Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32302e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32302e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          EInCkSbIUCw4VraKKWC1S35Sls9oVAFKsZAXllrbDS4=
Subject key identifier:   5B:73:2F:05:CC:90:A8:B1:EE:87:62:7D:9E:8C:CC:98:93:96:2D:69
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       05F1A213090D533322135CB875FC336F31EA0A69
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32302e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:40 +0000
ROA not before:           Thu 03 Sep 2026 13:28:40 +0000
ROA not after:            Thu 02 Sep 2027 13:33:40 +0000
asID:                     27827
IP address blocks:        190.5.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f1:a2:13:09:0d:53:33:22:13:5c:b8:75:fc:33:6f:31:ea:0a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:40 2026 GMT
            Not After : Sep  2 13:33:40 2027 GMT
        Subject: CN=5B732F05CC90A8B1EE87627D9E8CCC9893962D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:e9:af:7a:93:fd:f4:c8:13:b7:a2:30:8f:
                    64:0b:00:c3:ac:86:9b:1c:df:46:42:25:f9:b6:e3:
                    e8:2d:bc:51:27:36:ee:0a:3c:49:24:44:95:f8:4d:
                    e3:ed:36:09:ab:0e:2f:fa:c7:b9:a2:98:75:11:03:
                    ab:ae:83:96:fe:56:38:30:05:7a:20:91:84:51:a2:
                    5c:81:5e:62:28:f8:48:3a:cd:65:09:1f:36:23:62:
                    db:07:b3:7a:00:c6:99:94:fe:51:fd:b1:c1:83:10:
                    e9:bd:c8:f5:ff:e0:9d:84:0d:0a:e3:94:1e:66:81:
                    be:0d:c0:e0:86:7e:46:9c:b2:2e:81:f6:d7:00:14:
                    27:65:1c:23:3b:ab:55:ec:ef:1d:f5:68:2d:65:75:
                    d9:d7:13:04:cf:98:01:c0:3d:2b:b7:5a:9c:9f:ad:
                    06:f5:db:b7:6d:6e:f3:df:2a:9b:8f:0d:68:12:1a:
                    fe:6e:20:bf:a7:b7:55:82:6b:b1:10:24:98:38:80:
                    41:25:8f:b5:14:e2:73:4f:15:d4:70:d3:48:87:5d:
                    46:eb:13:9a:bb:8d:9a:bb:4a:0a:48:33:93:42:e3:
                    c8:eb:f6:e1:35:d4:ba:55:4c:2e:af:00:cf:73:39:
                    2e:9f:37:71:9b:1f:7f:7b:af:6e:f4:92:bf:24:e3:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:73:2F:05:CC:90:A8:B1:EE:87:62:7D:9E:8C:CC:98:93:96:2D:69
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32302e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:2b:57:c2:18:ca:69:ec:40:83:3f:e8:25:5e:0a:d0:49:
         62:f4:c7:a3:f0:4d:43:db:45:04:6c:3d:ce:6b:9b:ea:d9:04:
         04:99:fc:fb:41:cf:db:54:c5:ea:ce:fe:da:9b:22:5a:8d:cc:
         71:da:19:40:15:21:45:a4:93:72:ce:4b:3a:39:eb:df:59:6b:
         bf:b5:b4:43:f7:b2:d5:48:99:e4:30:cf:00:8b:7c:2c:73:0f:
         6b:f9:f8:be:37:0a:41:f6:e7:25:ed:d1:13:ed:ea:76:82:7d:
         95:43:88:4d:f6:1d:8e:f4:8a:b9:aa:48:42:07:de:74:70:0f:
         8b:1d:29:1b:f8:96:3d:a9:3e:b5:dc:42:1d:46:2e:ac:38:99:
         ab:04:41:e4:07:d7:92:f8:fa:a7:44:01:62:00:94:49:9a:c3:
         16:82:76:6d:48:4d:5b:73:a0:50:12:52:3e:74:b5:ad:b9:c8:
         89:5f:a3:1c:59:bc:61:92:c5:87:4c:b9:cc:52:76:02:e1:23:
         d0:12:1b:c6:d2:b6:f7:e8:31:fe:a2:e6:86:43:e2:a2:a8:2e:
         78:0e:a6:7f:06:b3:22:df:e3:22:50:6a:ad:bf:5f:77:ca:1f:
         b2:cd:e8:45:64:9d:7b:44:8d:75:22:65:da:8c:6c:4e:4d:db:
         83:4f:c2:f7
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUBfGiEwkNUzMiE1y4dfwzbzHqCmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1QzJERTc3NENGQzQ1ODM0Njc1REIxQUE2RUM4QTc1
MjhENjU2RDAeFw0yNjA5MDMxMzI4NDBaFw0yNzA5MDIxMzMzNDBaMDMxMTAvBgNV
BAMTKDVCNzMyRjA1Q0M5MEE4QjFFRTg3NjI3RDlFOENDQzk4OTM5NjJENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOemvepP99MgTt6Iwj2QLAMOs
hpsc30ZCJfm24+gtvFEnNu4KPEkkRJX4TePtNgmrDi/6x7mimHURA6uug5b+Vjgw
BXogkYRRolyBXmIo+Eg6zWUJHzYjYtsHs3oAxpmU/lH9scGDEOm9yPX/4J2EDQrj
lB5mgb4NwOCGfkacsi6B9tcAFCdlHCM7q1Xs7x31aC1lddnXEwTPmAHAPSu3Wpyf
rQb127dtbvPfKpuPDWgSGv5uIL+nt1WCa7EQJJg4gEElj7UU4nNPFdRw00iHXUbr
E5q7jZq7SgpIM5NC48jr9uE11LpVTC6vAM9zOS6fN3GbH397r270kr8k423NAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUW3MvBcyQqLHuh2J9nozMmJOWLWkwHwYDVR0j
BBgwFoAUE1wt53TPxFg0Z12xqm7Ip1KNZW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkUxM0U2NEM2NjIyRDI4M0MzNEE2MTJEQUE5RDY2RTJD
OUI3Mzg5RjNBMzQ1MkFENTEzRkY1MERCQTY2RjMxLzAvMTM1QzJERTc3NENGQzQ1
ODM0Njc1REIxQUE2RUM4QTc1MjhENjU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzVDMkRFNzc0Q0ZDNDU4MzQ2
NzVEQjFBQTZFQzhBNzUyOEQ2NTZELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFMTNFNjRDNjYyMkQyODNDMzRBNjEyREFBOUQ2NkUyQzlCNzM4OUYz
QTM0NTJBRDUxM0ZGNTBEQkE2NkYzMS8wLzMxMzkzMDJlMzUyZTMyMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgUUMA0GCSqG
SIb3DQEBCwUAA4IBAQCMritXwhjKaexAgz/oJV4K0Eli9Mej8E1D20UEbD3Oa5vq
2QQEmfz7Qc/bVMXqzv7amyJajcxx2hlAFSFFpJNyzks6OevfWWu/tbRD97LVSJnk
MM8Ai3wscw9r+fi+NwpB9ucl7dET7ep2gn2VQ4hN9h2O9Iq5qkhCB950cA+LHSkb
+JY9qT613EIdRi6sOJmrBEHkB9eS+PqnRAFiAJRJmsMWgnZtSE1bc6BQElI+dLWt
uciJX6McWbxhksWHTLnMUnYC4SPQEhvG0rb36DH+ouaGQ+KiqC54DqZ/BrMi3+Mi
UGqtv193yh+yzehFZJ17RI11ImXajGxOTduDT8L3
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:19 2026 by rpki-client