Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32382e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32382e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          z5WVa1sFQpOCR5Joei02+3DMdlFAMowZB1p4owuGnM0=
Subject key identifier:   63:A4:20:F4:E1:89:3C:04:6E:33:FC:0C:84:9B:B4:7A:D5:28:9B:09
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       777FA52EF6D25061D80A5A6AD56D157AE582831A
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32382e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:40:01 +0000
ROA not before:           Thu 02 Oct 2025 12:35:01 +0000
ROA not after:            Thu 01 Oct 2026 12:40:01 +0000
asID:                     27827
IP address blocks:        190.5.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7f:a5:2e:f6:d2:50:61:d8:0a:5a:6a:d5:6d:15:7a:e5:82:83:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:35:01 2025 GMT
            Not After : Oct  1 12:40:01 2026 GMT
        Subject: CN=63A420F4E1893C046E33FC0C849BB47AD5289B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:bd:1f:2d:4c:59:a9:e0:6e:8f:5b:49:e7:
                    6c:52:2e:b5:56:3b:61:b2:d0:47:41:42:4e:54:94:
                    a4:17:f1:a9:69:89:8d:eb:ad:b5:de:80:c0:95:d6:
                    f9:2f:e3:da:45:21:69:38:cf:1d:0c:23:1e:ae:4d:
                    2e:f7:d7:cd:0b:81:78:33:ad:ea:7f:d9:da:f0:6e:
                    69:f2:29:f2:39:58:0e:10:54:96:a4:84:c5:c4:6d:
                    cd:89:b0:d6:3e:e1:1c:7e:c7:b7:55:3a:08:62:f1:
                    8c:9d:71:93:10:cd:51:ef:fe:61:ba:c2:b7:55:93:
                    ed:91:01:be:1b:39:b1:eb:6b:81:fe:1c:c8:92:51:
                    b5:98:4d:17:fe:a8:a5:03:35:c8:fd:6a:6d:3f:84:
                    ec:32:24:80:28:ac:60:26:8e:26:72:5d:9c:67:0a:
                    37:ee:dc:b8:74:f2:5a:62:1e:f1:38:99:40:e0:0e:
                    db:50:1f:e2:f4:f4:b1:ad:d2:93:98:00:91:ed:3c:
                    dd:0c:95:b7:f6:3d:57:a4:e5:e8:5d:5c:fc:63:70:
                    17:a3:f6:61:e4:87:be:26:d5:17:f2:5d:3e:98:91:
                    81:b3:4d:df:69:22:50:25:e3:88:8b:14:ef:3f:d6:
                    c4:8d:64:87:a8:a6:5f:29:97:de:13:e2:c5:2b:e1:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A4:20:F4:E1:89:3C:04:6E:33:FC:0C:84:9B:B4:7A:D5:28:9B:09
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32382e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:07:ed:9e:95:de:08:20:16:62:a4:14:24:df:01:bb:b5:89:
         89:96:c9:dc:40:22:69:e3:23:ee:e5:7e:c1:f3:1d:28:67:ee:
         23:59:b2:bf:89:54:05:9e:82:89:f0:a2:54:4d:38:b5:13:9d:
         dc:62:05:6f:1e:5c:14:f1:65:83:18:9d:fe:7d:ed:41:21:3e:
         62:a8:74:e8:8c:1b:de:dc:7c:a2:79:56:d5:31:1e:83:f1:51:
         93:96:e8:72:0e:02:9c:cd:a3:36:c8:e9:84:ff:a6:b2:58:2f:
         ed:d1:2f:ef:da:45:95:a8:47:c7:94:bc:ac:59:a3:65:4c:07:
         f0:65:5a:aa:f7:8a:c5:0b:5b:a0:c8:df:0a:48:3a:d1:72:a8:
         2c:c1:bf:ec:40:30:3a:0a:a8:85:fd:44:a3:ff:d6:39:cc:f9:
         9d:94:86:05:8b:b0:44:47:d2:fb:bd:61:bf:29:44:71:b5:c0:
         6f:12:0d:a6:12:d6:ce:79:d5:21:87:75:6e:98:15:d4:86:29:
         2d:87:84:d0:ca:bc:4e:05:56:6b:13:f4:cd:95:9d:55:bb:72:
         32:4e:37:d9:02:2a:62:7c:41:d3:77:1a:17:72:80:87:23:fd:
         3d:82:c4:52:5e:67:89:68:76:09:8d:0c:db:55:47:62:c3:c7:
         07:54:6c:8d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUd3+lLvbSUGHYClpq1W0VeuWCgxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1QzJERTc3NENGQzQ1ODM0Njc1REIxQUE2RUM4QTc1
MjhENjU2RDAeFw0yNTEwMDIxMjM1MDFaFw0yNjEwMDExMjQwMDFaMDMxMTAvBgNV
BAMTKDYzQTQyMEY0RTE4OTNDMDQ2RTMzRkMwQzg0OUJCNDdBRDUyODlCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XL0fLUxZqeBuj1tJ52xSLrVW
O2Gy0EdBQk5UlKQX8alpiY3rrbXegMCV1vkv49pFIWk4zx0MIx6uTS73180LgXgz
rep/2drwbmnyKfI5WA4QVJakhMXEbc2JsNY+4Rx+x7dVOghi8YydcZMQzVHv/mG6
wrdVk+2RAb4bObHra4H+HMiSUbWYTRf+qKUDNcj9am0/hOwyJIAorGAmjiZyXZxn
Cjfu3Lh08lpiHvE4mUDgDttQH+L09LGt0pOYAJHtPN0Mlbf2PVek5ehdXPxjcBej
9mHkh74m1RfyXT6YkYGzTd9pIlAl44iLFO8/1sSNZIeopl8pl94T4sUr4QelAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUY6Qg9OGJPARuM/wMhJu0etUomwkwHwYDVR0j
BBgwFoAUE1wt53TPxFg0Z12xqm7Ip1KNZW0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkUxM0U2NEM2NjIyRDI4M0MzNEE2MTJEQUE5RDY2RTJD
OUI3Mzg5RjNBMzQ1MkFENTEzRkY1MERCQTY2RjMxLzAvMTM1QzJERTc3NENGQzQ1
ODM0Njc1REIxQUE2RUM4QTc1MjhENjU2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzVDMkRFNzc0Q0ZDNDU4MzQ2
NzVEQjFBQTZFQzhBNzUyOEQ2NTZELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFMTNFNjRDNjYyMkQyODNDMzRBNjEyREFBOUQ2NkUyQzlCNzM4OUYz
QTM0NTJBRDUxM0ZGNTBEQkE2NkYzMS8wLzMxMzkzMDJlMzUyZTMyMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgUcMA0GCSqG
SIb3DQEBCwUAA4IBAQBhB+2eld4IIBZipBQk3wG7tYmJlsncQCJp4yPu5X7B8x0o
Z+4jWbK/iVQFnoKJ8KJUTTi1E53cYgVvHlwU8WWDGJ3+fe1BIT5iqHTojBve3Hyi
eVbVMR6D8VGTluhyDgKczaM2yOmE/6ayWC/t0S/v2kWVqEfHlLysWaNlTAfwZVqq
94rFC1ugyN8KSDrRcqgswb/sQDA6CqiF/USj/9Y5zPmdlIYFi7BER9L7vWG/KURx
tcBvEg2mEtbOedUhh3VumBXUhikth4TQyrxOBVZrE/TNlZ1Vu3IyTjfZAipifEHT
dxoXcoCHI/09gsRSXmeJaHYJjQzbVUdiw8cHVGyN
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:30 2025 by rpki-client