Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32392e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e32392e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          4PSa8ibsh5MsjgrQN0cXgpdL9wxBhWLkvxQ4kuPL+hw=
Subject key identifier:   C7:76:41:C4:D3:1C:02:57:29:28:DF:9C:C1:64:09:AC:8B:35:95:BB
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       055CF8530956810B2590E8D00C020A68FBEFC01C
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32392e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:40:01 +0000
ROA not before:           Thu 02 Oct 2025 12:35:01 +0000
ROA not after:            Thu 01 Oct 2026 12:40:01 +0000
asID:                     27827
IP address blocks:        190.5.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5c:f8:53:09:56:81:0b:25:90:e8:d0:0c:02:0a:68:fb:ef:c0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:35:01 2025 GMT
            Not After : Oct  1 12:40:01 2026 GMT
        Subject: CN=C77641C4D31C02572928DF9CC16409AC8B3595BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:df:29:27:9d:3d:c5:4d:fa:6d:31:94:78:d5:
                    c1:10:7e:d4:10:f5:fa:6d:cc:c6:0e:6c:1d:2b:dd:
                    d5:8c:9e:1c:57:94:1a:69:0e:1e:68:af:21:53:1e:
                    3a:30:be:93:d3:1c:77:53:fa:8d:c7:8a:78:79:12:
                    42:67:ff:f3:53:e6:5b:64:f8:35:5c:64:70:13:9d:
                    c2:24:fc:2d:44:e6:57:50:b7:93:93:00:84:e6:28:
                    3c:6e:47:45:9a:df:05:fa:46:78:79:73:ff:c9:04:
                    85:1b:82:de:6b:46:7a:da:f3:9d:e4:4c:f8:b4:a1:
                    f2:06:ab:a8:c2:ec:9e:ed:ad:5e:58:01:11:37:75:
                    23:a1:6e:83:9d:70:b8:8c:b6:3a:f7:2d:7c:19:3d:
                    bc:63:58:fe:31:f1:26:c3:09:ad:72:ee:08:1c:f6:
                    8e:33:54:9f:44:93:74:23:3f:08:77:c7:76:eb:ff:
                    74:ae:07:2d:97:59:fb:f3:70:f6:d3:6c:71:2e:0d:
                    fe:e8:f4:d2:73:fd:67:4c:7b:a9:c0:e9:13:ab:1f:
                    40:43:40:9e:7c:2c:e4:65:21:4a:4d:99:7d:7f:ec:
                    99:37:2e:27:9b:7f:6a:fe:f0:b6:9c:a4:16:9b:3c:
                    e3:0d:77:12:3e:c7:9f:bc:71:c5:fe:19:04:15:33:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:41:C4:D3:1C:02:57:29:28:DF:9C:C1:64:09:AC:8B:35:95:BB
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e32392e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:48:92:46:b7:1a:00:85:f1:98:f8:92:5d:c4:a4:08:05:31:
         3b:b1:1c:07:8a:98:3d:6f:0c:d7:e1:fe:12:dc:98:27:74:eb:
         8e:81:6e:71:15:57:77:9a:d0:b0:72:63:d2:e5:89:b5:ab:3e:
         f0:d1:a1:a0:f4:11:86:62:87:f8:4b:54:cd:69:4d:44:e7:a3:
         21:8d:a7:78:5b:b1:b0:16:3d:56:55:3d:10:d2:4c:5a:3d:fc:
         f8:e6:33:85:90:0d:0e:31:a5:dd:af:93:0a:eb:5d:e6:a3:27:
         dd:33:0a:30:5e:2a:b3:89:7b:47:f1:38:6d:ad:c0:7a:e9:b3:
         fa:01:16:8d:d7:90:2e:58:4f:83:b6:fb:aa:1c:21:b0:c2:a5:
         07:f8:5f:85:96:6f:a4:18:9a:03:09:cb:b8:ce:e6:06:b9:f4:
         78:40:a0:2c:0f:cb:18:56:95:af:68:ae:b8:88:06:53:e9:04:
         0f:50:e4:d0:8c:0f:cd:74:41:ef:9d:96:2c:0e:d6:3b:b3:fc:
         1f:46:83:ba:b1:45:39:f2:bf:fa:f7:d1:12:c1:57:c0:5d:07:
         ec:b1:5c:7e:3d:76:2e:32:bb:8a:58:22:1e:66:1f:3a:f4:73:
         cc:c5:f8:25:55:93:c7:df:dd:01:43:bb:2c:fb:6d:24:97:8d:
         7d:f4:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:30 2025 by rpki-client