Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa
File:                     3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          IzLIj8xyQ6VfOgjsfo1kjH7+17HYiIfdIWhPEHI8isY=
Subject key identifier:   A0:EC:DE:7F:21:96:AA:33:8C:10:DF:89:DB:F5:81:54:F5:B7:C4:DF
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       4866E71973BD2372B04EA5D2A7568AF7F7A11131
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa
Signing time:             Tue 01 Sep 2026 13:33:15 +0000
ROA not before:           Tue 01 Sep 2026 13:28:15 +0000
ROA not after:            Tue 31 Aug 2027 13:33:15 +0000
asID:                     27827
IP address blocks:        186.121.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:66:e7:19:73:bd:23:72:b0:4e:a5:d2:a7:56:8a:f7:f7:a1:11:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  1 13:28:15 2026 GMT
            Not After : Aug 31 13:33:15 2027 GMT
        Subject: CN=A0ECDE7F2196AA338C10DF89DBF58154F5B7C4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:02:83:e0:57:34:75:42:e5:11:16:a7:75:
                    0d:93:b4:2e:68:eb:81:28:03:85:f6:b5:71:94:73:
                    f4:f1:93:de:7f:25:a4:21:5d:3f:bb:b2:34:72:ab:
                    05:80:e3:88:d7:d9:14:3b:ac:48:33:4f:cc:61:63:
                    b6:79:d9:21:c4:68:81:12:18:a9:56:4c:2d:5a:4b:
                    cc:2e:c4:47:92:83:35:2f:da:7b:45:bf:94:21:c7:
                    20:da:cf:0f:64:07:2e:88:17:2a:93:63:a9:e3:5e:
                    25:e7:c9:b1:dd:07:9e:ec:61:9a:65:a0:4c:9d:e8:
                    40:96:5f:ff:a6:e5:74:9c:25:3c:be:d3:3b:0c:d5:
                    00:39:fa:48:e3:c4:5b:49:4b:05:6c:97:8c:a6:8c:
                    41:69:e4:a4:4d:28:c0:db:45:b7:74:85:49:e8:95:
                    bc:2e:40:5c:87:31:43:0c:1f:b9:59:a9:0e:38:1f:
                    63:c5:3d:3a:46:48:f6:5b:aa:10:b0:88:77:78:03:
                    50:7b:36:71:a6:8f:3c:8f:b8:3d:ec:fd:7b:67:0b:
                    eb:d8:c2:83:15:85:17:66:c2:bd:04:9b:6a:f5:14:
                    c3:e6:a1:62:d4:d9:b6:b3:db:df:b2:03:ac:4a:5c:
                    23:dc:ea:c0:db:c9:cf:9d:b3:1e:aa:06:bd:43:41:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EC:DE:7F:21:96:AA:33:8C:10:DF:89:DB:F5:81:54:F5:B7:C4:DF
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:82:56:9a:b5:67:fe:ed:09:5d:e4:d0:b1:c2:28:95:c6:b6:
         4d:19:76:e3:81:b6:4e:8d:ed:04:07:5a:56:b7:90:83:dc:66:
         30:ab:8e:35:a5:77:45:30:2f:32:88:b8:a2:d6:f5:fa:3e:af:
         79:d2:cd:99:a4:88:fc:c1:6d:41:6a:eb:34:b0:fa:a6:e9:6a:
         41:6f:10:38:7c:54:a1:8f:0c:2a:2b:0e:d8:b0:6b:c6:63:ff:
         5e:40:f3:19:00:5f:6a:f2:f5:27:e7:bd:c6:2e:16:8c:67:9e:
         b9:64:1f:67:e5:d9:56:2c:15:bd:fb:cb:dc:b0:67:3b:7a:ec:
         a0:3b:99:52:33:76:85:82:12:78:7d:3c:8b:49:bc:3c:4a:31:
         09:4f:5f:69:9e:a6:5a:17:05:50:5f:20:fd:28:4f:fd:5d:ff:
         ab:30:98:41:31:e9:40:a2:02:a2:30:ea:cf:09:37:5e:23:4b:
         5d:fc:c6:9a:3b:98:c5:ff:ea:09:21:70:59:a8:3b:2c:41:94:
         41:42:1b:01:b7:11:98:9c:e6:3c:4d:32:55:e8:bb:19:b0:58:
         6d:24:ad:53:0c:79:62:fa:eb:3f:68:75:e8:4d:6a:5f:cf:b7:
         2e:17:4c:eb:55:f9:29:69:21:9a:fc:e6:41:8d:9a:fb:f0:38:
         86:92:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:49:04 2026 by rpki-client