Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32352e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32352e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          l4VaFFu7qdJGb7wJuSD1RaD98dTdJfR/Rijk0xMSLlY=
Subject key identifier:   60:EE:76:6D:23:21:A6:9A:14:C2:58:DF:67:E4:9E:A6:4E:33:68:0C
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       3A96D526517C70F09C551498A057486699950230
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32352e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:42 +0000
ROA not before:           Thu 03 Sep 2026 13:28:42 +0000
ROA not after:            Thu 02 Sep 2027 13:33:42 +0000
asID:                     27827
IP address blocks:        190.5.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:96:d5:26:51:7c:70:f0:9c:55:14:98:a0:57:48:66:99:95:02:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:42 2026 GMT
            Not After : Sep  2 13:33:42 2027 GMT
        Subject: CN=60EE766D2321A69A14C258DF67E49EA64E33680C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:e9:af:89:1f:89:e2:10:b2:67:68:29:68:
                    72:79:8b:f3:3b:f1:88:e1:94:e4:16:62:16:c0:bb:
                    b0:d7:e0:ac:20:fe:5c:07:66:11:c5:9a:46:45:32:
                    6d:01:36:92:ac:34:5f:6d:ea:01:90:fa:ac:ea:7f:
                    ce:4b:5b:90:44:7f:06:52:05:0f:5f:7b:7a:21:50:
                    ae:22:0e:4f:f8:78:01:d7:62:11:19:3a:98:7a:cb:
                    17:0e:62:1d:14:d6:06:e3:85:3a:c6:7c:38:c5:88:
                    25:09:f8:98:c9:a2:4c:69:bb:77:01:57:70:c5:09:
                    9d:16:5d:e4:a9:13:26:c7:88:9e:91:ec:1c:d9:c6:
                    ca:26:28:3e:29:0d:90:44:ee:b5:4a:ab:a4:35:6a:
                    ce:ac:cb:48:c4:39:37:d2:c1:98:76:14:17:aa:7d:
                    c7:34:dc:bb:0e:47:7b:08:77:44:5a:6d:40:0e:63:
                    7e:24:c9:8b:53:17:a2:87:10:91:33:7a:85:ed:e7:
                    e2:df:94:7d:53:f2:00:7b:80:4f:59:de:19:b6:76:
                    09:9c:8e:83:4e:ef:42:2a:a4:8c:46:f3:db:7a:30:
                    a9:c7:1a:c3:64:0f:26:88:6d:ac:06:a7:7f:ee:f4:
                    6e:9e:47:40:65:5d:71:9c:ec:bb:b8:45:f5:1d:0a:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:76:6D:23:21:A6:9A:14:C2:58:DF:67:E4:9E:A6:4E:33:68:0C
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32352e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:cd:db:dd:1f:8c:0c:df:9d:b2:1e:7b:87:32:ad:9c:ec:
         43:7c:be:f5:14:20:db:1c:5f:2b:d3:21:ec:fd:5c:38:21:cf:
         c0:3e:0e:bc:b0:83:ba:92:37:b8:53:76:51:a1:0b:51:f0:3f:
         4e:1c:26:31:3a:58:63:4e:89:38:72:8f:ea:15:c1:01:a1:33:
         4c:3e:05:ee:4f:5f:4d:57:c6:ba:d0:8d:a0:3f:16:01:f2:5c:
         d1:34:c7:25:78:c1:87:a7:90:ee:b3:a1:3e:58:b7:e3:19:1b:
         c9:6d:55:5d:2d:59:6d:79:5c:59:7e:10:2c:33:56:19:2d:4e:
         8b:44:d5:30:6c:2e:65:a7:ed:4e:33:ea:ca:b3:72:0b:f3:e7:
         d1:a6:8f:f1:f8:80:64:60:22:f2:3c:fc:77:35:9c:7c:49:93:
         e9:a9:79:67:97:fa:ee:51:f4:1e:51:03:81:f3:83:a5:87:ad:
         e9:a7:b0:62:db:c2:a5:51:26:a6:66:e4:93:1b:d5:e5:6f:47:
         1a:21:e8:a0:aa:fe:7f:17:7b:7c:d8:bc:bf:af:ea:1f:e8:d4:
         17:c0:bc:a3:c2:d1:26:fe:b6:73:a3:cc:2d:15:77:01:1f:f2:
         68:04:bf:cf:ad:eb:5a:be:80:82:ef:90:31:36:d2:4a:53:e2:
         f0:64:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:25:01 2026 by rpki-client