Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e382e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e382e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          JA8bv71+U7rJ2+qXmcq3b+CfiOjzDGdEKOyLLjajfMg=
Subject key identifier:   44:E7:02:E0:E4:FD:0F:B4:EC:84:EA:EF:BE:E4:30:C2:E9:7A:5B:B3
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       5B5791A5F141A4FA8EE3CE22632B8A3B3312935E
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e382e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 03 Sep 2026 12:33:31 +0000
ROA not before:           Thu 03 Sep 2026 12:28:31 +0000
ROA not after:            Thu 02 Sep 2027 12:33:31 +0000
asID:                     27827
IP address blocks:        190.5.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:57:91:a5:f1:41:a4:fa:8e:e3:ce:22:63:2b:8a:3b:33:12:93:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep  3 12:28:31 2026 GMT
            Not After : Sep  2 12:33:31 2027 GMT
        Subject: CN=44E702E0E4FD0FB4EC84EAEFBEE430C2E97A5BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:c8:2c:03:75:b2:8d:be:e8:c6:e1:d0:66:
                    10:df:6c:da:6f:cd:86:73:41:a1:41:b8:e4:fb:1d:
                    17:0c:68:03:66:08:e8:52:87:f7:d1:2c:58:e8:2d:
                    97:39:5c:b8:36:52:0e:2b:d9:9d:cb:4d:c5:a7:80:
                    6e:ac:72:93:cb:e5:3f:35:b4:45:fe:fd:1a:90:ba:
                    82:20:c9:9d:3f:c7:0a:6f:fa:91:a0:9a:f0:db:6b:
                    f3:43:8a:a9:55:b3:bd:56:6d:57:fd:99:8c:47:b9:
                    f5:76:86:f8:ac:25:23:0a:bc:27:a1:d6:67:cb:bd:
                    fe:b2:ac:ad:45:41:d3:ac:b4:e5:8a:b8:57:38:c4:
                    31:58:f6:a0:8b:13:6d:72:d8:00:06:5a:39:ae:eb:
                    04:1f:23:d3:79:ae:16:2d:5f:48:d2:0d:32:00:ca:
                    eb:b1:5c:8d:d3:64:5d:e3:90:f6:13:31:44:68:2f:
                    01:ef:0a:0e:99:f7:be:4b:f7:c6:5d:67:ad:d1:72:
                    41:75:1a:e5:3b:93:28:b3:55:08:df:71:54:27:2a:
                    fa:1a:4e:95:ef:cb:9a:a8:d5:b0:7e:77:85:7e:6b:
                    34:29:f1:90:41:09:b4:8c:09:bb:fb:34:23:f1:d0:
                    70:c9:ea:6c:92:92:1a:5c:6a:cf:a3:b6:8d:bb:be:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:02:E0:E4:FD:0F:B4:EC:84:EA:EF:BE:E4:30:C2:E9:7A:5B:B3
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e382e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9c:b0:1d:a9:9d:d9:82:25:4d:86:e1:87:92:8f:d4:15:d2:
         47:d1:37:fa:66:de:5d:30:eb:f1:5d:76:0f:d6:ef:c0:9f:74:
         fa:37:c4:82:04:65:e9:91:1d:d2:30:50:c0:e8:80:a3:4c:b8:
         be:1a:b0:df:c9:5e:ae:29:74:b6:02:ab:72:26:86:12:57:1b:
         1e:f0:35:73:cd:ca:46:4e:bd:b5:70:18:dc:db:17:47:c5:99:
         42:69:45:0e:fa:a2:20:5c:74:0e:8c:18:4f:11:ec:b2:64:81:
         6a:2a:7e:46:e8:87:b1:7a:9d:a8:bf:93:33:c4:20:f4:d1:27:
         01:4c:e5:1b:c6:d6:76:d0:e6:bf:2d:68:8a:99:8a:13:ac:70:
         fd:30:f6:68:16:8f:19:ac:27:c2:8b:b0:d3:70:05:25:78:e1:
         90:24:04:ee:84:af:b4:47:0b:0e:32:16:e4:23:4e:de:f2:43:
         ba:73:a4:f7:dd:4f:e1:57:f4:20:a4:fe:18:91:af:00:bb:6b:
         fd:ea:ec:9e:f5:c8:12:fd:eb:35:d8:73:46:16:06:9d:e9:6c:
         60:2a:39:4d:85:95:27:08:fe:e0:c2:50:5b:5d:39:cb:79:0e:
         b8:26:1e:43:41:4b:a4:a5:f7:88:0a:5a:8a:78:20:c5:e3:d0:
         a9:e2:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:21 2026 by rpki-client