Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e35372e33322e302f32302d3234203d3e203138383039.roa
File:                     3139302e35372e33322e302f32302d3234203d3e203138383039.roa (raw, json)
Hash identifier:          AZ7FS5i3qEC04IyQLvzBP6Q+3QZoO0qjj4mMiA8jnKw=
Subject key identifier:   38:C9:0A:B5:53:76:1D:12:27:F5:B4:79:79:FA:68:8C:C9:65:D6:B3
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       5C8F25E6EBE6A65FC6C98C34CDC23CAF28C469EA
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e35372e33322e302f32302d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:45 +0000
ROA not before:           Fri 25 Sep 2026 14:31:45 +0000
ROA not after:            Fri 24 Sep 2027 14:36:45 +0000
asID:                     18809
IP address blocks:        190.57.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:25:e6:eb:e6:a6:5f:c6:c9:8c:34:cd:c2:3c:af:28:c4:69:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:45 2026 GMT
            Not After : Sep 24 14:36:45 2027 GMT
        Subject: CN=38C90AB553761D1227F5B47979FA688CC965D6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:69:d3:78:c7:7a:99:72:de:f1:f7:52:8e:
                    d3:d6:ad:ce:77:0d:40:7f:2c:41:cc:57:17:4c:30:
                    6e:40:e8:e7:e4:02:27:c8:de:14:27:8c:ed:f2:ed:
                    09:10:18:cb:02:db:23:37:01:1e:6a:02:5a:b0:77:
                    c3:de:25:de:ec:43:7e:82:ac:ba:69:73:14:f2:31:
                    1c:d6:f2:e4:d8:bd:6c:3d:b3:22:04:19:4c:1d:c7:
                    b0:35:a8:a8:31:82:e6:9c:42:8c:7a:f2:3b:0a:9f:
                    75:06:c0:6f:01:60:10:da:c8:ed:a2:60:70:01:55:
                    da:c3:da:b9:df:50:76:a2:ea:92:75:3d:7f:69:a9:
                    f7:07:84:21:3f:54:a4:ff:2a:10:21:e7:a5:e4:6d:
                    a8:e5:fc:0f:e5:46:9e:00:67:76:fd:34:e2:c2:1e:
                    ca:1f:d6:e7:f3:d9:49:ba:b1:6e:d9:01:f9:4f:0e:
                    42:7c:c9:f1:45:43:3c:a3:04:2d:f8:7d:12:fa:9d:
                    b5:02:8c:56:f4:10:9e:12:ac:54:4f:40:ac:c6:b3:
                    23:e2:41:4d:a4:9d:25:d5:e2:8f:28:fe:27:56:9c:
                    ad:d7:48:c4:33:4f:00:3c:34:38:f3:8f:c8:d8:11:
                    34:c7:32:a8:d7:b1:3c:89:b7:46:ea:66:f7:be:66:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C9:0A:B5:53:76:1D:12:27:F5:B4:79:79:FA:68:8C:C9:65:D6:B3
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e35372e33322e302f32302d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:f8:93:94:58:b1:a7:f5:55:ca:75:d6:98:1d:e2:5f:9f:
         43:13:fb:45:41:b9:29:70:9f:2e:c4:df:0e:fa:ec:42:0e:c1:
         59:8e:e1:55:b9:9a:36:15:0c:ef:88:2e:67:14:30:5b:0d:55:
         7b:13:df:ca:95:9b:b5:01:e1:7d:c1:81:cf:a8:42:a4:82:4f:
         8c:89:d2:c0:16:4b:0b:66:01:65:0b:ef:1d:a3:79:43:bf:c1:
         a7:ce:52:7f:17:a4:cb:99:12:27:86:02:25:0b:f6:27:9b:7b:
         bb:ef:2f:de:c9:b5:3e:21:dd:a7:0a:77:96:77:f1:5b:83:91:
         b8:67:f7:57:63:58:0e:99:33:0e:4d:08:66:7a:27:ae:7d:57:
         c7:a2:36:06:1f:df:85:c6:a1:82:e6:82:3a:a1:a1:29:b8:a9:
         a2:06:ff:b5:57:22:e9:13:81:c3:2a:cf:ba:9d:2c:f5:08:36:
         ce:0c:47:82:39:3c:22:9c:8f:44:91:98:93:48:aa:a7:f0:c8:
         fb:c0:2c:63:46:e9:1e:8a:49:89:f7:b6:d0:88:4b:30:cf:4c:
         2e:fe:d5:ad:f2:75:1b:7e:fd:18:7f:59:03:74:3e:06:63:81:
         2c:6e:f3:43:46:c4:b1:1c:c8:f5:dc:25:a6:64:10:2e:9e:1e:
         83:79:07:a9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXI8l5uvmpl/GyYw0zcI8ryjEaeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNDVaFw0yNzA5MjQxNDM2NDVaMDMxMTAvBgNV
BAMTKDM4QzkwQUI1NTM3NjFEMTIyN0Y1QjQ3OTc5RkE2ODhDQzk2NUQ2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWGnTeMd6mXLe8fdSjtPWrc53
DUB/LEHMVxdMMG5A6OfkAifI3hQnjO3y7QkQGMsC2yM3AR5qAlqwd8PeJd7sQ36C
rLppcxTyMRzW8uTYvWw9syIEGUwdx7A1qKgxguacQox68jsKn3UGwG8BYBDayO2i
YHABVdrD2rnfUHai6pJ1PX9pqfcHhCE/VKT/KhAh56Xkbajl/A/lRp4AZ3b9NOLC
Hsof1ufz2Um6sW7ZAflPDkJ8yfFFQzyjBC34fRL6nbUCjFb0EJ4SrFRPQKzGsyPi
QU2knSXV4o8o/idWnK3XSMQzTwA8NDjzj8jYETTHMqjXsTyJt0bqZve+ZjU5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUOMkKtVN2HRIn9bR5efpojMll1rMwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzkzMDJlMzUzNzJlMzMzMjJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzgzODMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+OSAwDQYJ
KoZIhvcNAQELBQADggEBAFFf+JOUWLGn9VXKddaYHeJfn0MT+0VBuSlwny7E3w76
7EIOwVmO4VW5mjYVDO+ILmcUMFsNVXsT38qVm7UB4X3Bgc+oQqSCT4yJ0sAWSwtm
AWUL7x2jeUO/wafOUn8XpMuZEieGAiUL9iebe7vvL97JtT4h3acKd5Z38VuDkbhn
91djWA6ZMw5NCGZ6J659V8eiNgYf34XGoYLmgjqhoSm4qaIG/7VXIukTgcMqz7qd
LPUINs4MR4I5PCKcj0SRmJNIqqfwyPvALGNG6R6KSYn3ttCISzDPTC7+1a3ydRt+
/Rh/WQN0PgZjgSxu80NGxLEcyPXcJaZkEC6eHoN5B6k=
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:56:40 2026 by rpki-client