Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa
File:                     3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa (raw, json)
Hash identifier:          pj0CNYr4ES4zHjD0TKkB0ob5cSKvY359coVOZJqqBx8=
Subject key identifier:   B0:6B:31:60:01:06:18:AC:E0:9F:A0:B2:79:1E:EF:53:95:43:F6:F4
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       327D77873516FE52718DB915314FF12935F40571
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa
Signing time:             Fri 03 Apr 2026 21:37:27 +0000
ROA not before:           Fri 03 Apr 2026 21:32:27 +0000
ROA not after:            Fri 02 Apr 2027 21:37:27 +0000
asID:                     265728
IP address blocks:        160.238.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 23:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7d:77:87:35:16:fe:52:71:8d:b9:15:31:4f:f1:29:35:f4:05:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: Apr  3 21:32:27 2026 GMT
            Not After : Apr  2 21:37:27 2027 GMT
        Subject: CN=B06B3160010618ACE09FA0B2791EEF539543F6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:f7:fd:95:af:c5:af:88:0f:38:ed:c5:07:
                    1e:41:8e:6b:ca:b2:f5:e8:19:10:ed:be:95:43:26:
                    bc:c9:9a:2b:c0:f3:1a:1d:64:4c:39:79:47:ac:a3:
                    2c:52:32:a4:69:e6:9f:cb:3d:1c:05:b8:e8:fc:aa:
                    cf:f5:f3:c2:90:a3:d5:30:28:06:77:bc:f2:b0:cb:
                    2d:df:a8:85:9f:e8:75:d5:f4:b8:3d:10:2a:1d:e0:
                    75:fa:d6:9b:05:a0:e7:66:3e:a9:40:cf:4d:2f:73:
                    3e:b4:f6:eb:7f:b8:9b:6d:5a:ab:40:44:4a:2f:2c:
                    87:61:f6:ae:07:44:e2:35:83:09:c3:cb:c9:35:06:
                    b2:8c:a4:02:f8:fe:e3:cb:20:eb:81:a3:36:50:4a:
                    b9:49:d0:c8:2f:59:a8:6a:56:82:e6:3c:cd:3c:bc:
                    ae:76:65:e5:2b:aa:65:cb:8e:37:df:57:8f:d6:3a:
                    ba:64:5b:e9:16:19:9d:3c:85:4a:79:1c:f6:0d:6b:
                    ee:2b:3b:c8:e4:63:e4:a2:ea:de:51:f6:68:f5:cc:
                    14:60:84:f5:4c:16:58:8d:81:70:7a:a7:81:85:ee:
                    18:cf:c9:b9:93:00:81:4d:54:d1:95:67:77:4f:8a:
                    07:36:1b:4d:7d:ae:09:75:17:41:49:75:0f:08:75:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:31:60:01:06:18:AC:E0:9F:A0:B2:79:1E:EF:53:95:43:F6:F4
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:89:7f:26:d8:23:b1:71:4f:bd:b2:04:b4:33:44:3f:df:
         32:40:57:b3:fe:d0:f1:9b:6c:1b:67:5c:88:3d:8b:dc:8c:15:
         d2:13:8c:d4:b6:13:d5:38:3c:13:f0:e0:21:0e:3b:b9:02:a3:
