Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa
File:                     3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa (raw, json)
Hash identifier:          gSt2usnq6X39egIlg52OUcHqh4xhreu+WgHoy2XGPVQ=
Subject key identifier:   A6:FD:4C:45:6E:E5:B6:AE:08:BA:BB:87:75:10:B3:EC:38:36:1E:E0
Certificate issuer:       /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
Certificate serial:       718CC67D2E6A2A908E6ABFC50F2C882F49A2E06A
Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa
Signing time:             Wed 24 Jun 2026 16:49:28 +0000
ROA not before:           Wed 24 Jun 2026 16:44:28 +0000
ROA not after:            Wed 23 Jun 2027 16:49:28 +0000
asID:                     27748
IP address blocks:        186.148.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:c6:7d:2e:6a:2a:90:8e:6a:bf:c5:0f:2c:88:2f:49:a2:e0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
        Validity
            Not Before: Jun 24 16:44:28 2026 GMT
            Not After : Jun 23 16:49:28 2027 GMT
        Subject: CN=A6FD4C456EE5B6AE08BABB877510B3EC38361EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:63:3d:c1:c9:32:57:7a:f0:41:27:0f:e1:
                    f3:46:a9:bf:79:ae:4d:28:71:2c:9e:84:32:86:cb:
                    ab:21:b6:34:0f:4a:fd:68:b0:63:2e:1d:4f:85:26:
                    6b:a1:93:30:f3:a4:7f:38:d7:61:f8:35:0d:ed:23:
                    ab:e9:5a:2f:0d:1f:13:6d:4a:88:e5:6b:98:87:fc:
                    95:0d:d7:fa:9a:8c:04:29:cc:80:22:5f:0b:48:cd:
                    90:61:44:78:b9:bb:b3:58:62:b6:c5:cb:e1:27:75:
                    a2:e4:d9:34:74:64:74:c0:a5:c8:a1:e8:38:7c:ec:
                    91:29:a1:cb:3a:66:c7:a8:dc:58:15:3c:cd:9a:b7:
                    36:4d:3d:d9:46:0a:4b:a8:82:c4:b1:8e:c1:d8:f0:
                    a5:12:93:7c:7e:6c:4f:9c:1a:2c:f7:3c:25:40:2c:
                    87:2b:b0:54:b2:82:26:a3:42:3f:40:ea:00:8d:a3:
                    9e:9a:be:aa:5c:71:1b:ef:75:2f:33:3f:a0:94:57:
                    96:05:97:25:b4:4c:f3:d0:f9:4f:eb:1c:93:08:7d:
                    a6:9a:48:e1:a3:32:85:75:6a:1a:af:dd:b0:73:33:
                    87:fe:83:88:3e:3c:b5:ea:e5:47:09:be:ac:b3:59:
                    1f:f7:47:ed:3e:3e:68:cb:56:c6:54:bf:a7:39:1a:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:4C:45:6E:E5:B6:AE:08:BA:BB:87:75:10:B3:EC:38:36:1E:E0
            X509v3 Authority Key Identifier:
                keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:0e:07:73:23:c0:79:7e:29:a9:b4:93:1d:70:a3:ee:e8:2c:
         97:2f:63:32:55:a5:b9:1d:8b:81:c0:5e:12:c0:23:41:43:d2:
         8a:5c:2b:bb:37:d0:d6:fc:1c:fd:c0:ad:5b:c5:e8:1e:31:67:
         4b:60:60:34:e1:bb:12:ff:53:30:a0:4d:d8:47:22:99:3a:34:
         79:76:f4:57:71:67:c8:d6:31:94:81:07:22:f6:24:6f:4c:0e:
         16:80:80:8e:43:03:c3:52:97:b2:84:2f:6a:e6:32:bb:aa:f5:
         b1:1b:3c:94:03:dd:c6:1b:c7:78:bf:5b:00:5e:0f:ec:44:ed:
         25:f6:80:40:b7:db:17:6c:c8:22:87:58:9a:00:99:e4:a7:82:
         7b:d0:6e:b5:08:8a:74:12:bb:26:dc:c1:d8:ca:0b:c4:9e:6d:
         04:cc:8a:06:e6:66:2f:c9:29:81:df:f8:8e:49:36:4c:6d:c9:
         b2:b1:59:6d:7c:24:66:2f:6f:54:c1:69:84:d2:10:eb:f3:f3:
         40:14:69:2a:43:39:74:22:d1:78:ee:25:ab:12:24:3d:b3:ee:
         fe:8e:87:ce:96:cf:20:e8:63:1c:7c:06:6e:be:35:c8:f7:19:
         38:bf:00:2c:fe:93:68:11:75:7d:6f:14:bf:3b:3f:f2:a7:bb:
         0a:29:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:10:04 2026 by rpki-client