Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31312e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31312e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          boFhJ04yLE0PaWrZMZn90sT9BdHK9c+flse+LKbyt50=
Subject key identifier:   95:59:2D:44:31:C1:C6:60:E3:0A:35:00:CF:43:0A:22:C7:45:91:37
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       67E3FEFCF27983F9A7140FEFF9CED03183B1D156
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31312e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:30:01 +0000
ROA not before:           Thu 02 Oct 2025 12:25:01 +0000
ROA not after:            Thu 01 Oct 2026 12:30:01 +0000
asID:                     27827
IP address blocks:        190.5.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e3:fe:fc:f2:79:83:f9:a7:14:0f:ef:f9:ce:d0:31:83:b1:d1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:25:01 2025 GMT
            Not After : Oct  1 12:30:01 2026 GMT
        Subject: CN=95592D4431C1C660E30A3500CF430A22C7459137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:48:f0:82:57:0c:c3:1c:7f:a7:2c:7e:03:
                    2d:82:53:84:a1:89:64:b0:28:85:56:7d:92:0b:a0:
                    04:77:d4:15:10:c3:37:fe:f4:32:76:6a:1b:db:00:
                    7d:a3:bf:86:44:c9:47:a6:75:70:00:da:bd:5b:cb:
                    1a:45:74:3d:fa:ff:ff:d0:de:ca:69:ae:3b:3d:0c:
                    3c:4a:32:cb:63:b3:49:c8:40:44:d4:70:ff:08:4e:
                    18:67:75:04:4e:57:2e:f6:b3:96:b2:72:4d:b2:f6:
                    54:ff:c6:ae:6d:1b:b6:ae:fd:9a:62:45:11:47:fb:
                    36:8a:ab:f8:1d:04:79:6a:c5:55:92:f4:e1:a6:c0:
                    85:2c:8e:66:c0:2d:b7:a0:bd:5b:fa:9a:af:10:da:
                    82:26:ae:e7:20:b6:14:21:69:b3:d2:5b:7e:f1:a5:
                    c8:4d:6f:fc:df:48:50:d9:36:4f:d4:8a:eb:2f:49:
                    a5:b5:bb:ea:d5:96:7a:69:98:66:e7:be:81:57:71:
                    9f:9e:fc:e1:d5:14:60:6b:64:5a:e8:cb:59:0c:8e:
                    6a:70:4f:a5:46:1e:5e:5a:a3:ba:c3:98:87:a8:97:
                    28:40:1f:7b:cd:b7:41:70:32:fe:1a:35:75:b5:7c:
                    9e:c9:90:6a:d9:a6:57:04:99:6a:e2:62:63:95:01:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:2D:44:31:C1:C6:60:E3:0A:35:00:CF:43:0A:22:C7:45:91:37
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31312e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:20:1a:34:d6:52:e6:4e:86:69:7a:8a:cc:8a:0a:3d:91:35:
         03:93:86:cd:c2:cb:8a:88:d8:e9:4c:83:66:5e:8c:cc:b9:e8:
         c2:b4:e7:91:ac:7f:b2:48:ac:58:9b:1a:54:8b:9a:2d:3a:09:
         8c:e9:74:e1:70:dd:6a:fd:24:89:ba:e0:e3:f2:82:25:9a:89:
         b5:27:43:e2:18:74:44:30:f2:a7:35:10:d5:cd:c0:8f:ef:fa:
         4b:16:09:b5:92:0d:c0:e9:b3:17:aa:45:93:47:0a:9e:4e:4d:
         84:02:11:4f:55:68:a8:6a:59:6b:8c:29:71:e9:3d:c6:2a:48:
         61:9f:50:09:67:5e:0e:07:a1:94:b8:65:e1:07:90:55:bf:a5:
         4c:f3:a8:5f:cd:ff:94:71:f2:d0:98:fb:a7:91:05:0d:ec:d3:
         aa:69:47:18:f0:8d:11:e8:72:a9:5f:47:3d:26:d5:ef:b0:95:
         a2:9d:39:f9:e4:4c:6c:5d:1c:a5:07:ff:d6:fb:d1:15:e9:c0:
         a5:3e:0c:11:56:fb:d0:51:4a:2e:25:9c:fa:0a:ca:ae:44:ad:
         7d:7b:4a:7a:cb:d7:86:5b:c7:8a:c4:34:48:1e:9d:f1:df:e5:
         23:43:68:84:11:ec:99:ca:f8:07:79:f5:8d:c5:9d:66:d7:bc:
         7e:dd:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:39 2025 by rpki-client