Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa
File:                     3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa (raw, json)
Hash identifier:          tWX15bRQNOePMWtFqM32Er84ANgYQzyxQLUGT+WBzMU=
Subject key identifier:   E7:AE:E0:F3:56:CC:C1:AA:94:3E:6C:1B:1B:2E:66:3C:EB:E9:C1:17
Certificate issuer:       /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
Certificate serial:       09694866C9EE98B3B8DFC6D786B6FD6C42CC0EDF
Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa
Signing time:             Tue 23 Jun 2026 15:49:06 +0000
ROA not before:           Tue 23 Jun 2026 15:44:06 +0000
ROA not after:            Tue 22 Jun 2027 15:49:06 +0000
asID:                     262164
IP address blocks:        186.148.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:48:66:c9:ee:98:b3:b8:df:c6:d7:86:b6:fd:6c:42:cc:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
        Validity
            Not Before: Jun 23 15:44:06 2026 GMT
            Not After : Jun 22 15:49:06 2027 GMT
        Subject: CN=E7AEE0F356CCC1AA943E6C1B1B2E663CEBE9C117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:d2:29:5a:56:71:31:7a:66:bd:9d:2e:fd:
                    12:12:77:2c:67:ab:81:14:48:c3:16:b4:82:4f:49:
                    95:2f:b2:38:7b:f5:d6:77:14:ec:b3:4c:aa:65:d5:
                    1a:e9:5d:01:c2:09:d0:a8:95:a0:9e:52:2b:5c:f7:
                    8a:ed:04:83:22:86:8d:13:85:6e:05:e0:5c:b8:2e:
                    ed:cc:6f:6a:13:2d:19:c0:3f:ff:9b:45:71:6b:38:
                    cb:33:7a:55:4c:0f:eb:fe:01:db:79:7b:7a:55:f8:
                    dd:47:5d:fb:04:d8:26:eb:38:e2:21:54:e6:a2:5b:
                    2b:fb:d8:d6:3b:38:10:a5:62:81:dc:c0:93:bf:ef:
                    aa:49:91:54:ab:2c:aa:6f:13:fa:a7:b8:5e:d2:a5:
                    f2:12:b8:20:82:f9:d7:7f:a0:83:cf:de:d8:a8:25:
                    15:c3:7f:a8:e5:15:f4:72:e1:1b:3d:74:4e:cb:83:
                    cb:6d:57:c2:5e:51:bd:72:3c:67:90:49:cf:2e:76:
                    bc:f1:28:e0:9b:53:02:69:ef:d3:c1:85:08:c2:55:
                    83:74:fd:90:03:95:3a:c2:5f:e3:8e:88:b9:33:ca:
                    3a:81:a7:c5:d7:70:c9:df:a9:b2:9e:81:84:2d:d5:
                    fe:79:24:d2:20:f8:4a:15:82:c4:37:3d:82:0f:c4:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AE:E0:F3:56:CC:C1:AA:94:3E:6C:1B:1B:2E:66:3C:EB:E9:C1:17
            X509v3 Authority Key Identifier:
                keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:a5:6f:86:81:84:b5:a5:a0:da:d9:0f:5f:7f:e4:c2:19:13:
         63:12:0b:5e:b6:e8:90:66:01:21:bb:2c:3c:8f:41:dd:25:ba:
         da:c7:29:32:5c:fb:0e:78:99:2a:d9:b0:2f:bd:2e:d8:06:25:
         3f:7a:71:99:10:75:bf:77:e8:6d:4f:aa:90:f8:73:21:db:85:
         80:62:87:ea:03:af:d2:41:00:d7:4f:55:b3:53:3d:32:3b:84:
         74:8d:2f:1c:05:32:3d:58:58:7f:87:40:fd:3a:d8:c3:5b:ac:
         1b:bd:af:87:23:10:70:70:96:c6:fe:d0:79:d0:09:63:4e:64:
         dc:eb:77:45:7b:99:06:8c:55:0f:36:63:5a:95:1c:bc:99:67:
         aa:5c:96:1b:6d:e9:df:a1:6a:d2:60:81:6e:5c:45:82:b8:3d:
         21:44:6a:46:76:60:68:7b:46:58:c1:e1:85:36:02:5a:3e:9c:
         aa:52:cb:8a:20:f0:6d:86:91:d5:65:22:45:56:81:aa:6d:0f:
         75:c0:2f:ca:4e:a7:6f:78:7a:ca:a3:e0:40:65:64:c9:53:ba:
         7e:27:99:bf:fe:42:be:8e:68:85:d6:d0:be:d9:0e:50:28:12:
         37:21:02:6c:9f:fd:ad:96:37:42:b8:d6:12:04:6a:90:53:5a:
         5f:8e:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:26 2026 by rpki-client