Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32362e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32362e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          DM9HJ+7TpUrgwHDorY5ayxB62cyeOT1vYFQYB6f6lOQ=
Subject key identifier:   9B:6D:E9:6F:F2:6F:A5:A8:AB:EE:40:9D:D1:BD:CE:2A:16:0B:3D:E1
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       0BDB937BB97BCA71617244F27FC8039DA0BAE2CE
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32362e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:41 +0000
ROA not before:           Thu 03 Sep 2026 13:28:41 +0000
ROA not after:            Thu 02 Sep 2027 13:33:41 +0000
asID:                     27827
IP address blocks:        190.5.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:db:93:7b:b9:7b:ca:71:61:72:44:f2:7f:c8:03:9d:a0:ba:e2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:41 2026 GMT
            Not After : Sep  2 13:33:41 2027 GMT
        Subject: CN=9B6DE96FF26FA5A8ABEE409DD1BDCE2A160B3DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:a9:a9:ce:03:8d:89:bd:99:24:e5:21:76:
                    c8:c0:92:0b:61:35:bd:ad:71:71:71:13:5e:54:e7:
                    f2:ad:3d:85:31:d3:ad:b8:d3:07:1e:5e:e2:08:3e:
                    81:eb:3e:f6:f1:ac:43:5c:da:59:12:e2:a4:a3:07:
                    f0:8d:55:13:cf:db:1b:11:20:3f:fa:62:d0:2b:8d:
                    34:e8:5d:f1:8e:7c:a3:7c:66:ee:b1:4d:99:e8:e2:
                    d5:12:f4:a2:a9:d4:f9:1a:3a:93:96:30:77:a0:89:
                    2b:b2:01:50:f1:20:61:dd:a8:b1:0f:d1:81:b5:27:
                    c0:92:66:9d:e8:14:22:78:4e:7d:2d:5e:e9:d8:1f:
                    68:c3:cf:5e:e6:36:97:63:b4:4b:0b:59:cc:f8:a6:
                    05:cb:b1:b1:96:d6:95:9d:4b:0a:39:58:5f:8f:f4:
                    ca:8b:5d:74:10:dd:cc:06:7b:38:ec:df:f6:b1:6d:
                    ad:37:da:b6:3e:23:17:d2:0b:7d:0f:6f:6f:0e:6c:
                    f5:c1:7b:0c:c7:77:7f:2c:90:ef:cc:5f:8f:cf:a7:
                    0d:7e:7a:1d:9e:8e:82:ff:13:63:a2:02:b7:87:0d:
                    6d:02:55:f4:3f:ec:2a:97:b9:d2:71:07:bd:73:e3:
                    93:a8:48:0c:12:24:31:74:d0:25:71:66:45:4f:af:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:E9:6F:F2:6F:A5:A8:AB:EE:40:9D:D1:BD:CE:2A:16:0B:3D:E1
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32362e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:32:b1:c3:28:30:2c:c2:9e:e2:b1:60:37:1a:41:c2:66:ad:
         4e:b7:71:9b:59:c1:b8:ce:8f:b7:ee:41:19:03:9d:00:61:eb:
         d0:c5:13:79:29:37:04:0b:50:a7:21:fb:73:53:d3:c4:d7:52:
         6e:51:5c:ac:5c:8c:6c:ef:38:2f:ed:fb:d8:2f:74:e2:16:c7:
         49:22:d5:68:52:bb:ce:ac:f4:11:ea:59:79:86:f6:9d:9d:2f:
         48:38:df:77:4f:a6:bd:47:b8:f1:ae:7d:41:0e:76:a2:5d:9e:
         e8:c0:9a:a1:f5:0c:b2:c6:1e:50:31:72:79:5e:e3:d6:43:3d:
         c8:e0:09:37:7e:b5:6a:f1:84:19:c3:c8:e8:a2:dc:b6:59:18:
         29:de:ca:fa:a2:6c:1a:af:18:f0:47:8c:62:b1:7c:b5:db:68:
         77:7b:e0:64:11:96:df:1f:9f:9c:cd:d8:01:df:71:c6:51:70:
         3e:7e:d1:4a:32:00:6a:58:a2:f4:9e:15:4c:44:8d:96:4a:ee:
         94:cc:e3:14:31:86:2a:b0:8c:a7:45:a7:a8:d7:eb:e6:e5:3b:
         01:dc:25:c5:5e:83:25:09:7d:11:a5:4d:cc:bd:87:a4:ec:aa:
         01:02:7d:73:e2:8f:89:59:2d:d6:67:f1:0c:54:15:c4:60:d4:
         6f:13:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:25 2026 by rpki-client