Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e362e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e362e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          NbWDQG9VD6AqqR0Y4Ac3d4i/6xpId4dVvjgtg14ZLZA=
Subject key identifier:   06:1E:09:1D:14:25:FD:6C:EB:33:07:80:48:E5:11:FA:8C:9F:D4:28
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       38E66A5F974649EEE09A609B6B245054CB3B1021
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e362e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 12:33:29 +0000
ROA not before:           Thu 03 Sep 2026 12:28:29 +0000
ROA not after:            Thu 02 Sep 2027 12:33:29 +0000
asID:                     27827
IP address blocks:        190.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e6:6a:5f:97:46:49:ee:e0:9a:60:9b:6b:24:50:54:cb:3b:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 12:28:29 2026 GMT
            Not After : Sep  2 12:33:29 2027 GMT
        Subject: CN=061E091D1425FD6CEB33078048E511FA8C9FD428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a2:de:27:f8:93:f4:ac:b9:df:de:d2:87:0b:
                    f6:0f:ad:18:98:72:2d:ed:29:4c:0e:de:4d:8b:fa:
                    b9:a3:85:df:94:92:2f:b0:71:4b:3e:76:b5:aa:48:
                    6a:a3:69:21:38:56:ac:ef:05:03:5f:51:f2:1d:ac:
                    67:fb:5b:f7:63:61:2d:38:d4:f1:ed:6d:92:d1:27:
                    d8:6e:75:12:58:40:20:09:33:a2:5b:54:08:f5:e3:
                    6a:c6:1d:be:e5:4a:cf:1b:a5:b7:7e:ef:64:99:08:
                    1c:79:e6:66:d3:a8:dd:52:7f:e3:48:ae:32:6e:ae:
                    23:dd:4c:7d:e5:c3:09:6b:e1:8f:b8:c5:03:dc:2f:
                    b8:6e:84:11:92:a0:2d:2b:fa:de:b0:01:d3:0d:f2:
                    be:db:50:4d:00:16:b7:56:59:04:1b:53:ab:b2:95:
                    7d:19:13:0d:cd:85:73:14:39:2b:cb:c9:1e:54:ef:
                    a8:52:c2:be:66:be:9c:e0:ba:48:e3:6b:a6:27:d0:
                    1e:1e:19:52:0b:d2:ed:a0:fd:5a:3c:63:95:14:a3:
                    f3:f1:b0:f7:aa:64:a2:4d:de:ea:6b:ed:b6:e6:0b:
                    b2:fd:76:50:04:78:bd:09:62:33:c7:c5:77:68:b0:
                    47:cc:a5:b5:f3:c2:44:59:ef:5f:ad:0f:ea:62:e3:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1E:09:1D:14:25:FD:6C:EB:33:07:80:48:E5:11:FA:8C:9F:D4:28
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e362e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:9e:ce:4a:79:6a:31:36:7c:5c:9c:a1:e2:07:dd:c1:9f:
         0d:3f:68:b0:bc:67:d9:2b:66:f9:74:c0:8c:19:7c:b0:b6:32:
         35:be:bb:08:1e:c5:4f:5e:79:19:40:65:f6:63:7c:25:28:78:
