Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e382e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e382e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          xEDOGWmzM/AkwPRAGUEra4FgkkVoGhDDSpK+SIFh/gs=
Subject key identifier:   2C:2A:4B:6E:EC:D5:81:89:74:93:74:A2:3C:8F:89:65:1A:87:5F:D4
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       3003829E26D5656AD34B205A1712C3B14684AF4A
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e382e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:30:00 +0000
ROA not before:           Thu 02 Oct 2025 12:25:00 +0000
ROA not after:            Thu 01 Oct 2026 12:30:00 +0000
asID:                     27827
IP address blocks:        190.5.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:03:82:9e:26:d5:65:6a:d3:4b:20:5a:17:12:c3:b1:46:84:af:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:25:00 2025 GMT
            Not After : Oct  1 12:30:00 2026 GMT
        Subject: CN=2C2A4B6EECD58189749374A23C8F89651A875FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:c1:36:8e:ec:6e:51:36:a9:29:1d:a2:73:
                    89:6e:55:c4:2b:06:b3:fe:73:f3:8e:4c:fd:a3:95:
                    5f:a9:a8:79:97:58:5b:01:0e:32:49:a9:74:c5:ef:
                    24:35:dc:59:51:ff:63:fd:8f:90:e6:7e:16:50:0f:
                    d7:75:bc:7f:91:de:c5:4f:df:4e:e9:36:b1:38:3d:
                    9f:7b:67:d3:05:14:fd:71:69:46:9d:44:55:ca:f2:
                    6f:4e:40:90:6c:ae:9a:4c:39:0b:aa:e5:7a:e2:01:
                    69:12:32:2a:f6:65:50:d7:bc:c0:7c:a6:85:39:34:
                    ac:ba:a9:45:57:5f:b4:af:8e:7d:f5:22:2e:a0:5f:
                    fe:80:22:70:56:f6:d1:36:ed:09:3e:53:30:d8:ed:
                    69:d0:6f:49:a2:c1:6b:81:5e:d6:ee:e8:92:8f:ea:
                    20:e2:60:d4:a9:7d:da:fc:24:ff:a9:0c:d8:bb:20:
                    76:6c:28:33:40:7b:b0:de:9c:3c:b2:3a:39:0a:0e:
                    49:90:fb:7e:a7:28:bf:79:17:20:80:c4:08:c8:e5:
                    51:69:4d:08:72:a8:a8:f3:e2:56:94:64:4a:fd:bc:
                    77:1c:58:69:1d:77:90:cb:cc:77:d1:ff:2e:20:c8:
                    54:4f:e3:0c:17:2b:f3:45:96:6c:d6:7c:e0:00:26:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2A:4B:6E:EC:D5:81:89:74:93:74:A2:3C:8F:89:65:1A:87:5F:D4
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e382e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:73:69:83:2d:1e:96:f6:a3:9a:bf:45:78:81:15:24:47:8f:
         a4:ed:0e:da:81:84:ff:1b:fa:61:a8:b1:e8:ed:4c:35:46:d4:
         a6:cf:18:a9:d2:41:b7:2b:7a:7f:71:27:7e:56:10:1e:17:9c:
         41:ea:ba:4a:cd:aa:9a:19:8d:31:44:04:7e:d0:67:6f:b0:53:
         e0:74:af:9f:d4:1d:da:40:5d:30:13:7e:51:8f:14:a9:ed:8b:
         0c:aa:b3:48:fc:e4:35:a7:53:3b:23:32:ac:24:d3:f3:52:e7:
         77:61:7b:7d:c5:43:76:73:23:67:34:72:07:ed:f7:22:76:ad:
         7d:f8:ab:f7:8f:53:7e:de:e8:31:31:13:e4:e0:93:71:c0:cf:
         c7:9d:61:b2:b6:c1:01:68:94:b7:fc:2e:f3:a3:64:dd:25:82:
         5b:97:f0:2c:10:49:85:81:74:59:76:b4:df:8e:9a:ff:ff:53:
         dd:2b:26:c2:30:96:57:d4:e2:9d:e3:e1:5b:a7:a1:a0:bd:69:
         77:8d:72:27:98:b5:77:b5:b4:75:00:4f:93:0a:43:9a:6f:cd:
         aa:cd:3e:f9:10:d9:a1:e6:77:78:9a:36:e1:86:a7:31:2d:ae:
         d1:b0:46:9a:4f:4b:37:90:af:3d:61:9b:3f:dc:d0:3c:19:19:
         e4:34:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:30 2025 by rpki-client