Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa
File:                     3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa (raw, json)
Hash identifier:          AXmsc+fIOCXXpBigtV53ye/lPTG5D+Ke+ImeeKd3OBs=
Subject key identifier:   26:F2:59:01:DB:28:66:B1:2F:90:4F:47:BC:85:A4:F9:0E:13:59:94
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       5D129178BE71262CBD063B8261C8B6D0BA43260C
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa
Signing time:             Wed 19 Aug 2026 14:26:01 +0000
ROA not before:           Wed 19 Aug 2026 14:21:01 +0000
ROA not after:            Wed 18 Aug 2027 14:26:01 +0000
asID:                     52371
IP address blocks:        186.159.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 08:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:12:91:78:be:71:26:2c:bd:06:3b:82:61:c8:b6:d0:ba:43:26:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Aug 19 14:21:01 2026 GMT
            Not After : Aug 18 14:26:01 2027 GMT
        Subject: CN=26F25901DB2866B12F904F47BC85A4F90E135994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:d5:ed:b7:ec:a1:5d:14:33:1d:98:57:7b:
                    2c:91:6f:70:4f:e1:fe:35:e1:6b:a0:50:3d:dc:7f:
                    3d:2b:b9:ac:6f:6f:21:7e:d1:e3:9d:8e:92:6c:3f:
                    8a:a6:c4:03:56:0b:ae:11:87:96:8c:48:e2:99:ef:
                    9e:f4:24:87:a2:22:1f:b5:49:dd:7b:01:ac:15:96:
                    9f:6c:5b:74:cb:4f:ce:20:be:3b:e1:b4:ee:7b:78:
                    80:1a:2b:22:c8:9e:27:63:99:d9:27:62:22:39:dc:
                    ad:d7:8b:ce:76:9c:f6:0d:2d:5e:44:f0:53:7f:64:
                    f8:9c:08:c7:2c:da:6e:37:bb:55:3b:81:c7:7e:f1:
                    35:09:ce:aa:f9:09:62:78:5c:41:2c:60:c1:2c:46:
                    34:92:56:e5:f5:da:9e:23:17:48:57:af:24:82:82:
                    f5:d2:44:b2:eb:99:6a:d8:73:0f:b7:fa:7c:a5:cd:
                    f0:c5:ee:8b:e0:72:0d:05:2c:c8:5a:67:53:be:21:
                    b2:18:52:49:4c:52:da:bf:27:40:5c:df:0e:af:06:
                    34:59:b8:b5:65:3f:50:11:54:ad:3f:de:92:1e:4f:
                    25:04:ec:31:82:86:54:30:14:57:a5:df:39:38:1f:
                    b4:7d:60:fe:5d:7c:05:dd:f3:98:12:a9:dd:58:d9:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F2:59:01:DB:28:66:B1:2F:90:4F:47:BC:85:A4:F9:0E:13:59:94
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:8b:54:83:c2:42:d1:dd:a2:a8:18:f1:75:0b:3a:74:02:
         c9:7f:17:7b:83:83:19:75:e8:31:fe:66:40:df:ac:50:87:84:
         e7:d9:a9:e6:28:11:9c:b1:85:ad:d8:42:b8:ec:ed:a6:b6:02:
         b5:43:fe:b7:9e:90:70:13:06:22:3f:f1:56:7e:8c:66:b7:39:
         d4:cd:9c:0d:4e:8d:e7:46:41:41:b0:6a:28:ae:51:c9:db:32:
         97:5a:55:39:40:5f:58:06:01:33:9f:13:62:14:d8:fc:57:a3:
         d2:a3:b3:74:78:01:54:5e:c2:d8:0a:49:6f:66:cd:16:9e:97:
         9a:a2:90:01:b8:2f:9d:3c:63:3c:6e:70:6e:37:60:69:8c:5d:
         8b:55:5c:15:97:78:86:03:ea:d6:07:23:d0:67:f0:11:c5:3b:
         d7:ec:6d:86:63:a3:13:2e:5f:db:0a:ef:3f:8f:11:32:05:2b:
         31:6d:8a:34:03:1a:b8:03:9f:b1:7f:6b:e1:45:96:cc:af:15:
         fc:0e:08:49:60:ab:4d:a6:ff:62:7c:c8:01:23:de:6f:93:5d:
         cd:70:c3:aa:20:01:6e:a6:3b:97:7b:05:81:06:57:66:68:e2:
         56:84:5e:e5:4b:ba:31:7d:56:64:59:a8:e5:0b:66:1c:6a:eb:
         1f:c0:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 01:05:55 2026 by rpki-client