         2c:f2:26:e8:64:03:fa:29:e1:49:d3:20:00:be:b6:13:fc:d5:
         55:75:e3:6b:27:19:23:ad:39:27:e4:01:af:87:9b:1c:f2:6c:
         07:08:cf:0f:1f:ed:ff:0b:2c:e3:99:49:7a:6a:e1:96:43:75:
         35:0f:3d:bb:d3:eb:02:0c:bd:fc:7a:b9:50:fd:89:46:e6:ea:
         d9:fb:ee:4d:cf:71:ae:1b:ae:5f:40:af:d6:9a:f5:52:cc:58:
         b4:66:33:fa:05:56:d2:da:b9:11:a6:1e:dd:e7:e3:86:6c:25:
         a4:28:fc:15:aa:ab:35:c8:1e:fb:51:a1:c3:f2:ba:84:cb:bb:
         57:39:36:42:cd:b6:c8:05:67:79:58:63:b2:cd:21:d6:2c:00:
         e4:4f:dc:99:4d:c1:77:4b:b2:7f:63:a5:4f:af:7c:ca:cf:71:
         11:ae:b9:6c:ce:a6:1f:89:f5:e4:70:8f:07:f8:a8:c8:9b:44:
         6a:f2:d4:e1:d7:95:46:c3:04:71:53:00:72:59:d0:31:53:32:
         83:f8:ea:2d
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUOOZqX5dGSe7gmmCbayRQVMs7ECEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1QzJERTc3NENGQzQ1ODM0Njc1REIxQUE2RUM4QTc1
MjhENjU2RDAeFw0yNjA5MDMxMjI4MjlaFw0yNzA5MDIxMjMzMjlaMDMxMTAvBgNV
BAMTKDA2MUUwOTFEMTQyNUZENkNFQjMzMDc4MDQ4RTUxMUZBOEM5RkQ0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzot4n+JP0rLnf3tKHC/YPrRiY
ci3tKUwO3k2L+rmjhd+Uki+wcUs+drWqSGqjaSE4VqzvBQNfUfIdrGf7W/djYS04
1PHtbZLRJ9hudRJYQCAJM6JbVAj142rGHb7lSs8bpbd+72SZCBx55mbTqN1Sf+NI
rjJuriPdTH3lwwlr4Y+4xQPcL7huhBGSoC0r+t6wAdMN8r7bUE0AFrdWWQQbU6uy
lX0ZEw3NhXMUOSvLyR5U76hSwr5mvpzgukjja6Yn0B4eGVIL0u2g/Vo8Y5UUo/Px
sPeqZKJN3upr7bbmC7L9dlAEeL0JYjPHxXdosEfMpbXzwkRZ71+tD+pi49eDAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUBh4JHRQl/WzrMweASOUR+oyf1CgwHwYDVR0j
BBgwFoAUE1wt53TPxFg0Z12xqm7Ip1KNZW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkUxM0U2NEM2NjIyRDI4M0MzNEE2MTJEQUE5RDY2RTJD
OUI3Mzg5RjNBMzQ1MkFENTEzRkY1MERCQTY2RjMxLzAvMTM1QzJERTc3NENGQzQ1
ODM0Njc1REIxQUE2RUM4QTc1MjhENjU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzVDMkRFNzc0Q0ZDNDU4MzQ2
NzVEQjFBQTZFQzhBNzUyOEQ2NTZELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFMTNFNjRDNjYyMkQyODNDMzRBNjEyREFBOUQ2NkUyQzlCNzM4OUYz
QTM0NTJBRDUxM0ZGNTBEQkE2NkYzMS8wLzMxMzkzMDJlMzUyZTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4FBjANBgkqhkiG
9w0BAQsFAAOCAQEAFdiezkp5ajE2fFycoeIH3cGfDT9osLxn2Stm+XTAjBl8sLYy
Nb67CB7FT155GUBl9mN8JSh4LPIm6GQD+inhSdMgAL62E/zVVXXjaycZI605J+QB
r4ebHPJsBwjPDx/t/wss45lJemrhlkN1NQ89u9PrAgy9/Hq5UP2JRubq2fvuTc9x
rhuuX0Cv1pr1UsxYtGYz+gVW0tq5EaYe3efjhmwlpCj8FaqrNcge+1Ghw/K6hMu7
Vzk2Qs22yAVneVhjss0h1iwA5E/cmU3Bd0uyf2OlT698ys9xEa65bM6mH4n15HCP
B/ioyJtEavLU4deVRsMEcVMAclnQMVMyg/jqLQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:20 2026 by rpki-client