Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138352e302f32342d3234203d3e203237383237.roa
File:                     3138362e3132312e3138352e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          fr6ws6dNIwvW8JHsjtIx5/5irFivXD1R/TFiq0A8oJU=
Subject key identifier:   8B:AB:19:6A:47:44:23:A1:F3:6B:9E:B1:DE:D6:2B:37:03:8B:6F:75
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       60BDF7948356C9AE1950B33B2866F3A946EB16A3
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138352e302f32342d3234203d3e203237383237.roa
Signing time:             Wed 26 Aug 2026 14:26:37 +0000
ROA not before:           Wed 26 Aug 2026 14:21:37 +0000
ROA not after:            Wed 25 Aug 2027 14:26:37 +0000
asID:                     27827
IP address blocks:        186.121.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bd:f7:94:83:56:c9:ae:19:50:b3:3b:28:66:f3:a9:46:eb:16:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Aug 26 14:21:37 2026 GMT
            Not After : Aug 25 14:26:37 2027 GMT
        Subject: CN=8BAB196A474423A1F36B9EB1DED62B37038B6F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:d0:a7:28:e4:37:13:1a:31:45:96:a7:2c:
                    89:c1:54:e3:56:02:c7:9a:a4:18:2e:91:48:7f:06:
                    31:80:07:59:03:02:39:f3:8c:8c:f2:fa:f9:3b:c8:
                    2a:0d:85:65:25:89:6f:45:0b:8d:c4:69:af:4f:76:
                    59:68:17:1a:28:36:08:c3:dd:33:a0:f5:2d:0a:b3:
                    1e:e3:ba:3e:9b:6b:3a:1f:81:67:1a:e2:d1:e6:6b:
                    45:9c:fc:37:8e:e9:1b:10:61:f3:74:20:e7:65:3f:
                    37:3c:e6:86:29:28:1e:0e:3b:e2:e4:ff:a0:00:f2:
                    1e:60:c6:57:7d:7c:9a:32:d1:9a:71:dd:20:06:d0:
                    b3:6f:3f:21:8e:a7:5a:2b:c7:fa:4e:a8:33:71:2c:
                    b4:86:96:ae:78:bf:9c:4d:cf:12:c3:c6:88:cd:fc:
                    b4:49:bd:43:cf:c7:76:ee:9f:20:37:c1:70:9a:d9:
                    2d:22:7c:0f:0a:15:a0:1d:d9:05:78:41:7e:7d:37:
                    9e:b3:1b:bd:3e:7a:d4:35:f5:1a:b4:82:68:50:29:
                    fb:e0:f6:c1:3a:30:c9:75:1a:ec:8d:67:52:27:c0:
                    ca:e1:0f:c3:89:dd:51:7a:9e:9a:dc:03:4a:64:cb:
                    09:78:69:1c:1e:0b:9b:63:46:c2:e0:f6:32:05:c3:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AB:19:6A:47:44:23:A1:F3:6B:9E:B1:DE:D6:2B:37:03:8B:6F:75
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138352e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:51:16:ed:34:2f:9a:2f:1b:bf:4b:7d:8f:12:65:bb:a9:bb:
         5c:57:e1:13:9d:13:11:58:c9:a5:64:f6:d9:a2:16:8e:38:d0:
