Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e342e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e342e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          USZAQsggTvA+hwRyAdRq4xG/CioZs5vJh1oAz3SEkCc=
Subject key identifier:   00:BC:1E:FC:F1:CD:BA:37:AC:0C:1B:37:6C:8F:4F:88:B5:A3:BC:F6
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       3F3EE1CFE6D4CB822A8C413EE859652BA44E8B08
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e342e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:25:01 +0000
ROA not before:           Thu 02 Oct 2025 12:20:01 +0000
ROA not after:            Thu 01 Oct 2026 12:25:01 +0000
asID:                     27827
IP address blocks:        190.5.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3e:e1:cf:e6:d4:cb:82:2a:8c:41:3e:e8:59:65:2b:a4:4e:8b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:20:01 2025 GMT
            Not After : Oct  1 12:25:01 2026 GMT
        Subject: CN=00BC1EFCF1CDBA37AC0C1B376C8F4F88B5A3BCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:ab:1e:da:69:b7:02:f1:12:2f:fa:1c:4e:
                    b2:70:3a:87:f4:8a:57:54:5f:18:85:69:75:00:c4:
                    96:8b:dc:1d:50:f9:2c:0c:ea:e0:07:a3:ab:09:a0:
                    8d:e6:75:48:9f:3d:22:65:03:30:51:e2:3b:07:47:
                    1e:c8:a2:98:f0:b4:82:7e:ff:de:69:29:96:98:65:
                    cc:27:87:72:d7:0b:5a:d3:8c:d6:33:85:5f:27:24:
                    96:50:0d:4c:4e:83:01:fc:08:c3:48:dc:43:16:1b:
                    fa:67:40:01:2f:46:bf:fb:80:e9:42:ad:64:49:3d:
                    aa:4f:d8:a5:e0:2a:49:1d:1e:b9:12:58:3d:64:cb:
                    08:f3:3e:94:e8:15:d8:3f:65:4c:99:2a:c4:d0:03:
                    86:bc:1a:02:a9:0a:32:e5:81:2d:13:dc:90:3e:18:
                    00:f4:ab:60:72:df:10:9b:23:d3:45:7e:ee:2b:19:
                    ac:20:f0:01:d6:9c:ab:c5:c5:a1:f3:6a:4f:f6:d8:
                    65:13:0f:ec:b5:4d:2c:38:1d:0a:fc:7a:a1:f7:ec:
                    1f:1e:ce:08:c7:ff:49:b5:f5:56:46:cb:c7:cb:ff:
                    06:cf:80:a7:a4:c5:83:c6:ff:1f:c9:ec:47:9f:b0:
                    21:06:f4:a9:c5:cb:ab:d9:fc:92:6a:3d:fb:06:93:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BC:1E:FC:F1:CD:BA:37:AC:0C:1B:37:6C:8F:4F:88:B5:A3:BC:F6
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e342e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:14:6c:af:e1:fa:61:0e:d6:62:b1:67:6d:4f:54:61:9a:f4:
         2c:c8:74:a2:5c:88:c8:f5:ac:93:52:58:b5:ab:12:2c:67:0a:
         ca:e5:0a:b4:97:e2:85:2e:8b:ab:8e:d5:46:49:42:91:57:86:
         47:0a:5c:18:31:06:77:1f:b2:99:69:2b:ff:cc:e9:95:4a:6d:
         31:5e:e1:86:10:81:cc:b2:15:d3:c0:ee:16:b3:22:6e:15:56:
         c7:2a:c7:1f:3a:11:74:da:40:5a:70:8f:e0:11:9d:f2:fd:74:
         ba:9e:6e:95:55:9d:d1:a5:e0:3e:8d:f7:74:17:a8:3c:82:92:
         ba:40:a3:ee:a9:6f:25:d6:e0:2a:6d:38:4e:88:7d:ef:74:a7:
         e4:14:81:93:7f:ec:3c:a9:95:2a:1e:fc:68:af:34:bd:3e:a4:
         2c:c7:83:78:07:0e:78:a9:3e:74:06:56:ed:ba:a5:a8:f7:93:
         d6:ce:c2:ca:13:c7:67:c5:ff:ae:01:df:e9:11:99:ae:cd:2b:
         64:ba:2e:c3:a8:a1:61:10:e3:eb:07:28:c3:1e:11:98:93:28:
         f4:a0:c5:48:06:f9:43:a9:a5:3e:9c:34:dc:c5:57:56:86:7d:
         97:97:8e:9e:c5:6d:e6:13:52:3b:9e:11:ce:3e:06:bd:82:e1:
         f0:62:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:00 2025 by rpki-client