Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa
File:                     3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (raw, json)
Hash identifier:          bBhgzvpywEwBVRjVtlnxNrKkXtoDZP8wBxbK62FNlZY=
Subject key identifier:   E0:48:B2:2A:A6:5F:DA:C4:D6:D4:4D:C9:28:BE:38:81:12:7B:1D:65
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       53461E8E2FA9B3D410849A4581891ADB331EFB6E
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa
Signing time:             Mon 24 Aug 2026 22:26:25 +0000
ROA not before:           Mon 24 Aug 2026 22:21:25 +0000
ROA not after:            Mon 23 Aug 2027 22:26:25 +0000
asID:                     52371
IP address blocks:        186.159.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 08:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:46:1e:8e:2f:a9:b3:d4:10:84:9a:45:81:89:1a:db:33:1e:fb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Aug 24 22:21:25 2026 GMT
            Not After : Aug 23 22:26:25 2027 GMT
        Subject: CN=E048B22AA65FDAC4D6D44DC928BE3881127B1D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:8f:66:f2:2c:44:03:62:2c:49:1e:5b:84:
                    02:31:98:32:62:96:65:a3:99:5f:54:2c:0c:e8:48:
                    f5:ff:9e:d5:5c:ce:46:34:6a:3e:3b:51:fb:a9:cc:
                    df:8c:d9:21:3a:de:a6:38:94:07:e3:6c:f1:16:7c:
                    d8:f4:f4:73:0a:92:7d:7f:cb:f3:dc:d2:65:f6:70:
                    44:04:07:c3:70:4e:1e:1a:e0:ce:30:1f:5a:ca:01:
                    47:3d:6d:66:b5:28:6f:59:3d:bb:01:0e:3c:36:a9:
                    38:e4:32:cd:dc:50:52:fd:50:c7:c6:1b:73:83:bf:
                    dc:b1:3d:b7:9f:13:81:d8:02:32:71:72:dc:82:34:
                    c9:27:1e:f9:df:eb:7e:be:8c:ac:bb:6c:61:4b:1a:
                    ce:2c:40:4d:c0:b1:e4:0f:00:86:23:4f:13:bc:c5:
                    17:ef:da:4d:fe:75:fa:ad:a4:32:e4:6c:81:5e:ab:
                    8e:29:c8:c4:ef:10:9c:28:50:6b:88:ff:a6:8c:c6:
                    81:2d:ac:7b:76:1b:82:96:d1:61:aa:3a:8d:9e:32:
                    dc:96:20:9c:4a:69:68:16:d0:67:6b:08:cf:fd:11:
                    1c:58:8a:66:19:12:cd:1f:62:0b:18:53:ea:4c:7b:
                    e6:d5:54:9a:68:df:64:59:d7:6f:09:0a:90:5c:a0:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:B2:2A:A6:5F:DA:C4:D6:D4:4D:C9:28:BE:38:81:12:7B:1D:65
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:19:9f:e7:bf:af:c2:95:74:ff:6c:56:58:ea:ef:33:73:
         5f:2c:22:e3:e5:b7:c3:7f:29:5a:72:33:a8:ea:98:95:44:07:
         ba:05:8a:e5:99:82:65:7c:a8:9f:f5:d3:3c:92:fc:87:88:c7:
         d6:c4:8d:dd:6b:e8:9c:81:23:6e:6f:ae:17:de:f0:c7:f2:85:
         ac:dd:bd:83:f2:b3:39:aa:88:98:5d:64:96:fb:96:fd:8f:2c:
         76:a4:9f:61:ae:d7:56:c7:ec:e8:c2:63:f2:d1:08:20:1e:72:
         46:59:58:cc:b7:7c:35:ad:31:a8:3f:18:ad:a8:ce:ef:ac:43:
         48:02:14:95:a5:5a:52:5b:a5:6f:63:6e:2d:d6:62:fa:39:b2:
         dc:f3:2e:49:e9:f1:db:0c:05:5c:0e:4b:64:2e:c3:0e:c0:0b:
         1b:09:08:3e:51:e2:00:ed:56:9e:e2:7d:9c:68:45:ae:af:c4:
         36:c7:4b:db:a7:74:8d:a1:60:8c:5b:e5:d2:e6:77:4f:90:39:
         8a:63:58:16:08:95:35:b4:87:77:9f:84:5c:5a:64:eb:84:5a:
         50:76:a7:33:68:f3:02:76:3c:ff:a6:ef:70:34:64:32:38:33:
         bc:bf:98:d5:91:65:48:81:45:3e:2b:b6:fa:42:dc:d0:e2:31:
         4d:ae:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 01:06:03 2026 by rpki-client