Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33302e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e33302e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          tk9HhhhBnINSQtPMw0LsB/gBhcK+McJYFaQ9lcWYaTQ=
Subject key identifier:   82:8E:1D:92:12:83:8F:0A:1F:89:BB:8F:CE:13:F2:48:44:9C:7B:23
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       0AA57C2BA64F5FB0A38243C2683419D5626134A3
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33302e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:42 +0000
ROA not before:           Thu 03 Sep 2026 13:28:42 +0000
ROA not after:            Thu 02 Sep 2027 13:33:42 +0000
asID:                     27827
IP address blocks:        190.5.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:7c:2b:a6:4f:5f:b0:a3:82:43:c2:68:34:19:d5:62:61:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:42 2026 GMT
            Not After : Sep  2 13:33:42 2027 GMT
        Subject: CN=828E1D9212838F0A1F89BB8FCE13F248449C7B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:10:c3:05:fe:6e:7a:73:27:b9:4e:79:db:
                    c5:76:09:38:13:f2:a6:73:d3:f6:00:c2:5b:5f:05:
                    e5:c0:91:86:f8:87:87:53:e4:c6:f0:26:32:c3:5e:
                    80:3e:36:99:fb:26:04:f2:63:bb:c7:47:f5:a5:f4:
                    60:56:0d:12:24:4a:9e:90:02:a3:ba:4e:68:a2:1c:
                    95:ca:f5:87:96:40:bc:d0:5a:96:30:52:03:b6:3c:
                    b2:0a:0a:56:c9:df:d8:53:60:75:55:5b:ce:11:95:
                    2c:39:0e:19:ad:46:13:6f:25:65:a9:6d:01:ba:4e:
                    75:1a:9e:b1:31:26:9b:89:90:52:63:ff:79:64:cc:
                    26:89:8d:06:7d:e7:ea:c8:9c:7c:e2:47:ca:85:94:
                    a0:1a:6f:63:61:a0:fd:6f:b1:09:7b:b9:13:aa:3f:
                    1c:57:52:61:95:16:b9:67:0e:10:58:ff:30:38:4f:
                    42:96:18:d0:30:eb:cd:ea:4b:1a:1e:8e:72:2a:32:
                    f9:f0:d7:10:50:8e:07:e1:78:57:ff:12:fe:bf:54:
                    87:31:6a:bc:91:64:56:23:b0:7f:bb:b7:8d:e2:d3:
                    dd:20:d4:c7:df:a4:e6:3a:2a:9c:c7:0a:93:5e:d1:
                    76:c9:bd:7b:f8:3b:3e:df:d6:d2:bf:de:2d:66:64:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:1D:92:12:83:8F:0A:1F:89:BB:8F:CE:13:F2:48:44:9C:7B:23
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33302e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:30:6e:b1:f0:12:6e:f7:1c:fb:97:96:7f:62:fe:16:6f:
         2d:0c:d2:81:82:42:05:12:2a:4e:2f:49:c3:48:37:97:16:88:
         d9:06:13:19:d8:e2:6e:a9:cb:c5:e0:79:5c:9d:26:74:8c:8a:
         37:b3:24:32:7b:45:58:d0:59:9e:ea:74:8c:2e:73:e4:fd:32:
         10:db:0d:1e:03:01:e4:33:42:d1:39:67:9d:0a:4b:5f:37:0d:
         8c:ff:81:38:29:67:7e:85:30:d3:05:64:36:b5:4a:ed:7f:90:
         03:45:bc:a6:87:b8:b0:28:34:f2:58:a5:38:72:a6:35:be:3d:
         59:f1:ff:6b:bb:a3:71:98:a3:96:df:ec:9a:ae:7a:52:9a:73:
         2c:c7:52:fa:b3:38:8b:3a:da:fb:c2:ed:8b:12:d3:29:d5:7c:
         c9:71:da:88:74:3f:2d:e7:73:f5:43:1e:6a:9e:77:55:9c:d1:
         14:2e:58:a3:0e:19:47:16:e6:9f:30:cd:66:92:b8:a0:2f:b0:
         7c:72:ff:e4:26:3d:5d:16:34:37:39:5f:ce:99:89:66:c9:fc:
         69:e1:93:fc:cf:e3:77:e4:8e:6b:2c:f8:80:a6:ea:42:fb:ea:
         67:22:4d:da:52:ba:1c:c9:14:d9:28:b1:2e:f2:6e:97:b7:41:
         bd:40:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:19 2026 by rpki-client