Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33312e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e33312e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          UA6dMz+kFUROJQqSHtHdxJxcMDTFlCsshN5+JnScd6Q=
Subject key identifier:   AE:ED:56:01:8E:9E:0B:21:60:53:FB:C4:C8:A1:F6:E0:73:C8:F6:BD
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       37693FF4D93B76B68F14DF95D4B2EBC178D566D8
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33312e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 13:33:39 +0000
ROA not before:           Thu 03 Sep 2026 13:28:39 +0000
ROA not after:            Thu 02 Sep 2027 13:33:39 +0000
asID:                     27827
IP address blocks:        190.5.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:69:3f:f4:d9:3b:76:b6:8f:14:df:95:d4:b2:eb:c1:78:d5:66:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 13:28:39 2026 GMT
            Not After : Sep  2 13:33:39 2027 GMT
        Subject: CN=AEED56018E9E0B216053FBC4C8A1F6E073C8F6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:e5:72:36:10:28:7a:41:11:7d:ec:f4:5a:
                    b6:c9:26:10:b4:0d:32:66:06:9b:80:d5:f8:00:b8:
                    d0:a7:c1:a7:8e:06:8c:d0:c4:2b:28:02:3b:55:c3:
                    bd:be:d5:7d:2a:18:7f:ea:9d:2e:8a:a7:a0:69:43:
                    fa:54:9e:96:15:4d:13:ca:f3:5b:47:16:92:d3:9f:
                    b3:ad:d9:30:7b:bc:50:e8:08:e3:77:54:56:75:d0:
                    2f:93:d9:2b:c3:de:85:66:2c:9a:35:58:a9:18:9c:
                    64:20:6a:87:22:23:d2:80:c6:69:d0:a9:9f:b7:c5:
                    9a:9a:d1:de:85:25:78:02:f0:8e:0f:51:c1:a7:05:
                    c3:17:88:da:01:84:49:e0:fa:ed:6a:07:66:84:ba:
                    2a:6e:41:79:ee:ac:07:74:72:7f:52:48:44:4a:94:
                    e9:5d:48:17:f0:dd:ee:1a:32:23:3f:90:48:0d:c5:
                    7c:b3:06:76:48:b1:6d:89:b2:01:1f:e4:38:37:dc:
                    55:8b:ec:af:0c:b1:97:0f:7d:b0:1b:2b:31:ee:74:
                    76:33:28:6e:b3:8c:92:ce:3e:ad:94:5e:31:73:f7:
                    f2:2b:a1:79:75:71:a7:3e:de:a4:d4:fd:5a:b8:ce:
                    12:06:3f:71:1b:b3:8e:d6:42:5e:c5:0f:ba:31:c4:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:56:01:8E:9E:0B:21:60:53:FB:C4:C8:A1:F6:E0:73:C8:F6:BD
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33312e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:25:a7:2f:7c:37:35:fb:07:e0:3e:8c:59:0f:8c:9c:30:df:
         95:a3:b6:8a:b5:52:70:e6:5d:0f:2c:0f:11:ee:fe:ee:68:85:
         4c:65:90:ca:7a:e1:41:4e:2b:af:26:3b:ff:00:79:6a:25:83:
         e0:28:26:af:7a:63:c3:f3:5f:5a:b4:a5:46:b1:9b:7b:0e:0f:
         98:b3:64:2e:9f:64:7d:d3:82:6e:bf:bb:ee:b6:6d:99:d4:68:
         75:e8:87:29:5d:12:eb:a6:f2:30:4c:d8:04:b9:eb:2e:eb:fd:
         93:8a:c0:37:6c:55:5c:ad:ac:6b:a8:72:0a:5f:c6:5f:c9:f7:
         7e:38:cd:c9:bb:e0:89:7b:83:87:1d:9e:ed:d9:90:26:8e:24:
         f5:c6:ea:52:da:60:eb:f2:67:bb:13:db:1f:e0:45:ef:eb:aa:
         d1:54:a8:43:7c:3c:43:24:43:c1:18:13:f0:83:a7:7e:ee:b1:
         e1:95:6c:d6:bc:bd:b8:1a:e9:96:18:45:6b:6f:76:1b:dc:1c:
         f5:ef:cc:a2:2d:20:7b:56:ca:35:cd:08:d2:b1:2e:56:b3:c5:
         12:13:a5:63:4f:b7:c4:c8:ba:bf:89:88:8d:06:49:fb:2e:e6:
         63:58:63:73:ac:c9:3e:62:56:f5:a6:03:c9:e3:e1:7f:1c:a4:
         aa:25:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:24:31 2026 by rpki-client