Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32362e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32362e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          ynglmOAalCEnbPdu1ikmh1f5OwQ9mc0tB4jZy/nsMGA=
Subject key identifier:   03:14:5B:00:62:CE:B7:31:7E:EA:66:6A:FF:9F:01:C5:FC:88:25:7A
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       471B1E5704E13294BDE5ADC884C1BAB1E65CBACA
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32362e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:40:01 +0000
ROA not before:           Thu 02 Oct 2025 12:35:01 +0000
ROA not after:            Thu 01 Oct 2026 12:40:01 +0000
asID:                     27827
IP address blocks:        190.5.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1b:1e:57:04:e1:32:94:bd:e5:ad:c8:84:c1:ba:b1:e6:5c:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:35:01 2025 GMT
            Not After : Oct  1 12:40:01 2026 GMT
        Subject: CN=03145B0062CEB7317EEA666AFF9F01C5FC88257A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:13:0b:1c:47:be:7f:88:96:40:24:14:2b:
                    1d:b6:b6:61:f2:d7:46:c4:29:cd:1c:4e:a4:89:3c:
                    d7:5a:c0:84:18:34:ee:7e:5b:47:0b:51:ce:bf:79:
                    71:9a:95:4c:e5:ea:f0:65:02:b7:f4:2d:c3:32:a4:
                    00:6a:d5:ab:41:2e:88:87:d8:20:38:37:89:b4:67:
                    42:7d:f3:2b:e2:d2:54:bb:3b:54:78:b7:ed:22:b3:
                    5e:0c:2b:fa:c1:d3:b3:3c:cf:31:15:84:10:e9:2c:
                    cb:8c:71:7c:62:a6:43:3b:63:34:31:05:01:5e:28:
                    4b:00:a6:22:04:04:8b:f9:de:52:41:9d:54:ef:45:
                    54:8f:40:3c:94:2a:5e:88:87:61:eb:08:28:cb:f6:
                    5b:71:32:17:dd:d7:a9:c7:22:38:88:51:5c:b3:89:
                    72:30:be:28:dc:65:e9:45:ac:f0:d5:23:53:3d:19:
                    3a:0b:5d:1e:b5:b4:71:67:56:2c:3d:91:96:1c:9a:
                    7d:57:4f:2f:a3:ac:77:81:36:5f:43:13:fd:46:5b:
                    c1:b8:27:56:7d:d0:be:65:8c:2f:30:f3:15:79:a8:
                    d8:66:70:34:18:a1:3e:2c:b0:02:71:53:5b:8e:d7:
                    c6:3e:0c:27:36:65:bd:68:24:4d:9e:c2:50:d3:2a:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:14:5B:00:62:CE:B7:31:7E:EA:66:6A:FF:9F:01:C5:FC:88:25:7A
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32362e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:92:93:26:55:23:65:ad:f6:90:39:0b:e5:68:4d:39:59:f6:
         bc:3b:99:28:69:6f:9b:03:12:11:be:b6:6c:87:20:d1:8d:12:
         82:92:02:26:7e:a3:f8:73:12:c6:bb:28:5c:65:a3:d2:5d:45:
         28:41:19:99:eb:70:eb:0b:b7:f7:2d:37:a6:96:fa:4f:91:21:
         89:f8:cf:84:5c:e0:d8:a0:2d:59:42:99:5c:04:a5:b5:d8:75:
         a0:79:aa:02:38:f3:de:cc:62:87:81:a9:87:52:bf:95:94:da:
         44:e8:19:4a:3c:f8:ff:ae:b5:67:91:5e:31:e5:84:2f:8b:65:
         d5:42:21:b0:76:55:ad:76:e3:f5:10:58:f4:f0:7c:2d:f0:dc:
         71:ce:ec:31:ad:c0:1c:11:28:ef:9e:e5:68:c6:0f:33:40:89:
         e8:b2:9e:81:3d:6e:08:d5:0b:4e:ce:79:46:f5:06:88:c0:99:
         05:d9:df:9c:0d:e7:69:4b:f0:8f:ef:64:44:fc:09:69:0e:4b:
         d8:75:05:78:6d:0c:22:d1:65:98:b5:5e:c8:b3:50:42:03:95:
         ab:f5:4d:2e:2f:06:fc:29:a5:0b:9d:a3:c7:e1:58:62:88:0d:
         9d:8d:91:9d:a6:ad:84:47:c3:99:5f:84:c5:77:90:50:b1:71:
         ca:e2:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:29 2025 by rpki-client