Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3139312e302f32342d3234203d3e203237393838.roa
File:                     3138362e3132312e3139312e302f32342d3234203d3e203237393838.roa (raw, json)
Hash identifier:          mrV4TIfumF6v5/5YtVDfS2EvvPWdhaDp9bQeDzzGNGY=
Subject key identifier:   36:09:3A:40:1F:9F:DC:D6:F0:A4:B0:21:2E:EC:2C:D3:D5:39:B2:DA
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       37584B10A4E652A78F7B166C177C3538838C4C8C
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3139312e302f32342d3234203d3e203237393838.roa
Signing time:             Wed 20 Aug 2025 11:00:00 +0000
ROA not before:           Wed 20 Aug 2025 10:55:00 +0000
ROA not after:            Wed 19 Aug 2026 11:00:00 +0000
asID:                     27988
IP address blocks:        186.121.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:58:4b:10:a4:e6:52:a7:8f:7b:16:6c:17:7c:35:38:83:8c:4c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Aug 20 10:55:00 2025 GMT
            Not After : Aug 19 11:00:00 2026 GMT
        Subject: CN=36093A401F9FDCD6F0A4B0212EEC2CD3D539B2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:b3:90:e8:3b:bc:87:bd:43:ef:72:0d:b1:
                    a3:c1:f3:fc:b8:06:37:da:7f:b7:3d:8f:b0:21:c4:
                    1f:04:5c:4a:55:00:d5:40:b4:45:48:5f:a8:58:f5:
                    d6:c9:0f:f2:45:f2:44:6c:5e:aa:87:8e:40:f3:48:
                    28:6a:ae:29:81:7d:8f:1b:1f:1f:f9:e8:93:94:7e:
                    84:e3:d0:d3:50:75:41:62:42:dc:71:91:79:ba:de:
                    de:37:d7:8b:24:dc:9f:35:33:3e:45:c1:7b:a4:2d:
                    dc:f6:bd:09:3d:80:6d:60:94:05:bc:66:12:e5:f5:
                    bb:81:dd:7c:71:58:5d:ea:00:52:58:f1:fc:6f:99:
                    a9:8c:17:9d:dc:66:00:7e:f8:a7:00:87:20:1d:ac:
                    7e:4f:e5:32:9d:18:ae:4a:87:85:1c:7c:5d:b5:9e:
                    62:ff:a6:ab:c5:98:b3:2d:06:9a:7c:11:b3:db:63:
                    0c:ef:c2:e0:73:84:88:f1:20:d5:94:1e:4c:78:11:
                    b2:7f:00:a2:d2:81:8c:14:40:17:32:8f:ed:c0:90:
                    0d:41:75:31:96:41:09:bb:3e:4d:2c:7e:63:5e:2d:
                    ec:c0:e3:35:bb:44:78:55:77:ed:ad:a2:34:93:c3:
                    09:f0:ac:8c:19:d8:50:5a:c1:fe:e1:a7:ed:fe:31:
                    e9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:3A:40:1F:9F:DC:D6:F0:A4:B0:21:2E:EC:2C:D3:D5:39:B2:DA
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3138362e3132312e3139312e302f32342d3234203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:5a:bc:f0:83:34:5a:04:a4:78:bc:62:cf:51:78:ac:82:
         05:75:f4:f9:b6:42:3d:e6:cc:70:3b:52:0b:22:dd:85:c3:36:
         6a:3d:c7:4d:93:a5:1d:1f:76:1c:a0:fc:6a:62:10:c4:6a:b7:
         d7:3c:56:75:08:7b:76:8a:79:80:3e:a4:5f:04:48:c2:04:e1:
         d4:13:a8:74:43:f6:75:9d:ea:b0:40:a4:d9:46:71:23:e1:4b:
         aa:af:18:80:ba:31:c7:7e:5e:98:f0:00:fa:57:41:10:36:07:
         c2:a9:f4:b9:ae:b8:0e:d1:b4:04:d9:5c:d4:e6:25:5b:37:74:
         13:8f:e7:17:9e:99:11:29:e2:75:f3:2f:e1:3c:d1:37:f4:5e:
         86:60:90:42:5b:da:28:5f:12:99:69:af:62:a0:0e:db:b2:f4:
         8b:32:74:29:91:ab:46:34:8a:84:32:b4:09:ff:4d:ab:b7:ca:
         21:1d:cf:8d:a9:5b:e9:fc:28:18:fd:33:2f:9f:7e:07:00:87:
         f0:72:6f:4a:1c:40:3a:ad:82:a1:4c:2a:f9:cc:04:e2:73:2c:
         cc:d5:04:3b:6e:ca:93:ef:09:1e:45:9d:3c:13:7a:c4:9c:bb:
         d2:92:16:17:e9:62:d6:61:0a:33:c7:41:cb:17:fa:10:e8:a2:
         d4:29:fa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:26:13 2025 by rpki-client