Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa
File:                     3138362e322e302e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          clh0a9tkimlzMK18JUsxaZJmQuJpNsIhnzVQUCWs1Ms=
Subject key identifier:   3F:0B:C1:F9:C2:D6:31:45:9C:A1:8B:A3:8D:7B:F7:0C:29:65:F2:8C
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       0BDA830A1AAD6FD2CCE7063DFCACE6FDE9B23A87
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:02 +0000
ROA not before:           Tue 06 Jan 2026 18:56:02 +0000
ROA not after:            Tue 05 Jan 2027 19:01:02 +0000
asID:                     28024
IP address blocks:        186.2.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:da:83:0a:1a:ad:6f:d2:cc:e7:06:3d:fc:ac:e6:fd:e9:b2:3a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:02 2026 GMT
            Not After : Jan  5 19:01:02 2027 GMT
        Subject: CN=3F0BC1F9C2D631459CA18BA38D7BF70C2965F28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:87:33:76:3e:85:ea:09:b3:b7:9e:50:5a:
                    9c:46:ea:3c:0e:2f:03:f6:05:31:2e:50:65:ee:3b:
                    0f:19:3a:57:92:7d:b2:25:62:07:46:cf:78:00:f9:
                    08:4e:a3:af:63:27:fe:48:e9:51:e9:d7:0b:a5:be:
                    5f:82:54:47:6f:84:a3:15:eb:f5:55:c3:73:f6:2b:
                    08:e1:da:c8:f8:5d:66:c7:ab:c3:fb:00:6e:a6:c2:
                    3a:0b:6f:9e:1b:2d:fb:de:bc:02:82:2e:e7:11:8f:
                    cd:3e:0c:e3:45:6c:23:56:2e:00:7d:59:cb:ac:55:
                    13:6c:4e:9d:34:73:45:83:4f:25:64:d1:85:16:c1:
                    f4:48:89:3b:f9:f2:43:a0:24:4e:fb:d4:6b:68:0e:
                    6c:e3:7c:0c:3d:f2:b2:c8:46:14:9f:94:0f:bc:c7:
                    11:82:fa:37:df:73:cb:c2:f9:fb:78:40:63:b2:70:
                    73:6f:b5:17:81:60:e8:1b:b7:4d:43:9d:f4:86:2b:
                    78:6d:ec:60:33:01:a0:8a:3e:b4:48:86:c0:9e:a9:
                    10:52:61:65:13:bc:4c:7b:73:60:67:f1:91:41:90:
                    e6:a3:5f:05:be:21:22:c3:96:8d:50:78:db:83:af:
                    cd:d3:1e:b2:42:9e:6d:4f:2b:15:60:18:5c:f6:98:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:C1:F9:C2:D6:31:45:9C:A1:8B:A3:8D:7B:F7:0C:29:65:F2:8C
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:eb:3d:fa:24:35:f1:2d:88:0f:21:5a:3f:74:47:01:2b:9f:
         ce:63:f3:e6:37:8e:87:44:c3:89:2e:fc:59:0b:f6:37:6c:06:
         66:aa:5c:9e:63:bb:28:88:69:18:9d:1d:94:92:78:dd:a1:77:
         47:80:b3:08:7f:b2:cd:52:39:67:32:d7:5c:af:81:40:e2:b1:
         be:22:97:eb:a5:c8:3e:8c:fc:08:68:e3:c8:c5:d4:aa:69:a6:
         37:6a:7d:98:c2:ea:37:e0:9c:45:92:e3:e0:3a:e7:54:a2:94:
         5d:f6:76:1f:9b:57:fd:23:5c:de:4b:5a:ae:f9:2f:39:dc:bd:
         b7:cb:40:81:61:54:d7:44:80:09:0e:91:91:44:86:8f:ca:7a:
         1a:1b:a6:d4:31:d7:67:75:cf:c8:ba:33:f0:71:6c:2f:f3:bd:
         4c:8a:fe:f5:90:c0:d7:19:08:bd:e6:da:2a:cd:bf:8d:4d:06:
         44:93:f1:79:9a:82:a3:0d:61:65:d3:30:10:75:02:16:50:b0:
         99:11:66:23:41:aa:de:bc:35:2b:aa:c1:9b:b2:0b:bf:05:cb:
         f2:2a:98:09:c1:8b:47:1b:5c:07:bb:28:52:f3:70:a1:d0:88:
         fb:52:ff:e9:6e:c3:9d:f7:b2:ea:a4:61:2b:5e:a3:6f:e4:6a:
         db:32:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:13 2026 by rpki-client