Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa
File:                     3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          QidYZjTS/wQPQyMvHX81iy6zrHCgsd1cbYConFuzA0A=
Subject key identifier:   5B:2B:9C:BA:E6:38:23:0F:E0:2B:ED:08:E1:07:8F:03:E5:AF:43:48
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       187F8E55832C44306CA76E03FE379BA9DB1DACDF
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:40 +0000
ROA not before:           Thu 03 Sep 2026 13:28:40 +0000
ROA not after:            Thu 02 Sep 2027 13:33:40 +0000
asID:                     27827
IP address blocks:        186.121.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7f:8e:55:83:2c:44:30:6c:a7:6e:03:fe:37:9b:a9:db:1d:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:40 2026 GMT
            Not After : Sep  2 13:33:40 2027 GMT
        Subject: CN=5B2B9CBAE638230FE02BED08E1078F03E5AF4348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:11:7c:55:5c:5c:92:76:39:e9:38:e0:f9:
                    ca:70:cd:f6:9f:d2:c0:f4:c3:61:a8:aa:03:86:9b:
                    8a:90:6f:61:8e:96:5c:0b:56:62:dd:18:9e:0a:ee:
                    85:05:05:44:be:13:2b:fd:85:dc:f0:0c:8d:ba:21:
                    7c:00:c5:3a:02:fe:4b:f7:e4:84:9c:d9:44:c8:13:
                    59:bf:2e:cf:5e:2d:f7:d9:5b:4f:a1:34:96:67:66:
                    da:c9:92:99:5a:cf:49:1f:96:f3:1d:4e:08:0c:1d:
                    50:10:5f:cd:58:64:e8:58:15:c4:b2:a6:89:f7:f1:
                    4f:fb:82:ff:88:a3:c3:0f:07:ca:a0:00:ef:ab:49:
                    3e:8e:c0:54:ac:cd:7b:49:26:98:8e:db:40:65:4e:
                    c9:91:0b:80:6d:c9:56:fe:78:99:cd:ec:24:07:a6:
                    aa:10:5e:cf:04:72:79:97:e1:9d:74:40:13:aa:9f:
                    d1:8c:f6:8d:0a:e4:b1:c3:84:be:d4:51:d6:c4:0c:
                    a4:61:9f:e5:6d:72:28:6f:5e:23:91:27:1a:b2:95:
                    10:14:28:12:70:7b:9d:e5:6f:90:b8:b1:24:24:46:
                    62:60:61:31:cd:cd:ea:95:0e:4f:5b:3d:74:20:95:
                    e9:f2:3b:41:a9:21:95:4f:ad:78:b1:b4:e2:b2:8a:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2B:9C:BA:E6:38:23:0F:E0:2B:ED:08:E1:07:8F:03:E5:AF:43:48
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0f:fd:cd:c4:ba:93:17:cd:f1:56:14:3d:f5:f7:11:93:7f:
         3e:70:54:fd:d0:44:3f:4f:74:86:db:eb:7f:4f:1e:8d:d1:02:
         02:94:c7:7b:be:10:3b:20:63:b5:33:0b:21:10:32:4c:a4:60:
         6b:c0:62:9d:1f:5f:bb:13:c3:fc:1f:b8:5b:0b:fd:92:ce:53:
         68:5b:db:ea:a2:d6:c9:7b:96:c0:14:4a:70:f7:8c:c8:26:d7:
         d9:a2:8f:92:a9:bd:7b:bc:1a:0a:89:7d:7e:61:f4:f1:fd:5f:
         d3:e1:c6:9d:54:c3:53:42:c5:58:a2:aa:0a:e2:9c:9d:2c:c2:
         f7:a2:0f:f5:ad:a7:a4:7a:9b:f1:ab:d4:05:b2:06:5d:2c:ae:
         75:c7:df:71:a6:71:37:40:f5:e5:55:ff:94:b3:93:fd:63:f7:
         75:1b:96:e2:78:33:c3:65:33:ce:d1:95:7f:ba:57:af:79:15:
         f2:96:16:64:1f:9e:bc:6e:b3:91:c0:10:24:51:4e:9e:f1:aa:
         92:e7:ef:f4:79:21:dc:18:cd:e7:6b:a5:3e:1b:c1:df:84:08:
         e6:1b:eb:98:86:74:89:74:4a:0d:37:f6:db:19:9f:2c:73:1e:
         ce:74:d3:05:0b:07:83:36:f1:41:20:71:0f:55:8a:a5:b5:93:
         bc:9d:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:31 2026 by rpki-client