Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e322e3232342e302f32302d3234203d3e203138383039.roa
File:                     3139302e322e3232342e302f32302d3234203d3e203138383039.roa (raw, json)
Hash identifier:          yLtISkS4fdwxeMj+TxGBtuCekEZ6fXY/l+R4sEPKkEE=
Subject key identifier:   06:F1:FC:CA:DB:0F:A7:87:4A:54:CC:51:D0:AE:48:36:6F:37:A2:BC
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       2ECE0D31BA822A7C837E4F921B25A475CD7BBB89
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e322e3232342e302f32302d3234203d3e203138383039.roa
Signing time:             Fri 24 Oct 2025 14:35:06 +0000
ROA not before:           Fri 24 Oct 2025 14:30:06 +0000
ROA not after:            Fri 23 Oct 2026 14:35:06 +0000
asID:                     18809
IP address blocks:        190.2.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Nov 2025 18:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:0d:31:ba:82:2a:7c:83:7e:4f:92:1b:25:a4:75:cd:7b:bb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:06 2025 GMT
            Not After : Oct 23 14:35:06 2026 GMT
        Subject: CN=06F1FCCADB0FA7874A54CC51D0AE48366F37A2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:07:94:5e:8f:24:03:8c:8e:60:8a:20:9a:
                    0e:b6:37:ac:73:11:8e:ad:82:53:36:ea:00:3d:66:
                    b3:f1:22:81:27:ec:7a:27:35:02:5e:35:58:f9:a3:
                    3e:e5:41:2d:87:13:ea:17:2e:de:af:5d:9b:30:54:
                    fd:df:de:7b:bf:51:57:a5:d8:f3:ed:86:04:86:01:
                    a9:30:04:42:9a:47:a1:e7:48:08:2a:53:ee:dd:07:
                    56:c4:fd:ac:75:29:da:cc:45:84:88:a8:83:fc:97:
                    13:15:22:54:89:a4:e3:8d:b8:b4:81:1e:ff:8b:85:
                    97:07:42:fe:a3:cd:20:1f:e5:b0:db:a3:34:17:8f:
                    64:1c:91:00:a3:68:f6:3b:b7:56:5e:02:59:b1:10:
                    ac:5c:3c:6e:04:70:f7:10:0a:3b:51:6b:04:32:02:
                    90:9d:27:b6:b6:e3:3c:e3:c1:d1:6f:5d:c2:e5:b2:
                    5c:f5:fd:81:9f:71:f0:db:f5:82:73:c0:e3:5d:64:
                    02:7d:3f:6d:59:44:da:2c:19:c4:b9:97:56:23:18:
                    4f:90:98:02:f6:5f:65:e0:64:a3:56:f4:64:b8:53:
                    58:62:50:c2:0d:a8:b0:8f:19:8d:fb:66:72:04:a4:
                    79:08:9b:26:d2:2a:ab:d0:d5:e0:92:0f:7a:a8:68:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F1:FC:CA:DB:0F:A7:87:4A:54:CC:51:D0:AE:48:36:6F:37:A2:BC
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e322e3232342e302f32302d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:dc:a3:d1:cd:5d:cb:b4:e8:78:eb:ea:23:f3:9c:22:c4:
         05:16:fe:be:dd:46:2a:93:8e:31:0f:5d:3e:b8:0f:a2:bf:25:
         68:34:92:79:37:2d:1a:df:40:50:47:67:0d:2a:46:2d:5e:67:
         cc:bf:0f:f7:6e:07:e2:ba:21:6c:12:5c:d8:9e:e6:2f:41:27:
         67:e0:c5:f2:75:8c:2a:02:03:f2:7d:42:71:e8:82:17:0c:d0:
         13:80:3b:e5:76:49:1b:ec:eb:09:2a:9c:b2:12:cb:50:f8:25:
         1d:5e:b7:62:b3:b8:0d:e8:14:b8:21:76:8e:4f:70:59:35:bf:
         a9:c1:6a:1f:9f:1e:ce:26:3a:b5:9c:ce:0f:41:af:59:82:fc:
         9c:66:c5:f8:2c:02:cd:9b:a1:b6:8e:8b:c8:00:e2:b6:02:15:
         1d:7b:90:02:b8:04:8d:cf:ec:d4:8a:4f:0e:55:5a:b1:8b:4d:
         f2:cc:e3:5e:4b:b9:76:5d:c8:ff:a0:69:90:9f:aa:32:4c:e9:
         f7:12:a6:f3:8e:3e:7c:b2:27:b3:c9:8a:36:c4:2d:cd:c0:df:
         bf:85:70:f8:37:4f:1a:6e:8e:1c:1b:4f:84:28:c2:b2:e3:8a:
         65:4c:b0:f8:8d:2b:56:3c:56:47:80:61:d3:1e:30:12:d3:da:
         f6:39:22:18
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULs4NMbqCKnyDfk+SGyWkdc17u4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMDZaFw0yNjEwMjMxNDM1MDZaMDMxMTAvBgNV
BAMTKDA2RjFGQ0NBREIwRkE3ODc0QTU0Q0M1MUQwQUU0ODM2NkYzN0EyQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yAeUXo8kA4yOYIogmg62N6xz
EY6tglM26gA9ZrPxIoEn7HonNQJeNVj5oz7lQS2HE+oXLt6vXZswVP3f3nu/UVel
2PPthgSGAakwBEKaR6HnSAgqU+7dB1bE/ax1KdrMRYSIqIP8lxMVIlSJpOONuLSB
Hv+LhZcHQv6jzSAf5bDbozQXj2QckQCjaPY7t1ZeAlmxEKxcPG4EcPcQCjtRawQy
ApCdJ7a24zzjwdFvXcLlslz1/YGfcfDb9YJzwONdZAJ9P21ZRNosGcS5l1YjGE+Q
mAL2X2XgZKNW9GS4U1hiUMINqLCPGY37ZnIEpHkImybSKqvQ1eCSD3qoaErXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUBvH8ytsPp4dKVMxR0K5INm83orwwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzkzMDJlMzIyZTMyMzIzNDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzgzODMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+AuAwDQYJ
KoZIhvcNAQELBQADggEBABG33KPRzV3LtOh46+oj85wixAUW/r7dRiqTjjEPXT64
D6K/JWg0knk3LRrfQFBHZw0qRi1eZ8y/D/duB+K6IWwSXNie5i9BJ2fgxfJ1jCoC
A/J9QnHoghcM0BOAO+V2SRvs6wkqnLISy1D4JR1et2KzuA3oFLghdo5PcFk1v6nB
ah+fHs4mOrWczg9Br1mC/JxmxfgsAs2bobaOi8gA4rYCFR17kAK4BI3P7NSKTw5V
WrGLTfLM415LuXZdyP+gaZCfqjJM6fcSpvOOPnyyJ7PJijbELc3A37+FcPg3Txpu
jhwbT4QowrLjimVMsPiNK1Y8VkeAYdMeMBLT2vY5Ihg=
-----END CERTIFICATE-----
Generated at Tue Oct 28 07:12:40 2025 by rpki-client