Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31332e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31332e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          nAQXlE+XgpppTOrk+w0YBoGCH6aVV8EAWQKSYKzMHi4=
Subject key identifier:   13:20:C5:EC:14:1F:E3:6E:90:A3:34:E4:27:56:42:04:EE:87:F1:FD
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       2F357163E4F4FECFA8A528FB9721F3C95FE30FFC
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31332e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:30:00 +0000
ROA not before:           Thu 02 Oct 2025 12:25:00 +0000
ROA not after:            Thu 01 Oct 2026 12:30:00 +0000
asID:                     27827
IP address blocks:        190.5.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:71:63:e4:f4:fe:cf:a8:a5:28:fb:97:21:f3:c9:5f:e3:0f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:25:00 2025 GMT
            Not After : Oct  1 12:30:00 2026 GMT
        Subject: CN=1320C5EC141FE36E90A334E427564204EE87F1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:89:da:1a:b0:77:16:51:9c:9c:1c:95:48:
                    95:0f:a2:14:05:75:20:60:43:71:ac:46:5b:73:4b:
                    71:ed:3f:80:a1:ea:b7:6c:3c:c2:83:25:47:64:79:
                    b4:c3:2b:d9:4b:11:a8:db:a9:1f:a0:5e:7b:e6:46:
                    d6:03:e2:35:ea:9d:7d:a1:03:4d:7d:2e:72:8e:dd:
                    9f:0e:18:ec:5b:7d:30:16:10:32:c8:1f:e6:d2:6e:
                    af:bb:67:8b:8a:51:32:ab:4d:8b:e6:7b:d6:4e:44:
                    7c:23:6f:f2:62:2d:b3:b3:b7:e8:83:fb:ca:9d:34:
                    a1:4d:81:66:b8:27:fe:20:7b:a6:d2:0d:8e:89:04:
                    b6:c5:b6:85:0a:46:77:60:25:3c:f9:fb:14:bc:c3:
                    45:d1:14:d8:07:70:94:b1:c5:a9:5f:6a:03:6c:77:
                    62:a6:c8:b1:d4:ea:07:2b:07:4e:7c:b4:22:9c:72:
                    79:79:f1:3d:34:d1:1f:17:55:f0:5c:39:6e:9b:91:
                    d1:36:7d:5b:d8:4c:97:31:14:5d:1b:2f:69:04:de:
                    b5:9e:1b:fd:0b:9b:cb:55:ac:a6:80:76:c9:c9:6e:
                    51:79:bd:06:76:ff:f7:3f:d2:d4:a6:54:b2:4f:7a:
                    fc:75:36:7f:20:3c:e9:55:6e:f0:0c:5d:e2:4b:ba:
                    cf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:C5:EC:14:1F:E3:6E:90:A3:34:E4:27:56:42:04:EE:87:F1:FD
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31332e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:bf:ef:ce:eb:fe:48:55:de:f2:5e:30:f2:35:2a:be:68:
         57:c6:af:95:86:5a:16:0e:b0:c6:5b:f9:92:b3:66:f7:f1:01:
         3b:9e:98:b3:f1:aa:07:6e:ec:19:29:62:a8:12:f3:59:7e:b2:
