Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203231353939.roa
File:                     3139302e352e3232342e302f31392d3234203d3e203231353939.roa (raw, json)
Hash identifier:          YruNFyFuDrjeWQxVci831QbTEdYMuB/OvLZR8NsGXz4=
Subject key identifier:   91:89:D7:AA:83:96:5C:58:76:1C:50:6A:27:24:87:58:CD:25:E5:C2
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7CFE55AE469E54E3CE8A7309C6460A6905888C8B
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203231353939.roa
Signing time:             Fri 24 Oct 2025 14:35:10 +0000
ROA not before:           Fri 24 Oct 2025 14:30:10 +0000
ROA not after:            Fri 23 Oct 2026 14:35:10 +0000
asID:                     21599
IP address blocks:        190.5.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:55:ae:46:9e:54:e3:ce:8a:73:09:c6:46:0a:69:05:88:8c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:10 2025 GMT
            Not After : Oct 23 14:35:10 2026 GMT
        Subject: CN=9189D7AA83965C58761C506A27248758CD25E5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:af:19:89:6d:35:48:4f:1a:86:28:55:ca:69:
                    b5:ff:60:71:2e:68:88:36:a0:98:c4:d9:95:6a:8e:
                    96:38:3e:a0:fb:d8:d8:5d:66:62:c1:5a:05:72:6a:
                    a6:17:50:2d:b7:71:bc:a8:29:2e:e9:06:3a:a6:39:
                    ea:bc:6b:b7:17:24:c0:92:96:f2:e8:f6:8f:04:41:
                    c7:15:23:5b:b1:33:f1:04:2b:38:97:4a:8c:6b:e4:
                    94:25:cb:dc:95:30:83:77:9e:ec:36:3f:5a:96:fe:
                    9c:7f:1f:87:0d:40:19:c1:e8:a3:34:f3:2e:88:93:
                    3c:d0:20:f0:78:d9:26:10:07:62:53:c9:d6:d4:6d:
                    fd:5a:1d:0c:24:78:87:1e:6e:d7:37:db:b2:53:43:
                    7f:49:17:32:c2:03:aa:c2:3b:c3:de:b7:19:2c:fa:
                    22:2d:f0:bf:c7:02:e8:66:4d:d2:c2:e2:42:ab:c6:
                    5a:8f:da:7f:90:83:e1:66:e0:0a:c2:88:32:4e:7b:
                    5e:8f:4e:74:8b:8a:98:bc:75:6b:db:a4:f8:af:29:
                    be:e2:a0:9e:da:44:7b:81:bf:d0:cf:ed:29:fa:7e:
                    10:e8:94:2e:2b:8b:9e:11:13:cb:88:bc:7f:f2:79:
                    c8:62:db:6b:ee:a7:a9:56:05:f3:92:cf:5f:b8:06:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:D7:AA:83:96:5C:58:76:1C:50:6A:27:24:87:58:CD:25:E5:C2
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203231353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:b4:33:cd:ac:0a:81:32:01:22:7d:04:ba:1f:10:4b:1b:
         89:ea:6c:62:a6:97:1a:1c:90:fc:87:64:91:e9:53:bc:22:fd:
         76:57:da:39:2d:a8:c6:e1:48:b1:64:d4:cd:26:21:ee:34:d6:
         f8:aa:ef:f5:87:99:c7:fc:a4:c7:59:35:6c:8f:f0:64:08:fb:
         d2:06:70:21:7f:d8:41:40:9e:0e:34:a5:39:c7:fd:52:71:06:
         25:40:b0:94:10:1d:46:10:9f:fa:43:c1:44:e8:0e:c9:5a:85:
         4a:17:18:a2:78:c0:fa:1f:1a:f1:76:4c:17:56:24:31:3f:77:
         33:e0:3b:c5:4f:30:b7:2f:54:6e:ff:c9:84:64:9e:7f:85:6f:
         ce:01:d7:9b:c1:36:4a:86:2e:bb:44:93:0d:5c:14:cc:10:65:
         6a:57:3a:ca:3b:84:28:4c:b6:53:35:f9:3c:43:de:72:35:38:
         bf:df:07:68:7f:ab:73:97:cc:63:91:fe:b3:b4:d1:4a:13:43:
         00:0e:dd:24:a2:1c:52:fb:bd:c3:2e:5d:55:53:c4:43:0d:cb:
         3a:7b:56:f6:94:b2:d1:eb:0d:29:ac:5d:f1:9b:53:3c:55:27:
         7a:d0:fa:80:75:fe:df:45:27:ce:9d:43:53:6a:ba:c5:7a:89:
         b4:e6:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:05:11 2025 by rpki-client