Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31322e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31322e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          dF2UsN7dk3njIwLp9VO0MVPe7govg6avSayKRyswOHY=
Subject key identifier:   9F:F3:B6:75:08:43:21:3E:FA:33:9A:6A:67:65:5D:D3:DF:A0:1B:62
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       3E14F3B71CF1DCEBDB73F57FFCA85BEB80259DC2
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31322e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 12:33:29 +0000
ROA not before:           Thu 03 Sep 2026 12:28:29 +0000
ROA not after:            Thu 02 Sep 2027 12:33:29 +0000
asID:                     27827
IP address blocks:        190.5.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:14:f3:b7:1c:f1:dc:eb:db:73:f5:7f:fc:a8:5b:eb:80:25:9d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 12:28:29 2026 GMT
            Not After : Sep  2 12:33:29 2027 GMT
        Subject: CN=9FF3B6750843213EFA339A6A67655DD3DFA01B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:41:9d:9c:23:4b:b9:91:9a:b0:62:98:89:
                    14:80:5e:0c:7c:0e:33:1a:09:a6:3d:98:2d:94:8a:
                    1b:0f:ed:ea:8e:30:65:ac:d3:e1:b9:4d:35:8f:fa:
                    4f:c8:4b:ff:60:eb:9c:cd:52:8d:eb:3c:82:63:75:
                    45:53:ac:3e:8b:20:2e:e9:2a:91:be:fb:3c:7a:91:
                    95:ba:c4:df:59:fa:07:52:57:84:ea:5a:ba:e1:11:
                    a4:5d:bf:a1:7e:42:4a:ed:c9:97:ec:e8:cd:7a:58:
                    07:de:c1:d2:4e:c2:6c:85:70:37:e9:74:49:56:ec:
                    38:a5:91:c8:5d:eb:ac:ec:2c:93:3b:e9:8a:9e:83:
                    e8:85:e4:35:a0:0b:30:0d:95:b2:a1:42:16:71:c9:
                    6e:76:7f:cb:15:5c:df:4b:5d:e8:50:09:f4:59:9c:
                    ca:bc:be:1d:b0:df:4b:da:d0:ca:a0:2e:b6:86:2f:
                    7e:01:1f:4f:0a:67:07:f4:19:d8:da:19:07:5d:d0:
                    60:01:aa:52:ef:6b:69:c8:07:a8:ab:85:e5:11:68:
                    ea:ab:4e:8b:6d:db:ac:53:bf:5e:3a:7e:65:83:e2:
                    cd:2a:5e:fb:37:3c:3a:dc:03:d4:34:06:ed:63:da:
                    99:4d:74:e6:0c:9e:1e:ec:42:85:6c:aa:8e:16:49:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:B6:75:08:43:21:3E:FA:33:9A:6A:67:65:5D:D3:DF:A0:1B:62
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31322e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:60:a8:ff:50:f8:d4:3c:df:f8:72:1d:fa:ec:81:4c:20:
         e8:22:bc:02:75:4c:aa:3b:e7:29:ad:6e:95:f9:50:19:48:9a:
         79:c4:e3:e9:0c:fe:05:4e:97:71:7e:84:34:9e:70:21:f3:22:
         f6:d4:6d:68:c1:6b:13:c9:a2:77:58:5d:89:5e:49:e0:ec:69:
         ee:80:9a:e3:58:8d:bc:5a:25:2d:f4:91:33:7a:aa:85:6e:ed:
         b3:a7:8e:ad:63:e6:62:27:51:75:4b:6b:cb:d1:b0:f0:f0:45:
         84:c6:0f:3a:de:02:6d:ea:d6:f3:0c:45:47:34:ca:81:b2:ee:
         5d:1c:5c:e6:44:2d:f2:06:c0:4b:34:70:04:84:40:14:01:0e:
         16:39:ba:8b:7c:1a:20:c2:8a:e1:6b:ba:32:56:3a:ec:04:b1:
         02:77:8f:1e:18:1d:50:95:4e:02:87:7f:ba:1c:1e:3b:6b:45:
         47:8f:b1:8b:a5:7d:f7:c2:54:7a:f0:14:77:f3:52:28:8f:b7:
         81:07:cf:a0:2b:f6:56:2d:8d:5f:a2:80:f7:05:7d:27:7d:7d:
         26:ca:8c:36:52:3a:52:18:e6:86:86:06:26:12:33:2f:b6:cd:
         ac:06:39:a1:fa:08:f1:b7:ca:2e:a6:42:14:a0:4d:8b:7f:08:
         d9:55:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:26 2026 by rpki-client