         a4:92:e9:a3:d8:f8:9a:e5:49:01:8a:d9:6f:d8:95:85:e6:a1:
         bf:b8:8f:ca:91:b7:e4:aa:3c:c4:35:7c:1b:c2:b2:3d:37:54:
         dd:ec:6f:44:cb:da:0d:bf:9b:ca:12:c7:69:67:2a:4c:53:27:
         37:1e:31:d4:7a:37:65:67:dc:6e:0f:5c:ad:de:cf:0f:f4:65:
         0b:b6:d0:94:f9:14:08:92:56:12:36:d9:86:d4:b9:7d:cc:ee:
         e7:9a:09:ba:50:0c:ab:30:c4:60:2a:1a:b2:2b:da:6c:65:21:
         51:32:df:ef:39:ad:1e:44:29:2f:e8:86:b1:9e:46:b3:c3:d3:
         e1:af:97:4f:45:cb:e2:72:60:70:21:02:18:18:eb:c8:f4:b6:
         b2:98:35:9d:b5:48:b8:63:01:83:7c:c5:f3:57:b8:98:5e:c4:
         bf:ab:5b:99:a4:14:86:66:9a:1b:f0:95:6a:02:e9:d7:77:9d:
         3a:92:ba:14:a7:33:ac:24:87:00:1b:88:14:b6:77:fe:d8:05:
         e9:32:7f:38:4f:a6:3f:a8:f7:43:89:39:5b:04:e3:55:8c:00:
         e5:1a:1a:f6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYL33lINWya4ZULM7KGbzqUbrFqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1QzJERTc3NENGQzQ1ODM0Njc1REIxQUE2RUM4QTc1
MjhENjU2RDAeFw0yNjA4MjYxNDIxMzdaFw0yNzA4MjUxNDI2MzdaMDMxMTAvBgNV
BAMTKDhCQUIxOTZBNDc0NDIzQTFGMzZCOUVCMURFRDYyQjM3MDM4QjZGNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ltCnKOQ3ExoxRZanLInBVONW
AseapBgukUh/BjGAB1kDAjnzjIzy+vk7yCoNhWUliW9FC43Eaa9PdlloFxooNgjD
3TOg9S0Ksx7juj6bazofgWca4tHma0Wc/DeO6RsQYfN0IOdlPzc85oYpKB4OO+Lk
/6AA8h5gxld9fJoy0Zpx3SAG0LNvPyGOp1orx/pOqDNxLLSGlq54v5xNzxLDxojN
/LRJvUPPx3bunyA3wXCa2S0ifA8KFaAd2QV4QX59N56zG70+etQ19Rq0gmhQKfvg
9sE6MMl1GuyNZ1InwMrhD8OJ3VF6nprcA0pkywl4aRweC5tjRsLg9jIFw9lbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUi6sZakdEI6Hza56x3tYrNwOLb3UwHwYDVR0j
BBgwFoAUE1wt53TPxFg0Z12xqm7Ip1KNZW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkUxM0U2NEM2NjIyRDI4M0MzNEE2MTJEQUE5RDY2RTJD
OUI3Mzg5RjNBMzQ1MkFENTEzRkY1MERCQTY2RjMxLzAvMTM1QzJERTc3NENGQzQ1
ODM0Njc1REIxQUE2RUM4QTc1MjhENjU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzVDMkRFNzc0Q0ZDNDU4MzQ2
NzVEQjFBQTZFQzhBNzUyOEQ2NTZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFMTNFNjRDNjYyMkQyODNDMzRBNjEyREFBOUQ2NkUyQzlCNzM4OUYz
QTM0NTJBRDUxM0ZGNTBEQkE2NkYzMS8wLzMxMzgzNjJlMzEzMjMxMmUzMTM4MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAunm5
MA0GCSqGSIb3DQEBCwUAA4IBAQB6URbtNC+aLxu/S32PEmW7qbtcV+ETnRMRWMml
ZPbZohaOONCkkumj2Pia5UkBitlv2JWF5qG/uI/KkbfkqjzENXwbwrI9N1Td7G9E
y9oNv5vKEsdpZypMUyc3HjHUejdlZ9xuD1yt3s8P9GULttCU+RQIklYSNtmG1Ll9
zO7nmgm6UAyrMMRgKhqyK9psZSFRMt/vOa0eRCkv6Iaxnkazw9Phr5dPRcvicmBw
IQIYGOvI9LaymDWdtUi4YwGDfMXzV7iYXsS/q1uZpBSGZpob8JVqAunXd506kroU
pzOsJIcAG4gUtnf+2AXpMn84T6Y/qPdDiTlbBONVjADlGhr2
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:49:01 2026 by rpki-client