Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa
File:                     3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          jPqDdauRLlDKzIOAbVRgE9o5gO8NnnJzan0vVcA049A=
Subject key identifier:   29:45:7B:42:49:23:A7:55:25:0C:34:88:D1:01:C6:E5:A6:43:72:A5
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       064B1DAD97C396F964BE4A0CCF6EBA90913C3301
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa
Signing time:             Tue 30 Sep 2025 13:15:00 +0000
ROA not before:           Tue 30 Sep 2025 13:10:00 +0000
ROA not after:            Tue 29 Sep 2026 13:15:00 +0000
asID:                     27827
IP address blocks:        186.121.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:1d:ad:97:c3:96:f9:64:be:4a:0c:cf:6e:ba:90:91:3c:33:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Sep 30 13:10:00 2025 GMT
            Not After : Sep 29 13:15:00 2026 GMT
        Subject: CN=29457B424923A755250C3488D101C6E5A64372A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:2d:94:67:15:87:a9:c8:9d:58:fb:7e:86:
                    d6:5a:24:21:a8:ef:47:b4:41:20:55:f8:81:05:36:
                    53:82:a4:c5:bc:68:bf:02:c7:45:1d:eb:4a:ba:e4:
                    f6:91:ed:e6:c5:cd:39:28:b2:60:04:52:ed:39:38:
                    39:34:c7:be:ec:3c:09:22:3f:68:ad:c6:f7:81:ec:
                    0d:5f:dd:ef:eb:89:2f:08:8a:19:52:8e:b4:d5:1f:
                    5f:02:bf:ca:8f:12:4e:62:de:01:72:bb:9c:bc:2c:
                    16:ff:8e:fb:c4:a7:21:da:95:49:25:29:df:73:6f:
                    cf:28:0b:4a:f3:6a:a8:f3:78:c1:ad:6c:bd:a8:24:
                    3b:2c:63:12:28:95:48:cc:ab:2b:dd:b6:f5:6d:6c:
                    fa:c0:a7:bf:b4:d4:cc:e4:43:58:92:9f:72:58:e2:
                    27:f4:b5:20:79:dd:f9:ed:d7:cf:9d:c2:3e:ea:58:
                    f0:49:66:81:fb:db:e5:ef:48:b3:f9:b0:0f:c3:40:
                    1b:ff:8c:96:3d:84:e3:c9:12:de:1d:af:b5:43:59:
                    34:a6:a7:a6:27:9c:71:ae:42:43:50:9d:83:1e:2e:
                    e2:62:6d:0c:1f:2d:4a:0f:2a:e3:83:60:41:14:3d:
                    3e:3d:46:d9:32:d8:37:52:31:7f:b8:e1:93:bf:37:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:7B:42:49:23:A7:55:25:0C:34:88:D1:01:C6:E5:A6:43:72:A5
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3138332e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:20:1f:7f:22:eb:38:42:63:d3:ad:82:55:f5:49:e2:b9:
         b6:35:1e:dc:da:5a:4d:e8:95:9c:5a:5b:a4:d1:9d:e5:b3:99:
         8d:35:16:38:18:72:9f:e2:71:43:be:8c:4c:17:4f:d1:22:2b:
         a6:e8:8d:53:c0:25:be:47:6f:49:90:8f:7f:b5:6e:78:ba:95:
         71:74:06:aa:d1:c1:74:08:3c:e4:d1:87:2b:db:bb:c3:42:d7:
         c2:79:21:a4:f7:27:4a:1a:ff:d4:48:ba:92:72:19:22:bb:b3:
         02:6c:cb:37:0c:60:1c:cd:58:79:59:d2:bf:d4:dc:34:cc:6c:
         d1:d9:de:03:9d:a5:f4:e7:39:f2:97:cb:dd:17:9c:3e:70:4c:
         d6:d7:f2:60:ca:e1:2b:fa:5f:26:2c:df:47:73:1e:f5:94:95:
         d6:30:0a:ca:33:12:7f:ef:41:8c:6d:52:2f:42:73:59:0b:38:
         1a:b6:1b:c6:fb:cf:5a:61:4a:c2:f3:33:96:ed:bc:8d:95:fb:
         1d:2f:67:3e:d8:b2:c9:7a:c5:a7:06:0f:e3:fe:61:0c:54:de:
         9d:80:9b:7c:8c:66:fe:1f:d3:31:f4:cf:a6:99:82:5f:25:77:
         bf:5c:36:c4:68:59:e0:74:04:d5:7c:f6:16:11:d8:f9:23:f1:
         78:97:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:44 2025 by rpki-client