         84:7d:5e:a6:a4:dd:4f:46:88:65:07:40:29:d1:32:41:4d:3e:
         49:99:49:34:75:76:fb:f3:26:27:86:b7:4f:07:8e:5a:63:cd:
         d0:81:c8:9d:c8:5d:a3:bd:a5:33:dc:0a:35:32:92:d4:26:a6:
         51:26:25:d2:85:95:a1:70:9a:41:f3:1a:ee:42:cc:c9:80:da:
         20:d2:4c:16:52:50:22:40:5a:98:0c:e4:f0:6b:5b:f9:eb:2b:
         95:b1:b8:f1:46:c8:bd:b0:f2:f6:06:a2:dc:0a:4b:42:3d:b3:
         c1:bf:ab:ac:8c:69:69:f3:3d:0e:a3:0c:69:44:cd:a9:68:24:
         36:1e:8c:f1:9a:cc:34:3a:64:eb:ab:c1:03:27:db:e4:b8:ec:
         6e:c4:3a:e0:ae:42:f0:a5:57:36:b4:d8:8b:c1:c0:3f:c3:c6:
         de:6f:8e:09:1d:5d:76:e9:e0:4a:6a:d0:8d:fa:1e:15:e7:3f:
         bf:53:28:3e:1f:5b:5a:dd:0f:98:62:8e:3e:c2:a5:3a:2f:be:
         a3:c4:e0:c2
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMn13hzUW/lJxjbkVMU/xKTX0BXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFMUFCRUMwMTBBQkI5QUY0NjNCRjIyQjE2QzU2MUI1
QzJDNDQ0NDAeFw0yNjA0MDMyMTMyMjdaFw0yNzA0MDIyMTM3MjdaMDMxMTAvBgNV
BAMTKEIwNkIzMTYwMDEwNjE4QUNFMDlGQTBCMjc5MUVFRjUzOTU0M0Y2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7//f9la/Fr4gPOO3FBx5BjmvK
svXoGRDtvpVDJrzJmivA8xodZEw5eUesoyxSMqRp5p/LPRwFuOj8qs/188KQo9Uw
KAZ3vPKwyy3fqIWf6HXV9Lg9ECod4HX61psFoOdmPqlAz00vcz609ut/uJttWqtA
REovLIdh9q4HROI1gwnDy8k1BrKMpAL4/uPLIOuBozZQSrlJ0MgvWahqVoLmPM08
vK52ZeUrqmXLjjffV4/WOrpkW+kWGZ08hUp5HPYNa+4rO8jkY+Si6t5R9mj1zBRg
hPVMFliNgXB6p4GF7hjPybmTAIFNVNGVZ3dPigc2G019rgl1F0FJdQ8IdcytAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUsGsxYAEGGKzgn6CyeR7vU5VD9vQwHwYDVR0j
BBgwFoAUt+Gr7AEKu5r0Y78isWxWG1wsREQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTUxMUQ2ODFFNzJGOUQ4MTRGN0JEOEZDMzlEMUZFRDdF
QTNGOTRBQjcwNEY2ODhDOEMzOEYxQTUxNzMyQkRDLzAvQjdFMUFCRUMwMTBBQkI5
QUY0NjNCRjIyQjE2QzU2MUI1QzJDNDQ0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0UxQUJFQzAxMEFCQjlBRjQ2
M0JGMjJCMTZDNTYxQjVDMkM0NDQ0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1MTFENjgxRTcyRjlEODE0RjdCRDhGQzM5RDFGRUQ3RUEzRjk0QUI3
MDRGNjg4QzhDMzhGMUE1MTczMkJEQy8wLzMxMzYzMDJlMzIzMzM4MmUzMTM4MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzMyMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg
7rowDQYJKoZIhvcNAQELBQADggEBAH8hiX8m2COxcU+9sgS0M0Q/3zJAV7P+0PGb
bBtnXIg9i9yMFdITjNS2E9U4PBPw4CEOO7kCo4R9Xqak3U9GiGUHQCnRMkFNPkmZ
STR1dvvzJieGt08HjlpjzdCByJ3IXaO9pTPcCjUyktQmplEmJdKFlaFwmkHzGu5C
zMmA2iDSTBZSUCJAWpgM5PBrW/nrK5WxuPFGyL2w8vYGotwKS0I9s8G/q6yMaWnz
PQ6jDGlEzaloJDYejPGazDQ6ZOurwQMn2+S47G7EOuCuQvClVza02IvBwD/Dxt5v
jgkdXXbp4Epq0I36HhXnP79TKD4fW1rdD5hijj7CpTovvqPE4MI=
-----END CERTIFICATE-----
Generated at Wed Apr 8 11:01:16 2026 by rpki-client