Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134312e3136332e302f32342d3234203d3e203237363439.roa
File:                     3139302e3134312e3136332e302f32342d3234203d3e203237363439.roa (raw, json)
Hash identifier:          zT7xsR9VGzxuW9GPK4Gthl5CR4PakBm0D6Vn0TAV9Cc=
Subject key identifier:   D9:E5:96:DC:C8:EE:8C:A6:36:51:4C:E9:8F:91:9B:14:D2:4A:E4:90
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       538184E4BE4667520C097F054AE16610A39FC9AD
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134312e3136332e302f32342d3234203d3e203237363439.roa
Signing time:             Fri 24 Oct 2025 14:35:19 +0000
ROA not before:           Fri 24 Oct 2025 14:30:19 +0000
ROA not after:            Fri 23 Oct 2026 14:35:19 +0000
asID:                     27649
IP address blocks:        190.141.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:81:84:e4:be:46:67:52:0c:09:7f:05:4a:e1:66:10:a3:9f:c9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:19 2025 GMT
            Not After : Oct 23 14:35:19 2026 GMT
        Subject: CN=D9E596DCC8EE8CA636514CE98F919B14D24AE490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:65:9f:ed:ab:3a:a1:c5:9e:d1:6d:63:77:b8:
                    16:92:df:22:3f:ad:24:59:96:0d:27:9a:86:f8:eb:
                    98:40:c4:bc:40:ff:26:35:55:1b:d0:06:2d:a3:b4:
                    84:0e:49:85:59:2c:39:77:cd:3b:3c:f8:65:dc:4d:
                    0e:07:77:86:3c:44:d6:11:41:62:88:38:ce:67:2c:
                    55:37:e6:74:0b:1b:33:22:51:36:7a:9e:b4:34:70:
                    54:1e:4a:be:fe:73:81:14:24:15:c0:c8:96:59:eb:
                    fa:5f:2b:9e:6c:bb:31:a7:20:b9:49:db:5c:dc:3e:
                    c8:cc:44:d5:c7:71:a3:bc:a3:f5:2d:5f:4c:39:51:
                    ed:d0:45:66:27:af:1e:60:cc:8f:ea:6d:ff:72:07:
                    d4:e5:ea:ac:74:f9:99:e4:0c:b4:e3:08:db:2d:7f:
                    d9:87:05:0d:32:42:9a:95:4c:6b:93:43:1f:e6:4c:
                    d6:8c:29:3f:80:0d:2f:70:56:2b:95:db:18:60:67:
                    7a:03:17:8c:4e:9e:01:05:e5:78:6b:91:68:bb:8a:
                    7c:80:0f:be:e2:a5:ea:b1:c5:d4:46:6c:d8:00:21:
                    5c:12:24:64:a7:27:ee:c1:09:f2:69:0c:ba:d5:47:
                    9d:57:f6:21:7d:5e:6f:f6:74:cc:fa:02:9c:46:b3:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E5:96:DC:C8:EE:8C:A6:36:51:4C:E9:8F:91:9B:14:D2:4A:E4:90
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e3134312e3136332e302f32342d3234203d3e203237363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.141.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6b:86:1f:9f:97:37:d6:3c:19:5e:9f:2b:f5:5c:5f:f0:e7:
         62:b0:b4:cc:53:3a:18:4c:9e:5f:8e:fa:fa:f0:c8:95:f0:19:
         b9:da:d3:58:06:30:ae:76:4d:11:ae:27:3a:64:14:92:31:be:
         86:be:92:95:54:2f:d1:72:c0:34:50:6d:24:7c:fa:51:f8:95:
         c1:64:35:9b:38:bf:b9:70:86:15:2c:ad:22:78:86:fd:38:a5:
         10:0f:d1:5b:78:2a:32:80:cb:72:15:ca:29:c5:9f:c2:bb:96:
         f4:1f:07:62:09:ef:86:20:35:a9:7a:07:81:b7:44:d3:64:4e:
         16:fe:3e:7d:46:bd:56:0b:02:8e:34:fa:df:3f:87:07:04:79:
         d2:2e:b1:d6:47:e4:95:5f:ec:bd:44:88:80:35:7f:8c:88:94:
         2f:88:2c:b3:d0:00:89:7f:de:22:d2:66:a3:a3:18:45:b7:0b:
         e6:90:9a:f9:ac:64:14:a4:96:d5:e3:2e:cc:3f:2a:ce:85:14:
         96:6d:f1:cf:e7:61:a0:01:ea:20:c5:df:92:7d:02:26:db:5c:
         dc:ab:1b:d9:a9:49:96:d0:45:fc:36:ea:74:3c:4b:58:2e:ef:
         21:85:6a:41:f4:54:a0:08:80:31:45:ed:a6:04:c8:e2:ed:ff:
         98:b2:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:28 2025 by rpki-client