Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31392e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e31392e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          +O0zbWWR+bea5PLIzKjIfaEeQ8Xcbu2RgMmO6ElagEg=
Subject key identifier:   44:D3:E2:2E:4C:2A:D4:6B:6D:B7:D1:A7:0E:C1:41:2C:97:12:D2:D5
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       0B1DFD5C5C653927287804034691F7A596A2CE03
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31392e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:35:01 +0000
ROA not before:           Thu 02 Oct 2025 12:30:01 +0000
ROA not after:            Thu 01 Oct 2026 12:35:01 +0000
asID:                     27827
IP address blocks:        190.5.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1d:fd:5c:5c:65:39:27:28:78:04:03:46:91:f7:a5:96:a2:ce:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:30:01 2025 GMT
            Not After : Oct  1 12:35:01 2026 GMT
        Subject: CN=44D3E22E4C2AD46B6DB7D1A70EC1412C9712D2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:64:e9:d4:b4:ef:e7:ff:4b:80:ef:7f:5a:
                    85:dc:df:75:39:f9:e9:ee:2d:91:1e:64:90:1c:a8:
                    45:74:42:70:23:74:fa:0c:bb:fd:b2:a2:76:1b:57:
                    58:96:45:53:63:2b:59:41:d4:5d:c4:b8:45:73:5e:
                    d1:f1:2c:ba:4c:b0:c1:80:a4:75:a2:43:f1:67:6b:
                    1f:29:c1:eb:82:39:80:e4:6e:f3:55:4a:1b:b4:9a:
                    49:e9:62:b1:ae:70:ee:6c:fc:24:31:47:11:95:d6:
                    12:e8:24:a2:5e:4f:26:0c:24:51:f3:d8:64:0e:3e:
                    a4:16:cb:94:8c:60:6b:2d:44:9b:2d:bb:bb:26:8e:
                    73:7b:12:18:37:3b:ad:5b:24:79:31:c0:08:04:e1:
                    d3:81:c0:f3:f3:74:7d:fb:f9:f9:ad:f1:48:dd:72:
                    e1:25:d4:e8:8d:b0:bb:45:20:43:a5:bd:61:9e:df:
                    e0:a5:60:7c:74:4a:bb:9e:57:57:de:81:6d:d3:a8:
                    32:ef:c9:5b:6b:94:9b:8d:5f:aa:20:5a:39:b4:c2:
                    01:e6:95:8a:26:1b:88:b3:f4:71:88:bb:02:ed:a8:
                    6e:04:5f:66:f3:c6:8c:54:9a:33:65:68:59:01:da:
                    a4:d8:c8:88:42:5f:cc:eb:b8:97:1c:9d:d4:ac:da:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:E2:2E:4C:2A:D4:6B:6D:B7:D1:A7:0E:C1:41:2C:97:12:D2:D5
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e31392e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:25:01:5f:38:0a:4d:4a:a8:81:0d:ce:65:53:1d:5e:1d:62:
         12:e1:5a:7d:aa:ce:12:2e:d0:e6:26:74:8b:64:cb:eb:17:9a:
         2a:05:6e:63:3c:44:8b:61:3d:a7:e5:a3:30:7d:d2:fd:31:6d:
         28:0b:85:34:78:6e:13:7b:81:4a:2a:bc:ca:b6:ad:a0:71:80:
         c0:da:57:71:02:d6:b2:53:f1:aa:bc:a6:5d:48:6f:81:90:90:
         e0:fb:16:d0:f1:7a:91:8f:68:32:98:52:9c:0b:fe:0c:7a:bb:
         14:b8:75:d1:61:ae:c6:3b:59:b3:bc:d1:d2:6a:ef:c3:c3:05:
         9f:7b:5c:11:33:84:a7:7d:a4:bd:a9:e4:6e:6f:d6:b1:06:3b:
         05:d4:d5:3f:83:b7:31:97:f8:49:13:37:bc:8c:ce:1c:03:26:
         3a:92:8d:f2:29:0a:e2:8d:e5:87:e0:ca:e1:95:34:7f:9f:84:
         90:2c:b6:6b:df:62:f5:40:5b:a2:a1:b1:4f:e0:c3:6b:81:3f:
         1d:84:64:d5:02:49:04:d9:da:c3:42:d5:ef:0b:90:40:f8:99:
         24:b6:ae:db:69:b6:ab:89:9b:d3:f9:9d:db:ac:e9:5f:fa:b2:
         74:2d:67:be:cc:35:36:cb:5c:1c:b5:b1:53:a2:bf:42:f0:c2:
         26:da:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:31 2025 by rpki-client