         c8:58:52:7c:45:87:b8:d9:4d:3b:c3:29:1a:e6:2c:5b:aa:41:
         55:a4:b4:3f:66:c9:11:a5:9d:f5:9a:07:cf:8e:38:e2:9e:1a:
         1e:fa:f0:58:41:24:66:e1:17:c2:90:16:bb:22:2f:67:2f:14:
         c7:9a:e4:59:dd:47:8f:e0:5e:5e:5a:e3:bd:33:56:43:82:e4:
         ca:0a:24:9f:cd:b0:79:8c:44:d0:0e:fa:f7:3f:4d:e4:be:7a:
         87:38:11:8b:1c:df:9a:38:ed:66:91:bf:d1:15:66:31:fd:7a:
         37:83:ff:f1:e6:b3:b4:46:6a:63:69:ad:c5:9c:36:85:83:a6:
         6e:8b:a4:75:c7:28:34:43:89:b7:bc:2b:12:b1:8b:c5:ad:35:
         d1:97:01:96:6a:d5:0f:2a:69:1d:ab:c3:62:38:16:3a:48:6d:
         35:bf:c7:c9:c4:4a:52:65:31:ec:3b:0f:3b:c2:17:4a:cf:0c:
         3f:c3:dc:4a:e2:63:4b:a9:e4:e9:d7:21:87:d4:0e:db:da:75:
         08:2c:8b:ab
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIULzVxY+T0/s+opSj7lyHzyV/jD/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1QzJERTc3NENGQzQ1ODM0Njc1REIxQUE2RUM4QTc1
MjhENjU2RDAeFw0yNTEwMDIxMjI1MDBaFw0yNjEwMDExMjMwMDBaMDMxMTAvBgNV
BAMTKDEzMjBDNUVDMTQxRkUzNkU5MEEzMzRFNDI3NTY0MjA0RUU4N0YxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2InaGrB3FlGcnByVSJUPohQF
dSBgQ3GsRltzS3HtP4Ch6rdsPMKDJUdkebTDK9lLEajbqR+gXnvmRtYD4jXqnX2h
A019LnKO3Z8OGOxbfTAWEDLIH+bSbq+7Z4uKUTKrTYvme9ZORHwjb/JiLbOzt+iD
+8qdNKFNgWa4J/4ge6bSDY6JBLbFtoUKRndgJTz5+xS8w0XRFNgHcJSxxalfagNs
d2KmyLHU6gcrB058tCKccnl58T000R8XVfBcOW6bkdE2fVvYTJcxFF0bL2kE3rWe
G/0Lm8tVrKaAdsnJblF5vQZ2//c/0tSmVLJPevx1Nn8gPOlVbvAMXeJLus9dAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUEyDF7BQf426QozTkJ1ZCBO6H8f0wHwYDVR0j
BBgwFoAUE1wt53TPxFg0Z12xqm7Ip1KNZW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkUxM0U2NEM2NjIyRDI4M0MzNEE2MTJEQUE5RDY2RTJD
OUI3Mzg5RjNBMzQ1MkFENTEzRkY1MERCQTY2RjMxLzAvMTM1QzJERTc3NENGQzQ1
ODM0Njc1REIxQUE2RUM4QTc1MjhENjU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzVDMkRFNzc0Q0ZDNDU4MzQ2
NzVEQjFBQTZFQzhBNzUyOEQ2NTZELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFMTNFNjRDNjYyMkQyODNDMzRBNjEyREFBOUQ2NkUyQzlCNzM4OUYz
QTM0NTJBRDUxM0ZGNTBEQkE2NkYzMS8wLzMxMzkzMDJlMzUyZTMxMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgUNMA0GCSqG
SIb3DQEBCwUAA4IBAQBq/7/vzuv+SFXe8l4w8jUqvmhXxq+VhloWDrDGW/mSs2b3
8QE7npiz8aoHbuwZKWKoEvNZfrLIWFJ8RYe42U07wyka5ixbqkFVpLQ/ZskRpZ31
mgfPjjjinhoe+vBYQSRm4RfCkBa7Ii9nLxTHmuRZ3UeP4F5eWuO9M1ZDguTKCiSf
zbB5jETQDvr3P03kvnqHOBGLHN+aOO1mkb/RFWYx/Xo3g//x5rO0Rmpjaa3FnDaF
g6Zui6R1xyg0Q4m3vCsSsYvFrTXRlwGWatUPKmkdq8NiOBY6SG01v8fJxEpSZTHs
Ow87whdKzww/w9xK4mNLqeTp1yGH1A7b2nUILIur
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:57 2025 by rpki-client