Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33312e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e33312e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          Q3tsP+gQUZy5EdKJTKkW0ktwkH+UMH5ERodVYKlaCCE=
Subject key identifier:   99:AF:44:A4:0C:E6:98:C1:0B:52:1F:3C:C8:0A:EA:30:29:D7:79:DD
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       4A012C03FB43F08F656DB9F97C64D30EFB25EBDF
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33312e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:40:01 +0000
ROA not before:           Thu 02 Oct 2025 12:35:01 +0000
ROA not after:            Thu 01 Oct 2026 12:40:01 +0000
asID:                     27827
IP address blocks:        190.5.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:01:2c:03:fb:43:f0:8f:65:6d:b9:f9:7c:64:d3:0e:fb:25:eb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:35:01 2025 GMT
            Not After : Oct  1 12:40:01 2026 GMT
        Subject: CN=99AF44A40CE698C10B521F3CC80AEA3029D779DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:33:07:26:cf:b2:ae:98:9a:23:b0:97:15:
                    6c:9b:30:95:d1:13:f5:b0:d3:49:5c:a6:1b:1a:36:
                    0d:d3:9a:d9:aa:c4:b1:59:0a:e0:e0:97:57:c2:17:
                    bb:cf:59:5b:2e:d2:e8:9e:a2:62:87:4e:8a:12:b9:
                    f2:03:e4:68:e1:b3:dc:dd:3a:31:3c:51:1c:6d:60:
                    a8:58:b6:7e:52:ed:6b:a1:c3:61:c5:db:1d:57:b4:
                    c6:a1:a0:dc:14:56:0b:81:5f:b9:62:e8:13:5a:ab:
                    4e:4d:d3:ad:20:f2:45:4c:3d:63:bc:a6:8c:32:fc:
                    06:e4:c7:a3:20:66:4a:19:75:3c:87:df:6e:4e:ea:
                    1a:e3:d8:b1:c9:7d:89:02:66:16:7d:04:0d:41:1a:
                    9d:cb:ed:b5:a9:85:43:0f:71:a5:a4:e9:30:f8:80:
                    cf:90:6a:db:81:2a:73:66:3e:73:22:83:b8:b0:d6:
                    0b:c7:c3:6c:39:b1:03:a2:4d:dc:41:17:88:2d:56:
                    b7:4f:44:fc:dc:c3:5e:72:20:83:3e:cc:ac:47:a5:
                    5d:b7:d3:d0:79:4d:c3:10:90:3b:a6:4f:8b:8f:ce:
                    c8:13:ce:94:28:19:3c:2b:7d:b3:f9:ac:fd:26:31:
                    86:a8:3c:41:c4:78:47:d4:b2:69:fb:1c:eb:a8:42:
                    30:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:44:A4:0C:E6:98:C1:0B:52:1F:3C:C8:0A:EA:30:29:D7:79:DD
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e33312e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:40:c7:34:5e:ec:d6:a8:7e:51:f3:7d:4f:7a:fb:46:09:
         35:7b:0a:3c:51:0a:57:65:a9:98:d9:fd:63:fe:87:eb:0d:a5:
         3d:a9:91:48:9b:90:7e:37:b7:57:49:bf:d6:12:a6:a1:e9:fa:
         8d:18:58:3b:bb:c4:99:14:91:76:92:d6:84:31:7c:b9:a0:0b:
         31:72:d9:ac:2a:a3:ea:3f:2f:60:30:cc:23:0d:23:9e:9b:49:
         bc:70:eb:6d:8e:7c:8f:5b:25:0b:51:0c:2e:22:6b:a0:62:b6:
         fe:64:ca:03:3b:3d:a8:96:c6:89:c6:50:8c:a4:17:9e:53:6e:
         e5:db:46:33:7f:88:55:53:fd:ba:24:b8:8a:8d:99:32:ed:63:
         e4:2d:0b:26:1c:5d:9c:32:96:04:95:4b:b0:d4:af:c2:f3:41:
         c6:dd:c8:95:72:a7:0a:18:b8:84:3b:c8:e7:c2:f4:93:b8:67:
         31:37:90:20:6c:5f:d6:ec:78:8d:90:a0:15:3f:00:2d:31:e8:
         b2:bd:51:c1:14:24:52:08:4c:fd:3d:98:8f:93:8b:b7:e1:a0:
         cc:69:12:16:91:b6:e6:46:77:be:cf:77:a7:6e:61:40:07:b5:
         4b:ab:82:49:02:2c:8d:08:d6:49:06:a2:4a:62:d7:ab:a8:98:
         d2:3f:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:43 2025 by rpki-client