Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31362e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31362e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          BbMdxToxkIDFAkZ7omUcQw4CHU/MwFB6hzVCOZfdDDQ=
Subject key identifier:   46:F9:B5:9C:AD:00:EB:2A:3B:A4:3F:E5:E3:8B:28:E0:C3:E0:FB:8D
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       4AA0F284B20A76BF872F0058B1E124E1D5DDFF35
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31362e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:35:00 +0000
ROA not before:           Thu 02 Oct 2025 12:30:00 +0000
ROA not after:            Thu 01 Oct 2026 12:35:00 +0000
asID:                     27827
IP address blocks:        190.5.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:f2:84:b2:0a:76:bf:87:2f:00:58:b1:e1:24:e1:d5:dd:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:30:00 2025 GMT
            Not After : Oct  1 12:35:00 2026 GMT
        Subject: CN=46F9B59CAD00EB2A3BA43FE5E38B28E0C3E0FB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:5b:27:95:ce:ae:82:75:bd:55:20:c2:49:
                    77:7b:21:2f:bf:80:2c:b5:3c:3d:53:bb:62:a4:8d:
                    62:2c:75:bc:a6:fe:8b:08:77:50:2f:8e:9d:6b:c1:
                    bb:2c:bb:8d:76:36:f4:80:0c:4d:6f:fa:0e:3e:c3:
                    3c:0b:ba:9a:fe:69:e4:aa:e5:ce:dc:eb:4b:0b:3a:
                    b6:bc:e3:3e:8e:20:b3:84:1a:4e:a7:a1:b8:c0:a4:
                    c7:fe:a4:63:53:08:95:28:c5:0a:54:b2:a0:15:e8:
                    24:c0:77:78:c1:99:94:bb:2d:57:eb:51:4b:a9:b2:
                    4a:78:ed:b3:08:67:ef:26:02:09:9f:e0:af:a8:1e:
                    3a:32:a4:68:aa:6d:d1:0f:49:13:90:57:e6:74:d1:
                    ff:86:9a:2f:3c:00:68:d5:55:b6:fc:51:89:00:a5:
                    1b:2b:09:bf:ee:d5:a9:7d:83:25:df:ac:cd:23:d1:
                    9d:42:75:84:dc:21:41:f0:07:95:97:81:c9:b8:1b:
                    76:54:1b:2c:4a:9b:f6:61:3e:a3:bf:a4:da:83:49:
                    8a:3d:03:45:58:99:8e:52:5b:da:f3:ae:a5:d8:63:
                    83:93:fa:9f:5e:b8:09:20:a1:37:f8:91:53:4c:fb:
                    1e:20:56:58:7e:ae:dc:04:a6:6b:50:94:65:3b:ca:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F9:B5:9C:AD:00:EB:2A:3B:A4:3F:E5:E3:8B:28:E0:C3:E0:FB:8D
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31362e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:8b:42:4f:ad:52:90:39:13:94:a7:75:8b:33:3f:52:a8:
         11:67:73:1f:1c:8a:ae:65:d5:ec:0d:37:08:19:37:95:ab:47:
         fd:5a:a5:f3:d7:58:34:7e:39:9c:8b:5f:d1:ea:1e:53:95:f9:
         e7:a8:f0:c4:6d:b4:a0:3a:74:45:a7:c9:90:05:b7:ff:54:2b:
         b3:11:21:b9:43:15:5b:74:42:43:22:43:c7:96:c2:2a:a6:13:
         3c:8e:eb:35:a8:a5:ab:bd:aa:22:12:a4:87:28:57:f1:f0:f2:
         f8:e4:46:1e:c0:43:f0:ac:0d:2b:cc:77:24:10:4f:5b:b4:f9:
         ed:46:54:ce:15:e9:17:73:ae:08:da:73:e7:20:0c:a5:ce:2c:
         a1:28:03:c5:52:56:ef:7e:6f:e7:d0:72:7e:5b:a7:89:19:9d:
         a3:65:cc:fb:82:17:b3:db:3e:3f:d6:9a:b5:b0:21:5a:a3:4d:
         8a:c4:54:b0:69:2c:25:27:68:1b:d3:16:21:56:bf:97:a1:18:
         b9:b6:1b:58:91:c4:d1:b8:62:8d:c8:e9:53:a2:34:f7:fc:51:
         a4:ef:6a:6d:b7:9c:f4:8d:5e:d5:a8:68:c4:b4:b3:3f:e4:42:
         bc:3a:7e:ae:01:aa:d1:93:3a:b1:4b:8b:dd:42:6d:c5:67:5a:
         4e:68:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:33 2025 by rpki-client