Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa
File:                     3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          x262yONjj5JxR8zEOjB8M+LRCK/k8TUHyMU4GG+a994=
Subject key identifier:   91:00:D7:2E:11:24:47:86:5D:A2:13:A0:0D:CE:E1:14:7A:14:78:1C
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       5CE43546B05EB9EA9E0D677D48127AB8B6EDCF17
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 13:00:00 +0000
ROA not before:           Thu 02 Oct 2025 12:55:00 +0000
ROA not after:            Thu 01 Oct 2026 13:00:00 +0000
asID:                     27827
IP address blocks:        186.121.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e4:35:46:b0:5e:b9:ea:9e:0d:67:7d:48:12:7a:b8:b6:ed:cf:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:55:00 2025 GMT
            Not After : Oct  1 13:00:00 2026 GMT
        Subject: CN=9100D72E112447865DA213A00DCEE1147A14781C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:ea:fb:da:e8:b3:9d:df:cc:f9:6f:e2:45:
                    69:9b:f0:8b:43:fa:9a:90:e0:04:04:07:b7:23:46:
                    aa:7d:19:db:c1:c2:37:83:9f:6d:c7:7f:d1:e6:b8:
                    00:20:8f:3b:d5:c5:df:c8:3f:8f:18:d0:08:dd:87:
                    fb:11:82:1a:bc:6f:92:d9:9d:03:b8:76:12:c5:85:
                    ca:b1:70:83:91:4e:d8:ef:f6:06:89:b1:b2:7b:0a:
                    d3:34:ce:ef:dc:97:2b:72:51:22:78:2a:01:66:dc:
                    95:9d:7d:8c:3d:91:a1:48:07:cf:d8:3a:0a:e5:ca:
                    76:45:0b:99:1b:d4:e0:67:34:94:fc:16:54:84:aa:
                    95:a1:81:d4:14:5c:08:22:d8:08:69:34:5f:9d:12:
                    2c:5a:c4:81:c3:35:83:85:a0:64:30:e9:28:24:45:
                    fc:25:1c:39:92:23:b3:2e:69:58:f4:ae:41:d5:3f:
                    4f:f8:b8:e0:36:81:2f:7a:1c:7a:ec:47:87:e5:fd:
                    59:b9:59:44:04:92:79:b7:26:bd:9d:6b:6e:42:11:
                    c9:11:ec:b5:96:c2:00:24:5d:2e:f5:66:9d:e1:96:
                    a1:11:2f:47:6f:2b:bf:6b:7c:3c:22:cc:e5:b7:3f:
                    4d:8b:bd:3b:73:a4:3d:28:8a:8b:97:cd:6e:b1:63:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:00:D7:2E:11:24:47:86:5D:A2:13:A0:0D:CE:E1:14:7A:14:78:1C
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3137382e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:8c:a4:da:f5:3d:fe:89:2a:45:3e:4d:5c:52:49:d9:4f:
         e7:3d:04:66:65:15:2b:e5:9d:31:d2:71:42:4e:59:f6:b4:3e:
         3c:6a:10:4c:18:08:37:8d:9b:24:bf:38:c0:9f:95:07:a1:5a:
         bf:b7:65:55:a2:3e:5c:fb:ff:a5:29:c8:41:b1:99:4b:81:ae:
         a5:b6:78:73:ce:01:f6:94:96:51:4f:ce:b1:cb:aa:e2:93:97:
         58:29:80:63:98:17:ab:b2:ad:93:8a:cd:34:cc:85:cf:46:24:
         52:c3:e6:2a:ef:ec:99:1c:d5:28:e1:b5:3c:f1:67:0b:d4:80:
         3a:fa:f6:05:50:48:4e:43:11:55:1c:dc:4e:26:30:23:65:6e:
         50:c3:95:85:0b:0a:1d:fd:10:9c:e0:19:09:42:84:8f:2d:0b:
         66:18:c8:03:3d:ce:31:df:b7:84:ed:25:77:29:3b:53:2f:64:
         8f:a4:08:8d:a5:d9:4e:5a:cf:c9:72:1b:d7:d0:76:94:1a:17:
         38:18:ab:52:d7:da:b7:22:26:7f:f6:d5:71:ed:05:e6:6a:02:
         d4:74:1c:ee:37:f7:5e:ba:70:6e:ab:af:9b:46:39:8e:59:95:
         90:82:d1:37:66:9f:65:58:9e:a0:47:b2:cd:23:8d:cc:5d:50:
         35:e5:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:42 2025 by rpki-client