Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32372e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32372e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          mKUNV8eW5+xz7yuO23z97MUyWsu/OMK9XXlSvvZ7Ayw=
Subject key identifier:   33:4A:A5:CC:12:33:B2:9E:9D:F8:B0:60:DB:63:66:E9:2C:76:E6:C1
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       27E8474367B70F13FEE28BFB3A7F8227D44AFD66
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32372e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:40:00 +0000
ROA not before:           Thu 02 Oct 2025 12:35:00 +0000
ROA not after:            Thu 01 Oct 2026 12:40:00 +0000
asID:                     27827
IP address blocks:        190.5.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e8:47:43:67:b7:0f:13:fe:e2:8b:fb:3a:7f:82:27:d4:4a:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:35:00 2025 GMT
            Not After : Oct  1 12:40:00 2026 GMT
        Subject: CN=334AA5CC1233B29E9DF8B060DB6366E92C76E6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:ed:f5:ca:20:7c:3c:b2:5f:b0:9d:e6:4d:
                    38:26:cd:18:ca:87:37:47:9f:13:8e:44:a2:86:f1:
                    ad:84:14:45:67:f4:98:ec:fe:71:79:9b:28:fd:3b:
                    42:6d:dd:74:fb:e2:76:6c:95:f5:de:7b:4c:80:ee:
                    b7:2d:6e:5d:f0:62:8f:80:88:cd:79:f0:f7:80:f7:
                    5f:1d:c6:57:37:49:b2:67:33:7d:91:f4:3d:22:26:
                    b6:fa:e2:a6:26:3c:d5:ca:c8:06:70:da:7c:95:a0:
                    3e:41:ec:eb:6f:5f:56:ab:02:08:98:43:0e:a6:97:
                    f3:2e:63:1e:14:64:d9:ca:ff:c8:83:d2:01:ca:45:
                    90:04:4c:c4:4e:4f:e8:64:2d:c5:38:e7:94:2f:5d:
                    2b:64:61:85:65:46:5b:01:d1:bb:48:b0:95:63:2e:
                    54:c4:a7:47:28:61:2e:02:8b:c9:73:64:42:72:40:
                    3f:1f:41:c7:ed:c5:b2:be:59:0d:f1:21:ed:14:a2:
                    a1:8c:f3:d1:98:95:b8:06:f3:45:fe:82:9e:14:b7:
                    23:a3:4c:b6:80:4b:4e:f7:4a:8b:d9:af:37:74:6d:
                    36:0d:e0:02:12:72:d3:58:7c:bb:60:7b:5e:52:bc:
                    eb:b1:7d:83:11:b6:be:99:e8:54:bb:40:49:5b:a4:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4A:A5:CC:12:33:B2:9E:9D:F8:B0:60:DB:63:66:E9:2C:76:E6:C1
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32372e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:00:32:70:a7:a6:ec:36:6d:e1:c4:3a:ea:27:41:f0:d9:
         a1:99:b8:fb:7c:7b:15:c5:2f:f0:fb:3a:b3:fd:92:03:eb:60:
         ec:6a:2f:3d:db:ec:1f:66:05:0f:e0:22:90:dd:3d:47:47:45:
         8c:64:48:d4:6a:21:53:63:d6:ba:b7:28:5b:a6:7e:72:67:87:
         63:e7:aa:47:d5:b7:6f:7a:b1:15:4a:93:47:fe:46:e0:94:68:
         52:b2:a8:82:3b:72:07:37:db:4b:f6:3b:42:9d:21:c1:8f:ea:
         59:0f:4c:9f:a8:83:32:e3:63:3d:48:7b:84:91:e9:99:a1:21:
         6c:b6:e1:df:77:14:1b:93:06:82:12:2d:8e:12:8c:64:d9:c8:
         43:0b:27:b6:be:c7:a0:8e:7c:10:90:6b:fd:04:bc:e1:53:ee:
         65:0e:85:81:46:e4:b7:64:43:a3:dc:36:d6:a6:7d:bb:12:fe:
         cc:8c:55:7a:1e:23:a2:2a:30:cb:ee:05:94:e9:20:a2:88:d8:
         ae:8d:39:55:ad:6b:3f:da:a2:65:48:23:ff:3c:ab:75:62:0c:
         4a:46:68:be:2c:48:44:20:e1:f5:1c:ce:e1:69:e9:c4:c3:d3:
         39:65:80:bd:ef:66:b6:05:af:ab:1a:ab:1f:de:6e:cf:d4:29:
         c1:81:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:33 2025 by rpki-client