Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32392e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32392e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          qHzVZu8KrkGTZfRCgfl6Ikjf0dLfBVnA1kxzofTLX1E=
Subject key identifier:   FA:1D:B2:64:A4:A6:7A:B6:0F:23:97:78:86:0E:76:78:65:E5:9A:D9
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       14CFE37B695FDF3A6CB4F33B3416EF3928E98F03
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32392e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:42 +0000
ROA not before:           Thu 03 Sep 2026 13:28:42 +0000
ROA not after:            Thu 02 Sep 2027 13:33:42 +0000
asID:                     27827
IP address blocks:        190.5.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cf:e3:7b:69:5f:df:3a:6c:b4:f3:3b:34:16:ef:39:28:e9:8f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:42 2026 GMT
            Not After : Sep  2 13:33:42 2027 GMT
        Subject: CN=FA1DB264A4A67AB60F239778860E767865E59AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:1b:85:58:9e:cc:c8:79:43:ed:a1:b4:16:
                    80:48:b5:1c:8b:c1:24:a3:a3:b0:f4:17:b9:4f:89:
                    05:b9:3b:90:cd:4c:91:1a:6c:37:b7:aa:4e:7e:ba:
                    bc:9d:e0:22:12:9e:50:78:0b:1e:b6:ab:d3:cf:46:
                    22:82:46:9c:dc:77:2b:c8:da:9d:e0:0b:2c:ff:28:
                    88:1b:92:30:98:ad:8d:9e:1e:d2:a0:1a:20:1c:16:
                    50:8c:79:69:c8:9a:9a:67:16:fd:80:48:b4:17:f4:
                    ac:53:bb:60:2d:02:fc:c4:93:e2:f5:26:9b:72:71:
                    e8:9f:19:0e:00:41:aa:76:bf:85:08:07:a6:35:25:
                    a7:49:6a:c2:6c:c9:f8:c6:d0:4b:5a:39:f2:42:02:
                    38:ec:b0:0b:99:f2:10:15:c1:79:8f:6d:f9:1f:75:
                    92:39:1b:99:b9:85:e3:67:9a:ef:2e:df:71:31:af:
                    0a:de:1e:b4:2b:b7:14:2d:2c:f6:01:91:bc:b0:ca:
                    ce:ed:a1:05:b7:04:0a:a0:8c:96:7a:0e:70:47:ef:
                    16:a3:72:b3:83:75:b8:4b:50:97:a5:52:df:42:27:
                    4c:56:e0:77:ce:1e:71:72:48:46:1c:ea:54:54:58:
                    de:9a:c4:ea:9f:b2:93:ba:2c:7c:b0:4c:11:3f:d9:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1D:B2:64:A4:A6:7A:B6:0F:23:97:78:86:0E:76:78:65:E5:9A:D9
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32392e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ad:50:a9:e6:7c:22:24:74:64:a7:28:e8:01:d0:fe:40:20:
         5d:e8:10:4f:8f:d2:04:b9:87:7b:14:93:0c:a5:a7:4c:6e:13:
         44:92:7d:62:1c:5e:e5:98:10:5b:05:c4:58:95:d0:5a:f2:c6:
         6e:19:81:b7:f2:3f:13:d6:2a:73:b1:d7:67:1e:a7:d3:69:1d:
         5a:c0:b2:70:9c:db:23:84:c9:2e:50:c9:8f:7e:91:1f:7f:ba:
         d3:2b:c8:fc:80:01:1b:a1:d6:86:4f:ef:36:50:22:9a:79:af:
         b8:23:8d:d1:d0:a3:01:1d:c7:87:3d:a7:6e:d1:77:41:3c:eb:
         84:19:f2:4a:da:37:8d:0f:98:70:0a:b9:c3:f7:37:ea:0c:b1:
         05:a4:d5:64:a7:03:e3:6d:d8:7f:43:37:7d:b5:e4:e6:df:9c:
         06:5e:32:79:60:81:63:f9:ca:f3:03:e9:71:d4:0c:1a:54:0a:
         72:34:51:d7:22:d2:72:c1:d1:6d:0c:96:ff:76:1e:48:9f:cd:
         dc:49:64:c3:4b:d4:74:b7:c3:b0:ed:7a:5e:33:c4:52:b8:c0:
         5a:20:85:be:c6:81:4d:61:7b:bd:c4:bf:71:ca:8b:15:d6:47:
         58:e8:45:a6:b6:fb:51:5f:a4:9f:97:64:de:63:35:4d:63:dd:
         c5:21:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:24 2026 by rpki-client