Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e322e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e322e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          W0ZH2V6LhbOQv+9lMJx/J+ocEM1KyolYZ8RrenGMusg=
Subject key identifier:   11:16:5A:01:CF:23:FE:B5:1F:0B:84:C9:28:4E:ED:72:12:D0:A5:09
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       6CE8ADEEFDCEC7DCBEA872D736CA09A1DEC795BD
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e322e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 12:33:30 +0000
ROA not before:           Thu 03 Sep 2026 12:28:30 +0000
ROA not after:            Thu 02 Sep 2027 12:33:30 +0000
asID:                     27827
IP address blocks:        190.5.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e8:ad:ee:fd:ce:c7:dc:be:a8:72:d7:36:ca:09:a1:de:c7:95:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 12:28:30 2026 GMT
            Not After : Sep  2 12:33:30 2027 GMT
        Subject: CN=11165A01CF23FEB51F0B84C9284EED7212D0A509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:52:9e:e7:68:2e:ae:44:aa:95:d5:6b:c2:
                    fc:18:ce:3f:12:34:04:43:5f:8b:a9:30:e4:b7:0c:
                    f8:33:d2:77:6a:6f:0b:32:ce:8c:df:a5:8d:10:cc:
                    64:d8:52:0b:8a:15:a5:23:5b:6e:67:16:0b:ad:a2:
                    a6:10:66:19:a7:1f:8e:3d:4c:ad:7a:87:6c:dd:1e:
                    01:2a:23:9f:b7:6d:72:75:c4:23:bc:28:f2:0a:52:
                    c6:f5:cc:d1:6e:90:bc:de:7d:75:81:39:b9:c7:04:
                    2a:d7:3c:a5:07:46:e6:ce:e4:10:1e:6c:88:7d:18:
                    4d:12:1c:8d:6f:d8:ee:cd:11:3c:a7:ee:d6:3e:88:
                    35:1e:ef:a2:ae:c2:d4:fe:50:9b:cb:22:94:d1:c1:
                    81:40:94:f3:58:b8:35:59:3c:f4:6b:41:6a:0a:0a:
                    b6:66:b7:f1:6f:82:98:47:47:04:8f:48:15:3b:63:
                    e4:0f:1b:4d:6c:9a:6c:be:98:61:1e:22:1d:4a:9a:
                    e2:21:06:6c:09:32:a7:8f:8e:c5:3a:4d:1c:d6:b5:
                    8c:ca:a4:f6:84:2f:2d:93:28:45:e5:23:d6:9f:5c:
                    cb:1a:22:7f:5b:68:87:7a:52:c0:22:8c:56:29:78:
                    5d:6d:eb:93:2b:95:49:ba:59:04:83:55:86:fb:40:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:5A:01:CF:23:FE:B5:1F:0B:84:C9:28:4E:ED:72:12:D0:A5:09
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e322e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:96:a9:b4:49:d6:b7:80:2b:e7:85:aa:8d:1d:b6:88:fd:c4:
         2f:8d:1b:74:4a:b2:0a:38:03:f2:f6:db:79:60:c7:74:6e:c3:
         ed:fe:2a:a8:c0:44:b4:c5:58:8a:05:1b:3b:79:7a:72:ea:e3:
         a5:1a:08:a2:4e:6e:40:18:d4:f8:33:a8:e4:71:42:cd:08:72:
         77:25:c9:31:5c:74:72:91:8d:f4:03:50:1a:06:a2:35:96:b7:
         28:e4:8d:3f:41:44:32:37:18:d7:f3:d0:f9:d6:de:35:c9:aa:
         cf:a7:3f:b6:b8:03:c8:a9:2e:3a:11:ff:e3:c5:13:c0:25:3d:
         41:3d:69:61:14:b4:d4:20:fd:68:30:07:99:cf:2e:99:b7:00:
         86:7d:fb:96:b9:ef:dd:af:33:23:b1:25:9d:f8:76:56:67:a7:
         a1:d7:6e:7a:20:86:54:df:27:2c:31:35:87:1a:e5:42:80:54:
         30:09:c3:5f:34:2c:e4:72:e5:34:cd:7d:c6:9d:0d:fa:c1:8e:
         d1:af:35:c0:52:ae:b1:b1:ae:97:01:24:b2:ec:62:de:03:3e:
         bf:7c:1b:03:9e:4b:1a:84:35:11:a7:00:39:68:47:51:af:e1:
         16:01:de:4e:95:85:fd:8e:09:ef:d3:50:85:2f:fc:e6:f1:10:
         c8:d9:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:23 2026 by rpki-client