Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203138383039.roa
File:                     3139302e352e3232342e302f31392d3234203d3e203138383039.roa (raw, json)
Hash identifier:          +BNQSkvDOskgz9dt0R3MVMk00MmV0hMFBgEhQp0Mg2c=
Subject key identifier:   FE:22:14:EF:22:98:54:6B:0D:0F:83:E2:F7:53:C4:F4:8D:AF:E3:DF
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       42A401D800953E18A2A858ABDBFBB51AA407F2F9
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203138383039.roa
Signing time:             Fri 24 Oct 2025 14:35:23 +0000
ROA not before:           Fri 24 Oct 2025 14:30:23 +0000
ROA not after:            Fri 23 Oct 2026 14:35:23 +0000
asID:                     18809
IP address blocks:        190.5.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Nov 2025 18:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a4:01:d8:00:95:3e:18:a2:a8:58:ab:db:fb:b5:1a:a4:07:f2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:23 2025 GMT
            Not After : Oct 23 14:35:23 2026 GMT
        Subject: CN=FE2214EF2298546B0D0F83E2F753C4F48DAFE3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:b9:40:e2:ba:bc:5a:56:1e:b6:50:fe:72:
                    a8:b5:2b:31:67:d5:ab:63:a9:68:82:2a:e7:08:3b:
                    ce:31:00:d8:25:66:0e:2f:40:8e:e7:db:cf:fe:8a:
                    77:ca:4a:24:82:bc:e1:e1:51:f8:9e:44:59:bd:73:
                    67:44:6d:3c:09:0c:dc:3f:22:18:97:09:9b:58:36:
                    82:dc:0e:57:8e:be:69:45:27:5d:7f:53:41:ae:6c:
                    d9:2d:31:a0:4c:92:0c:9f:5d:16:35:4b:f8:ff:c0:
                    f8:e1:cd:5e:91:08:21:a4:14:da:e2:cf:44:97:c4:
                    8f:5a:4d:f1:2f:2c:0c:41:87:2c:76:ba:5d:57:30:
                    c9:7a:df:97:35:ac:56:94:3f:fe:a8:21:08:86:fd:
                    7c:e1:ba:be:88:af:9a:8e:f4:48:7c:f7:3e:ed:e2:
                    f6:55:29:81:d5:63:90:96:68:b2:f6:08:a8:0a:b0:
                    0a:49:00:7e:a3:a1:36:49:1b:06:4f:d3:67:dd:eb:
                    c2:76:e0:72:10:48:f7:1c:db:34:30:07:11:e1:e1:
                    9a:2a:35:cd:0a:b1:73:c3:e7:6c:33:e8:fe:c5:02:
                    2f:cf:20:5f:b7:32:26:d7:c1:55:2a:09:b5:41:aa:
                    ca:60:d1:15:ac:05:74:fd:ce:bb:1a:b7:ef:a7:a6:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:14:EF:22:98:54:6B:0D:0F:83:E2:F7:53:C4:F4:8D:AF:E3:DF
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:df:e6:c5:3b:49:b6:13:cd:60:09:e3:97:0d:3a:bb:85:55:
         0e:b1:e9:d1:cb:ce:69:1f:a1:08:4c:e3:5f:84:5f:b2:a1:1d:
         a4:a0:86:b9:3b:03:18:f4:10:d9:72:c7:dc:ed:65:74:98:32:
         79:77:16:4f:96:8d:63:92:57:b2:13:4f:41:5e:69:46:53:44:
         1a:77:33:ed:ad:3d:10:cb:12:ed:52:11:03:dc:8d:48:a5:6e:
         11:ce:9c:a5:ee:ae:f3:d9:7f:e4:4c:36:dd:4c:e2:81:34:17:
         96:2e:88:42:0d:fa:9f:c9:bd:a0:49:95:3d:bb:f2:87:11:2e:
         f0:89:f6:7b:ab:85:5b:ae:08:b1:e7:b7:f4:cc:69:d6:35:10:
         99:66:9b:a6:09:e9:d3:b4:79:75:d7:ed:6c:9f:3b:38:9f:33:
         4d:3a:a4:fd:c1:08:b1:dd:e5:35:34:04:12:15:49:49:d3:a1:
         2c:d6:2d:e4:99:fe:3c:12:b4:55:a8:3c:06:ce:1f:db:7f:61:
         e1:61:3f:48:2a:a1:83:8f:7c:36:72:72:54:13:94:b4:23:d5:
         99:ea:cf:b7:92:ce:d0:78:6d:b0:88:50:f1:4c:e3:57:4b:10:
         2b:9d:b5:1f:8d:41:71:4f:76:2d:5c:fa:6a:2e:89:d1:62:30:
         6a:f4:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:02:43 2025 by rpki-client