Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31372d3137203d3e203238303234.roa
File:                     3138362e322e302e302f31372d3137203d3e203238303234.roa (raw, json)
Hash identifier:          eHK7ykVpEnFBXXV6FUjKeLO68v22g4yeVyVmtX5E914=
Subject key identifier:   A0:D6:48:63:92:EE:3F:53:6A:F4:79:65:74:69:3B:EC:16:4A:62:CA
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       504DA02B0F7E16D2E6BA8AC6041C28E04D7A7AAB
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31372d3137203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:00:59 +0000
ROA not before:           Tue 06 Jan 2026 18:55:59 +0000
ROA not after:            Tue 05 Jan 2027 19:00:59 +0000
asID:                     28024
IP address blocks:        186.2.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4d:a0:2b:0f:7e:16:d2:e6:ba:8a:c6:04:1c:28:e0:4d:7a:7a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:55:59 2026 GMT
            Not After : Jan  5 19:00:59 2027 GMT
        Subject: CN=A0D6486392EE3F536AF4796574693BEC164A62CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:3b:a8:e9:fc:5e:e6:31:96:4c:c2:78:22:
                    d6:3d:3d:f1:43:5e:0a:04:67:be:78:35:22:22:aa:
                    78:96:a1:ae:d1:5f:64:60:ef:15:d3:40:8d:df:a9:
                    5e:25:6c:1f:0e:80:9c:d7:4b:27:30:92:15:ca:cf:
                    33:b5:86:cf:7b:bf:7a:6d:8a:9a:32:ac:98:03:57:
                    cf:39:e0:20:fc:db:0f:ef:ca:e4:fc:56:10:eb:f4:
                    e4:cf:92:06:83:d6:1f:fc:b0:44:5e:5c:4f:41:fa:
                    0f:fe:e5:21:bd:ee:e2:45:56:1c:0b:e3:a6:d9:91:
                    50:d9:97:25:9c:16:dc:da:95:48:90:05:30:4f:21:
                    69:47:95:f7:61:5c:38:fb:e9:ce:fa:c1:01:49:8c:
                    82:2d:c8:92:06:0e:b0:e7:c4:af:18:a3:2a:2c:f9:
                    2a:31:71:20:6a:c5:d5:85:10:1d:c6:c8:d4:1c:9c:
                    b8:52:83:5e:61:bb:7a:20:a6:b4:45:fb:19:8b:58:
                    06:b6:eb:2b:5f:a0:b8:5b:03:15:ee:a8:06:49:ec:
                    31:f5:1c:da:88:99:26:11:4e:8f:5c:e4:9c:fb:20:
                    5c:20:27:ee:a4:85:fc:27:18:35:97:7f:e7:58:03:
                    82:9a:f1:b2:0a:ac:16:01:ad:f8:dd:80:bd:b5:11:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:48:63:92:EE:3F:53:6A:F4:79:65:74:69:3B:EC:16:4A:62:CA
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31372d3137203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:9c:a5:59:cc:b1:b4:2a:4e:7a:f2:30:2e:e8:6f:5f:83:
         03:23:2b:46:d6:2a:c6:18:91:6a:43:2c:a5:d9:93:c8:7c:48:
         18:76:80:51:6b:99:e5:64:8e:3f:9a:6d:64:9d:08:5e:f3:4c:
         db:89:cb:b9:bc:d2:f8:7a:9d:29:b3:88:d2:8e:7f:ed:af:dc:
         f8:20:31:c2:80:a3:5e:00:ae:ec:ec:65:e1:14:af:53:0b:38:
         7b:35:10:f9:75:0f:b1:bd:7f:c3:77:47:e9:98:ba:e0:f9:12:
         25:38:c8:a6:c4:46:49:41:42:73:2f:00:7a:9d:ca:8b:d9:6a:
         8d:e3:8e:8d:dd:79:f7:5c:5d:34:f7:f9:3f:9d:cd:ca:24:56:
         97:ae:98:8e:b4:f3:90:e6:cb:48:57:03:fb:65:3f:6a:37:75:
         a7:b0:04:c2:97:e2:92:87:c8:04:23:4a:33:e4:db:cb:5d:0b:
         1e:bf:ac:ca:87:f9:38:ab:9e:8c:4a:f9:34:23:05:77:7a:22:
         15:fa:67:34:85:27:e4:50:ca:1e:d5:71:de:9a:01:46:47:cc:
         f9:27:02:e9:7e:f4:71:11:87:c2:68:86:5f:56:13:18:8f:60:
         c8:1d:76:f2:5a:14:a6:ac:3d:af:00:26:c6:c3:67:21:21:bc:
         f2:75:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:15 2026 by rpki-client