Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e352e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e352e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          fp4MCwYQqdWmA0j20KkoMVE0lTUAaRZdHfL40LYYimI=
Subject key identifier:   56:0F:6A:77:D4:86:C1:CB:BB:39:E2:A8:7A:5E:37:3C:B6:3F:2C:62
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       219DA8F57B94419874C72337B18E014AB4925FDB
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e352e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:25:01 +0000
ROA not before:           Thu 02 Oct 2025 12:20:01 +0000
ROA not after:            Thu 01 Oct 2026 12:25:01 +0000
asID:                     27827
IP address blocks:        190.5.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9d:a8:f5:7b:94:41:98:74:c7:23:37:b1:8e:01:4a:b4:92:5f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:20:01 2025 GMT
            Not After : Oct  1 12:25:01 2026 GMT
        Subject: CN=560F6A77D486C1CBBB39E2A87A5E373CB63F2C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:32:04:66:a1:b0:2f:6a:ce:0e:58:1d:f6:
                    e9:e9:bb:d5:2d:49:1d:5c:8d:fd:21:d7:2f:c3:b0:
                    fb:e5:80:6e:0e:93:2a:4d:d5:9d:18:52:85:30:17:
                    d9:68:85:5b:e3:3f:e3:c6:e8:3a:9f:d1:5d:79:6f:
                    c8:0f:79:82:09:b2:8c:3d:a9:d7:30:e3:46:99:0a:
                    4c:f1:8a:dd:53:c4:f4:f7:d4:57:b2:5c:01:e8:0f:
                    ba:7d:03:b9:52:63:9a:1d:60:bb:7c:6b:c2:cf:69:
                    cf:11:b9:78:3c:06:de:b5:03:15:96:78:a2:8c:60:
                    dc:cb:27:34:10:17:13:eb:57:77:36:d8:f7:6c:76:
                    82:7f:fb:3d:0d:7d:e0:1f:56:01:96:58:d6:f4:c4:
                    28:d6:57:1d:d8:33:28:8c:f8:f3:47:be:9e:b9:04:
                    de:02:30:7c:aa:65:ba:30:2d:6a:c1:eb:a8:8a:14:
                    6c:5e:15:f8:59:4a:bd:9c:4d:23:6a:e6:51:01:af:
                    c6:cc:61:05:ca:3c:c8:2c:9e:64:f4:05:c7:34:a6:
                    27:21:61:cb:94:e1:3b:34:67:5e:2c:92:f6:02:7f:
                    bc:bc:0b:46:2d:d0:dd:07:89:50:85:17:cb:a9:38:
                    52:59:b8:5d:5f:38:4b:f9:69:0f:6a:05:9b:20:d7:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:6A:77:D4:86:C1:CB:BB:39:E2:A8:7A:5E:37:3C:B6:3F:2C:62
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e352e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:24:d7:cc:6a:00:54:c0:69:67:f5:60:e0:b8:14:2f:5d:37:
         15:18:ad:df:4a:fa:c4:96:6d:c0:a7:ac:ed:3f:50:fc:97:2a:
         bf:1d:82:0a:1e:c6:a5:f3:77:a6:63:d1:90:a5:b1:e8:50:99:
         62:c7:37:ab:11:c3:df:6f:41:b3:ef:04:e9:eb:6e:75:09:ff:
         d7:8e:14:9f:09:0e:60:0d:04:ff:df:38:b5:0b:b2:35:8e:79:
         db:a3:05:f5:95:60:1a:28:d3:2a:1e:ca:37:13:4f:6b:42:23:
         b0:fa:9c:bf:64:a0:18:44:7b:d8:f6:8c:08:3b:c3:e0:61:55:
         7a:56:f6:41:24:f4:3c:1d:af:83:ee:7c:e2:4c:18:cc:3e:d6:
         e8:41:93:bf:b3:12:f6:a3:80:32:3d:95:f5:cf:4e:f8:23:68:
         b3:bb:37:a5:ee:eb:af:ec:b4:29:de:2a:02:3f:ad:4c:21:7a:
         86:aa:2c:10:75:c8:1c:41:d7:3b:bf:53:91:86:46:be:96:f1:
         75:eb:92:e8:7f:c2:ee:9c:44:8a:76:ac:40:1e:83:c9:08:bf:
         71:fc:aa:3f:6f:28:26:86:84:37:fc:95:43:41:ab:8a:0c:c8:
         06:71:f7:1a:ed:4b:bf:7d:e5:e6:5e:e1:c2:de:b5:77:18:82:
         28:95:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:44 2025 by rpki-client