Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/3138362e302e3138342e302f32322d3234203d3e20323633373736.roa
File:                     3138362e302e3138342e302f32322d3234203d3e20323633373736.roa (raw, json)
Hash identifier:          zMFbAoeIbOHhWmuEzXaWUrL4SeuyZ5oIOddV4SyYmdA=
Subject key identifier:   82:5C:04:A3:CA:9A:28:AA:C3:FD:B0:23:67:A7:3D:9D:3C:98:93:62
Certificate issuer:       /CN=AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4
Certificate serial:       22428FDFF33918C4503044442A8D1E95CFA6DEB7
Authority key identifier: AE:0E:33:8F:26:75:12:EB:A8:E9:A9:6E:1D:AF:C9:D5:A3:CF:66:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/3138362e302e3138342e302f32322d3234203d3e20323633373736.roa
Signing time:             Tue 06 Jan 2026 20:50:03 +0000
ROA not before:           Tue 06 Jan 2026 20:45:03 +0000
ROA not after:            Tue 05 Jan 2027 20:50:03 +0000
asID:                     263776
IP address blocks:        186.0.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:42:8f:df:f3:39:18:c4:50:30:44:44:2a:8d:1e:95:cf:a6:de:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4
        Validity
            Not Before: Jan  6 20:45:03 2026 GMT
            Not After : Jan  5 20:50:03 2027 GMT
        Subject: CN=825C04A3CA9A28AAC3FDB02367A73D9D3C989362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:60:49:87:88:df:81:d5:c6:cb:4d:be:53:
                    b1:42:4a:f4:a6:37:ab:2b:2c:d7:cf:ff:c1:68:f9:
                    82:50:93:21:74:ff:3e:3d:99:e2:76:da:29:5b:01:
                    00:45:6f:15:d6:3c:7d:b4:37:fc:82:c4:b7:ab:45:
                    55:18:42:a4:44:d0:e6:eb:c0:e9:77:9e:05:6c:27:
                    98:2b:dd:c4:3a:de:09:85:c6:df:a5:0d:55:a0:30:
                    e8:80:45:6c:06:ed:cc:13:90:9e:9e:9e:49:4f:e8:
                    7f:9f:e9:7a:16:63:6b:b7:9d:83:7f:19:51:41:b0:
                    31:4c:7b:9f:9c:30:5f:15:27:91:29:d6:ad:40:54:
                    b0:22:f5:cd:d7:e4:f2:22:cf:3b:7c:97:72:7f:b4:
                    de:ec:4d:1c:54:0d:ba:41:f0:67:67:c0:dd:a7:5e:
                    8f:0f:a5:22:11:61:37:70:08:48:31:85:dc:38:53:
                    78:c6:7b:81:62:e9:a0:d0:25:3d:06:d4:1a:1d:49:
                    93:5e:9f:fe:81:48:93:4b:35:23:ab:3a:c9:8f:83:
                    3e:73:15:dd:2e:89:2b:db:8a:e4:59:2e:d1:cf:8a:
                    e5:89:72:82:4c:8a:0f:8e:bb:2e:d4:be:d8:7e:4e:
                    66:2c:21:74:08:a2:7f:d0:c2:e0:32:3f:f7:b0:ec:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5C:04:A3:CA:9A:28:AA:C3:FD:B0:23:67:A7:3D:9D:3C:98:93:62
            X509v3 Authority Key Identifier:
                keyid:AE:0E:33:8F:26:75:12:EB:A8:E9:A9:6E:1D:AF:C9:D5:A3:CF:66:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE0E338F267512EBA8E9A96E1DAFC9D5A3CF66D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C9993AAA0D448DC416CA2E49B5A2E30A4DE6EB624621E1DE365DDB924F7BF0A/0/3138362e302e3138342e302f32322d3234203d3e20323633373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:79:aa:0d:48:72:7c:29:0f:e9:5e:1e:20:25:0e:59:b1:2d:
         83:16:ac:a5:32:16:63:b8:f1:35:fd:79:8d:ab:50:0d:b3:32:
         8c:e5:19:29:f5:a0:50:1f:15:32:ac:06:3a:5b:45:19:87:c8:
         60:e4:07:df:99:fb:d7:cc:8e:cf:e7:d3:f4:dd:58:a7:11:09:
         24:06:5f:92:35:b1:ac:f6:83:2e:3d:cf:19:47:5d:61:4e:bc:
         fc:14:ce:e8:64:1b:25:1b:be:cf:04:48:bb:2c:c7:98:5a:39:
         09:0c:f3:c7:6c:51:69:2c:ca:96:2e:85:82:1a:c9:f3:30:cd:
         f9:49:4b:b3:8f:a0:ae:e4:94:eb:ae:41:d4:ca:c4:b7:29:f0:
         6f:90:ea:67:2a:3c:ef:60:a4:45:57:f1:00:86:38:23:b0:17:
         57:c3:4f:c8:af:f4:12:0f:90:db:bb:40:8e:9d:8e:47:6e:15:
         95:35:0a:d7:ce:7c:e3:e2:74:c0:ed:00:f4:40:ce:10:39:35:
         e4:33:86:f0:93:ff:e4:51:4c:7c:a4:ea:15:47:f7:0f:e6:27:
         39:27:29:79:78:5e:24:f8:67:d4:d0:4f:25:08:cc:9e:a2:7c:
         3f:b9:bc:18:57:74:4f:ec:8f:1a:05:46:45:06:94:f5:c8:46:
         af:90:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:22 2026 by rpki-client