Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138342e302f32342d3234203d3e203237383237.roa
File:                     3138362e3132312e3138342e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          YizearvFw6Ek1egcUtMEbjNnOlG7x3+5srR87OkR88E=
Subject key identifier:   89:B1:59:83:A5:28:23:5F:EA:78:57:7A:FC:17:7F:0C:68:7C:67:83
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       47E15DCBA9C9380D0212779374158B686115C1F8
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138342e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:38 +0000
ROA not before:           Thu 03 Sep 2026 13:28:38 +0000
ROA not after:            Thu 02 Sep 2027 13:33:38 +0000
asID:                     27827
IP address blocks:        186.121.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:5d:cb:a9:c9:38:0d:02:12:77:93:74:15:8b:68:61:15:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:38 2026 GMT
            Not After : Sep  2 13:33:38 2027 GMT
        Subject: CN=89B15983A528235FEA78577AFC177F0C687C6783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:53:26:f1:7b:66:7e:d1:14:95:ca:75:3e:
                    05:a1:fc:ee:ce:33:ef:b2:fd:6c:cd:5a:48:98:c5:
                    24:2f:ad:5e:5a:b8:94:fe:55:de:48:ce:9c:26:27:
                    bf:c6:8a:fd:43:a3:42:57:a9:23:40:5c:f1:aa:4f:
                    a4:93:6b:cc:ed:45:ec:a7:48:be:67:2b:a9:72:dd:
                    00:12:f5:ac:e9:23:68:e2:28:c8:4d:a8:36:e8:3b:
                    95:71:c0:fb:75:81:38:a6:32:da:9e:28:22:25:fb:
                    17:6b:4d:93:b8:22:27:6e:56:91:16:be:ae:70:60:
                    00:1f:cb:e1:a6:d5:6e:42:97:03:a3:b1:ed:f9:e5:
                    c7:34:36:26:2d:93:eb:37:d7:a4:11:4a:4e:41:d0:
                    1c:f3:99:5e:14:fa:fd:57:2c:53:40:df:9f:75:1f:
                    25:ec:e2:4e:89:d0:f7:a3:93:5a:b1:f1:71:39:4e:
                    2f:dd:30:69:b3:d2:4b:90:c1:c7:90:be:8d:2c:e2:
                    c6:1d:7f:d1:ab:ea:d4:f0:05:63:01:12:1c:34:56:
                    f2:a3:e4:8d:ae:b9:c3:4e:59:52:a8:fe:03:c7:e2:
                    d2:d7:5f:53:7a:0d:57:2a:20:43:8c:b6:d0:74:1b:
                    5f:23:d2:35:e5:2c:88:b2:65:08:f8:1e:45:90:74:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B1:59:83:A5:28:23:5F:EA:78:57:7A:FC:17:7F:0C:68:7C:67:83
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138342e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:65:0d:79:c4:9d:0e:c7:79:28:f3:58:1b:83:a6:a6:c2:0d:
         4c:80:7b:77:4c:86:67:37:a9:a9:b9:2d:2c:f3:0a:11:2b:93:
         75:9d:a7:88:7d:3a:bc:62:21:08:47:7d:3a:c6:ca:3d:09:44:
         c1:10:44:79:53:9e:69:15:08:47:16:73:83:02:f2:e1:a5:30:
         e5:ee:76:95:fa:4b:08:98:a9:1a:fd:89:d0:cc:02:fb:a6:8d:
         e7:8b:6e:27:78:1e:4e:97:dc:42:a9:f9:17:e3:e0:d8:b7:64:
         28:ea:46:5d:9e:dd:74:36:90:83:88:ca:31:9c:fe:b3:80:58:
         08:7b:9c:ab:61:56:22:36:42:38:9d:3d:8d:aa:34:2b:09:ce:
         20:e6:d3:4b:eb:4e:61:1b:12:be:5e:43:e2:69:cb:6a:22:4c:
         b6:0a:05:e4:9b:ff:b7:e5:d1:4e:bb:de:40:63:af:9f:29:ea:
         f1:34:9c:1d:b6:a6:6b:b5:dd:76:55:db:8d:e5:98:39:21:83:
         5b:38:d7:ca:fd:1c:c7:d0:7d:c7:35:f2:26:ad:9e:a1:5e:bb:
         e2:51:97:e7:50:c3:f4:93:d0:42:3e:ef:a3:2a:f6:e9:de:9f:
         87:91:78:71:ae:85:eb:5d:e3:36:ae:be:57:cd:b4:10:0b:88:
         4f:6e:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:49:04 2026 by rpki-client