Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e392e302f32342d3234203d3e203237383237.roa
File:                     3139302e352e392e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          yM8Za4WnzkJ/JgLV73GzVvm0bfzC4GG5IQ52jzfRFok=
Subject key identifier:   B5:78:07:40:44:BF:EC:27:5C:A2:08:9F:C7:45:90:B1:2E:CF:81:21
Certificate issuer:       /CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
Certificate serial:       3B7AA65A70B6BE8E1C8C6469752FB43128D92F5F
Authority key identifier: 13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e392e302f32342d3234203d3e203237383237.roa
Signing time:             Thu 02 Oct 2025 12:30:01 +0000
ROA not before:           Thu 02 Oct 2025 12:25:01 +0000
ROA not after:            Thu 01 Oct 2026 12:30:01 +0000
asID:                     27827
IP address blocks:        190.5.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7a:a6:5a:70:b6:be:8e:1c:8c:64:69:75:2f:b4:31:28:d9:2f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135C2DE774CFC45834675DB1AA6EC8A7528D656D
        Validity
            Not Before: Oct  2 12:25:01 2025 GMT
            Not After : Oct  1 12:30:01 2026 GMT
        Subject: CN=B578074044BFEC275CA2089FC74590B12ECF8121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:73:ae:41:4d:c6:dc:41:11:dd:46:6a:e3:
                    63:8d:88:4f:f8:11:ef:60:62:e3:6f:78:b9:31:59:
                    b6:3b:e6:6e:43:0b:e4:01:a8:c9:1a:e5:b5:02:49:
                    9f:16:39:5a:8c:fb:2a:bb:8a:e4:a9:5b:5d:74:09:
                    a0:87:33:1b:65:c9:a6:5d:d4:e0:9d:8f:d5:9b:61:
                    3a:d6:d9:27:15:a7:0f:e0:80:5c:f8:05:b7:44:5c:
                    8e:48:1e:07:b1:b4:e6:79:8b:95:eb:85:fb:9c:a9:
                    7d:e4:ee:d0:3c:a3:93:83:47:14:c5:34:61:e6:62:
                    85:ad:1e:09:7f:2f:69:6d:bc:6a:8c:f9:7f:6d:3c:
                    94:5e:98:e0:8d:19:b3:76:8d:b6:3d:52:b4:57:f5:
                    3b:69:21:d8:76:1a:70:19:73:f2:27:6b:8a:41:9b:
                    d1:8d:2e:64:1a:fd:77:f3:36:aa:19:f3:a4:81:7c:
                    f0:7a:3d:51:40:63:f4:62:5e:b3:96:3d:70:d6:e6:
                    4d:a9:27:9e:8b:ee:68:1a:ae:39:e6:c2:31:29:44:
                    38:3f:76:e5:f3:bd:f6:da:45:84:23:f9:e9:a9:7b:
                    a3:3c:89:3c:25:60:bd:ab:b5:da:6b:95:ca:80:86:
                    ff:07:fc:b5:48:e8:b0:52:1a:3c:ea:8f:33:ea:96:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:07:40:44:BF:EC:27:5C:A2:08:9F:C7:45:90:B1:2E:CF:81:21
            X509v3 Authority Key Identifier:
                keyid:13:5C:2D:E7:74:CF:C4:58:34:67:5D:B1:AA:6E:C8:A7:52:8D:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/135C2DE774CFC45834675DB1AA6EC8A7528D656D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16E13E64C6622D283C34A612DAA9D66E2C9B7389F3A3452AD513FF50DBA66F31/0/3139302e352e392e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:6f:3b:ba:dd:b9:59:f1:ca:da:47:2f:5e:d1:9b:b6:5b:
         fb:5d:75:7d:b2:4b:3e:1c:23:10:c8:b4:d9:70:2e:ed:94:40:
         c4:e3:3d:3b:93:28:5c:fd:39:a3:96:86:c3:77:22:2d:b7:2d:
         2d:a2:78:6b:07:28:b7:0c:ed:e4:5b:2b:74:d6:d8:f5:43:f8:
         92:6b:a7:6f:07:ca:33:b8:f8:a2:e5:0c:21:66:80:3a:d4:b9:
         04:ee:8c:9f:e9:67:1d:37:71:d9:b7:fb:bb:4a:76:c0:c9:11:
         94:95:de:0c:e2:c9:a6:30:e7:39:d9:96:80:ff:70:d3:54:42:
         5f:68:04:75:48:d5:7c:dd:c1:35:9b:87:80:5e:bc:7b:28:2f:
         6e:a2:45:3c:e7:ba:13:19:a0:6b:de:02:90:0f:86:dd:e6:ba:
         6d:0e:5e:60:c9:e9:87:4f:75:c8:f6:2a:64:6a:6d:b8:bf:20:
         3f:fb:66:72:63:d4:88:45:fc:69:9b:a1:4c:bc:3d:ea:d0:4c:
         cf:c3:04:5d:e8:60:21:5d:c0:49:55:2f:92:8b:af:b5:31:3a:
         b3:d2:e8:96:f7:ce:55:bd:3c:7a:29:38:72:8e:1b:90:17:5f:
         95:4b:aa:65:b3:0b:d6:1a:2e:29:19:db:af:a9:5b:89:98:6a:
         f2:dd:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:32 2025 by rpki-client