Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31372e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31372e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          X4RD8+hbxhuwLS3LIlRw806uqgmHRSb4NTP1jYXdTJ0=
Subject key identifier:   25:9F:41:0C:97:D2:C2:14:DB:0F:7D:1D:67:97:89:9F:42:F1:F9:3F
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       147C24149A8846B978768522C40B1F1302BB121F
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31372e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:42 +0000
ROA not before:           Thu 03 Sep 2026 13:28:42 +0000
ROA not after:            Thu 02 Sep 2027 13:33:42 +0000
asID:                     27827
IP address blocks:        190.5.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:24:14:9a:88:46:b9:78:76:85:22:c4:0b:1f:13:02:bb:12:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:42 2026 GMT
            Not After : Sep  2 13:33:42 2027 GMT
        Subject: CN=259F410C97D2C214DB0F7D1D6797899F42F1F93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:7a:10:0a:4e:9d:ba:9f:4a:a1:49:86:a9:
                    32:3e:c0:cf:f0:c9:65:e5:9a:4c:2f:e4:b7:01:d0:
                    1b:9c:05:de:1a:ae:1c:db:f7:a3:c2:3e:ef:b0:fc:
                    c9:d2:f7:d1:65:c2:08:40:b5:f3:23:c2:f5:8f:6d:
                    31:3f:46:4f:92:9e:21:eb:79:ce:52:11:8d:ae:a8:
                    f3:9c:6e:a7:fa:e4:4b:66:70:79:06:96:65:b8:bd:
                    22:df:dc:35:35:02:1e:e9:30:8f:41:dd:e8:2b:db:
                    f2:10:92:e4:87:a6:a3:35:bf:57:71:b8:8b:aa:77:
                    1c:12:24:b1:d5:e9:d4:69:a1:d7:90:2a:bd:21:d2:
                    3d:33:81:4f:25:ff:cc:40:fa:f7:52:af:f7:51:d7:
                    e3:ff:1d:26:73:31:76:17:74:39:4b:e1:00:10:37:
                    6c:4a:e8:71:49:14:8c:86:5a:4d:8d:6b:e1:31:5c:
                    e3:47:65:c4:92:cc:39:7c:f6:cd:f4:a5:9b:05:74:
                    78:47:f0:f0:8d:46:1b:95:03:76:76:86:b1:f8:07:
                    a3:82:be:71:06:c6:2f:64:bf:1e:be:ce:c7:6c:8c:
                    0d:b2:7c:a9:2c:db:b7:b0:4e:1b:02:39:df:0f:01:
                    74:9b:ed:98:b5:ee:f6:a6:ac:f0:fc:7a:3b:45:fe:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:41:0C:97:D2:C2:14:DB:0F:7D:1D:67:97:89:9F:42:F1:F9:3F
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31372e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:d8:65:65:1d:80:88:b0:7b:b2:ad:61:27:97:00:a0:ac:
         85:47:b2:11:95:c2:53:58:32:c4:6d:02:2e:a7:2c:85:31:4d:
         98:e5:d6:87:c7:b2:bd:f8:dd:f8:7c:1c:51:8a:da:eb:3a:ae:
         e3:c3:34:d9:e4:d1:c4:aa:8a:76:c7:10:e4:85:98:cc:31:40:
         07:a2:14:47:f9:d4:bb:46:48:b4:b0:04:ee:a5:da:cd:ef:83:
         8d:c0:95:48:0b:35:20:6d:e2:c1:c1:da:ec:3c:3b:b7:aa:47:
         a8:66:ab:ce:61:07:d2:3b:93:9a:42:a6:49:61:29:04:4b:f9:
         74:50:00:82:d0:09:19:c8:d8:fd:ca:a0:75:ea:0c:b3:56:4f:
         d8:40:11:92:e2:55:7e:43:63:36:d0:75:77:3d:c1:4e:8a:45:
         49:97:a3:53:d5:30:92:05:39:57:b0:2f:be:40:62:91:80:00:
         f9:72:3b:5b:cc:c3:c2:dd:89:06:de:12:39:6a:f1:8f:57:60:
         04:92:02:63:54:b4:8b:db:6a:19:53:01:2f:52:34:e1:74:d7:
         44:5b:da:1b:4b:40:32:d5:24:4f:36:42:6e:fd:51:18:5b:57:
         4e:ee:10:1b:13:20:98:db:03:6c:40:02:7d:95:42:93:cb:54:
         34:9c:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:24 2026 by rpki-client