77:12:
                    fa:22:b3:96:9c:d1:ce:a1:a0:20:22:26:c6:0b:be:
                    80:3a:e7:8d:be:f5:f8:57:3f:74:f2:b3:63:48:34:
                    7f:97:85:aa:4c:d0:39:fc:62:1e:78:56:c2:94:3c:
                    df:65:fe:68:df:25:51:2e:f9:17:03:f1:9f:5e:cf:
                    20:90:7c:ed:af:25:fd:e4:06:6d:a6:69:fb:85:90:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:E9:8C:AD:FC:04:95:5F:B6:2A:A2:B0:63:AF:91:C0:90:57:4D
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e32382e302e302f31352d3135203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.28.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:b0:bd:3f:e1:50:5f:1e:1a:9f:4d:92:70:b4:9f:66:62:
         db:8d:4a:e1:9b:2c:65:cf:f0:97:58:71:c6:4c:ef:79:b7:ed:
         f2:73:6c:b7:76:6d:63:dc:92:c2:fe:8d:c1:cb:b0:e0:d3:1e:
         b6:49:07:b4:47:9e:3b:f2:3f:4b:18:a0:a4:9c:97:d9:e8:be:
         e6:ac:ef:8e:1b:9e:08:2f:00:73:10:98:7c:6b:e4:2b:64:90:
         a1:77:94:f4:13:cb:a9:5b:36:23:c2:26:e1:ed:98:a1:73:a1:
         fc:08:d4:5f:4d:b1:54:c4:5a:c4:1f:0f:89:f6:4c:35:54:c9:
         1e:52:34:8b:2c:34:75:b4:60:61:4f:14:68:d4:c8:7f:c3:65:
         78:25:d3:e7:7d:0f:cf:8b:9a:b0:49:d3:0f:97:48:29:89:45:
         eb:a3:a3:cc:fa:4a:2b:12:8f:3d:6d:27:8e:96:8f:9e:80:8f:
         45:07:a5:a2:7c:67:fc:3d:69:b2:3e:82:b4:8e:81:ca:c8:33:
         b6:b2:2c:a5:11:69:29:3a:73:3a:cb:ec:1c:96:44:c2:1f:54:
         62:c6:f6:90:01:ba:b7:79:bf:7a:ba:64:93:89:6e:da:d2:fc:
         d5:d0:53:ca:70:62:99:de:cd:c1:5d:64:39:cd:80:b8:81:07:
         c2:93:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:48:23 2025 by rpki-client