Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3235312e302f32342d3234203d3e203238303739.roa
File:                     3139302e352e3235312e302f32342d3234203d3e203238303739.roa (raw, json)
Hash identifier:          zRDMOHQkmUPgZYr7SDySlwnbHNyNoBbS5+WcrhSamNs=
Subject key identifier:   49:8A:44:12:23:1A:DC:58:5A:AE:F3:88:D0:D5:A4:30:E9:C6:21:38
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       3183A705B751CAEB57A894A52A5C2555FAEE3FD7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3235312e302f32342d3234203d3e203238303739.roa
Signing time:             Fri 24 Oct 2025 14:35:19 +0000
ROA not before:           Fri 24 Oct 2025 14:30:19 +0000
ROA not after:            Fri 23 Oct 2026 14:35:19 +0000
asID:                     28079
IP address blocks:        190.5.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:83:a7:05:b7:51:ca:eb:57:a8:94:a5:2a:5c:25:55:fa:ee:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Oct 24 14:30:19 2025 GMT
            Not After : Oct 23 14:35:19 2026 GMT
        Subject: CN=498A4412231ADC585AAEF388D0D5A430E9C62138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:c5:24:f6:8d:63:94:fd:e3:2e:4f:2f:fc:
                    c1:38:69:f7:93:9d:6f:22:fa:e0:4a:2b:63:78:8f:
                    ce:6e:7f:76:cd:6f:d1:c3:1e:48:75:7a:66:49:f9:
                    dd:d1:69:8a:4c:ff:51:32:ad:8a:4e:68:af:f3:47:
                    61:90:5b:eb:60:b0:92:d0:5c:ad:08:47:75:69:26:
                    80:f3:68:8a:05:ef:21:98:63:08:9a:f5:55:86:01:
                    90:39:98:94:6a:06:b2:73:dd:b3:52:de:65:76:2d:
                    b8:f0:2d:0e:4b:eb:65:3a:69:69:b1:82:fd:a5:63:
                    33:2a:65:04:df:65:46:e3:6e:f3:40:45:9f:c4:e3:
                    61:86:4d:28:ef:44:79:82:da:fc:71:f3:d3:fc:e1:
                    36:57:a8:af:02:80:af:c8:1e:69:2e:94:76:f6:b4:
                    b9:3c:c4:7b:1d:16:76:f3:15:09:fb:23:e1:68:77:
                    2d:c2:00:af:b4:d3:1d:64:c9:2e:aa:22:44:18:d8:
                    a0:79:80:b2:b5:c0:d7:8a:15:2a:ad:a5:bd:d3:bc:
                    b7:4c:2a:92:3e:f4:7c:08:f2:e2:e2:b3:a9:8c:1d:
                    07:c6:3c:af:9c:f5:f1:57:4e:2c:e1:15:d0:a4:c5:
                    26:39:62:53:ec:d5:dc:58:2c:35:82:43:8c:d3:ae:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:44:12:23:1A:DC:58:5A:AE:F3:88:D0:D5:A4:30:E9:C6:21:38
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3235312e302f32342d3234203d3e203238303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:be:d6:e1:e6:f5:06:ad:0d:58:5f:03:2c:62:5d:7b:00:74:
         ee:6e:96:f4:f4:c0:e6:24:a1:1e:30:84:46:be:35:74:e2:80:
         a2:92:5e:6d:da:c0:07:d7:57:ec:98:46:51:19:2e:a6:6c:43:
         e6:5e:7d:14:20:e2:f4:42:5c:0f:2c:6f:c3:88:a7:e3:2f:e5:
         9e:d7:41:eb:9c:00:78:9e:16:03:de:28:57:af:cb:44:40:2b:
         f6:3d:92:e9:fb:7f:6f:ca:eb:12:5a:b5:4b:eb:9b:e6:66:92:
         c6:8b:3e:42:43:c9:24:71:da:a9:58:24:34:12:ca:55:68:4d:
         9a:c6:1f:88:0d:ac:ab:03:fc:cd:40:6d:81:6b:63:1a:29:ac:
         13:3c:7d:11:94:34:4f:f5:af:cd:cf:db:69:fe:cd:70:97:57:
         a1:fc:0d:52:2a:12:83:24:90:66:0e:78:95:7c:2f:b9:db:a3:
         bc:13:2f:e7:56:ce:2e:b1:c7:98:87:b0:58:85:ee:c7:e9:4d:
         5a:5f:c7:c7:15:37:58:63:fa:c8:a4:17:b3:9c:dd:87:b0:0d:
         be:c7:bd:99:0e:ea:a6:94:ee:09:bd:4a:44:37:cc:22:d3:11:
         48:f8:59:b1:2a:9f:97:0e:2f:f0:e5:5e:12:91:9d:21:79:7b:
         ba:9b:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:38 2025 by rpki-client