Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31372e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31372e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          I0eLli7eA7naVVRb7sdu3XDLXv79HTF9Xgqz4E323Ws=
Subject key identifier:   EB:87:2D:9D:4A:B7:D5:46:18:E5:FA:47:B5:72:66:18:8B:0C:5D:38
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       2383B0B2745B5D0FFE1378F06071D31E8B484BA1
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31372e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:35:01 +0000
ROA not before:           Thu 02 Oct 2025 12:30:01 +0000
ROA not after:            Thu 01 Oct 2026 12:35:01 +0000
asID:                     27827
IP address blocks:        190.5.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:83:b0:b2:74:5b:5d:0f:fe:13:78:f0:60:71:d3:1e:8b:48:4b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:30:01 2025 GMT
            Not After : Oct  1 12:35:01 2026 GMT
        Subject: CN=EB872D9D4AB7D54618E5FA47B57266188B0C5D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:63:0b:dd:6d:28:3d:15:80:ba:bf:7b:58:
                    e2:5e:e2:9c:8b:77:67:a6:f9:2b:7c:5d:eb:d4:2c:
                    bc:99:76:52:9d:b3:63:fc:f3:09:06:36:22:c7:21:
                    49:57:c5:4b:3e:3c:f5:28:79:45:c0:2a:8b:d5:c7:
                    c0:78:15:40:e3:be:49:d1:04:eb:70:53:62:75:d4:
                    d7:51:d7:35:8b:e0:89:8a:64:10:9e:e4:a0:bb:34:
                    ba:da:a6:0a:e6:40:5a:2f:1f:de:4d:08:93:30:82:
                    78:97:ec:92:a1:8f:12:dd:ce:e5:d7:da:68:eb:77:
                    05:39:fa:04:56:99:7b:5c:2f:00:37:8d:77:f2:17:
                    97:f6:f8:f0:cf:8a:31:30:d6:b7:65:cb:1e:7c:9d:
                    ea:eb:93:5b:e6:f5:3f:c5:d4:2e:31:ed:bb:22:68:
                    bc:c0:db:fd:68:90:f8:4e:18:8c:e2:5c:38:e1:a7:
                    28:bf:1e:61:81:60:07:3d:e5:45:a3:76:3a:b3:5e:
                    6a:5b:f2:73:ba:db:4f:ec:e5:7e:e0:3a:38:6a:f7:
                    e7:45:17:6a:7b:d5:cb:35:fa:6d:61:d8:23:01:7d:
                    ca:9a:62:1c:44:18:68:cd:d5:d5:e8:59:43:d5:26:
                    b4:6a:ea:4b:be:41:6d:06:45:8a:a3:da:e0:51:54:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:87:2D:9D:4A:B7:D5:46:18:E5:FA:47:B5:72:66:18:8B:0C:5D:38
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31372e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:05:4d:42:98:09:76:0e:29:35:cf:cd:47:5e:49:c3:df:
         f0:78:27:1a:73:3c:b5:17:0a:6d:2d:d2:91:2c:1c:d5:e6:34:
         17:67:5f:9b:d5:b2:eb:14:18:ab:04:2a:06:6d:cc:b4:fb:cc:
         d9:0d:73:fe:72:70:a8:af:8b:95:03:7f:7a:6c:09:cc:29:95:
         79:62:dc:c6:c7:ba:d4:28:e8:79:cc:5b:15:ab:10:b0:db:82:
         3f:1b:94:a7:c6:c0:84:e5:61:cf:e4:28:45:e2:f6:22:d1:bd:
         63:9d:3e:37:bf:9c:96:77:22:42:c3:24:7e:f2:40:39:87:af:
         ed:77:41:b4:28:84:2d:9f:06:96:72:bc:38:54:ec:88:9f:84:
         23:f4:6f:37:5e:0f:f1:a3:8c:2c:6e:59:dc:8a:8f:e6:6c:bd:
         83:04:be:d0:b3:bc:bd:af:57:3d:af:6f:8b:bb:dc:e8:5c:ba:
         71:ed:a1:32:e5:92:51:9c:11:06:e8:bb:35:1a:a3:67:69:70:
         39:0b:4a:12:18:34:4a:0c:2a:00:ff:7e:75:33:79:70:e2:49:
         48:b5:29:ef:ca:1e:4e:b3:75:7c:d5:03:42:93:ae:3c:10:24:
         2b:e0:e3:7d:58:fe:49:fb:32:f5:ee:06:cc:64:03:63:53:c1:
         c5:62:4e:db
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUI4OwsnRbXQ/+E3jwYHHTHotIS6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1QzJERTc3NENGQzQ1ODM0Njc1REIxQUE2RUM4QTc1
MjhENjU2RDAeFw0yNTEwMDIxMjMwMDFaFw0yNjEwMDExMjM1MDFaMDMxMTAvBgNV
BAMTKEVCODcyRDlENEFCN0Q1NDYxOEU1RkE0N0I1NzI2NjE4OEIwQzVEMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbyWML3W0oPRWAur97WOJe4pyL
d2em+St8XevULLyZdlKds2P88wkGNiLHIUlXxUs+PPUoeUXAKovVx8B4FUDjvknR
BOtwU2J11NdR1zWL4ImKZBCe5KC7NLrapgrmQFovH95NCJMwgniX7JKhjxLdzuXX
2mjrdwU5+gRWmXtcLwA3jXfyF5f2+PDPijEw1rdlyx58nerrk1vm9T/F1C4x7bsi
aLzA2/1okPhOGIziXDjhpyi/HmGBYAc95UWjdjqzXmpb8nO620/s5X7gOjhq9+dF
F2p71cs1+m1h2CMBfcqaYhxEGGjN1dXoWUPVJrRq6ku+QW0GRYqj2uBRVJH3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU64ctnUq31UYY5fpHtXJmGIsMXTgwHwYDVR0j
BBgwFoAUE1wt53TPxFg0Z12xqm7Ip1KNZW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkUxM0U2NEM2NjIyRDI4M0MzNEE2MTJEQUE5RDY2RTJD
OUI3Mzg5RjNBMzQ1MkFENTEzRkY1MERCQTY2RjMxLzAvMTM1QzJERTc3NENGQzQ1
ODM0Njc1REIxQUE2RUM4QTc1MjhENjU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzVDMkRFNzc0Q0ZDNDU4MzQ2
NzVEQjFBQTZFQzhBNzUyOEQ2NTZELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFMTNFNjRDNjYyMkQyODNDMzRBNjEyREFBOUQ2NkUyQzlCNzM4OUYz
QTM0NTJBRDUxM0ZGNTBEQkE2NkYzMS8wLzMxMzkzMDJlMzUyZTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgURMA0GCSqG
SIb3DQEBCwUAA4IBAQCA0wVNQpgJdg4pNc/NR15Jw9/weCcaczy1FwptLdKRLBzV
5jQXZ1+b1bLrFBirBCoGbcy0+8zZDXP+cnCor4uVA396bAnMKZV5YtzGx7rUKOh5
zFsVqxCw24I/G5SnxsCE5WHP5ChF4vYi0b1jnT43v5yWdyJCwyR+8kA5h6/td0G0
KIQtnwaWcrw4VOyIn4Qj9G83Xg/xo4wsblncio/mbL2DBL7Qs7y9r1c9r2+Lu9zo
XLpx7aEy5ZJRnBEG6Ls1GqNnaXA5C0oSGDRKDCoA/351M3lw4klItSnvyh5Os3V8
1QNCk648ECQr4ON9WP5J+zL17gbMZANjU8HFYk7b
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:46 2025 by rpki-client