Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e36342e302f31392d3139203d3e203238303234.roa
File:                     3138362e322e36342e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          qW8rQoMpi2qKAi8rnvZL7ZoGIRuXTJ9BI7+mPkNyA4o=
Subject key identifier:   8C:05:9E:8E:FF:D8:D2:26:89:90:2F:B1:08:A0:2F:CE:6A:A2:13:A0
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       24053CE474F67072EBC23825341B558A71CA6AED
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e36342e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:05 +0000
ROA not before:           Tue 06 Jan 2026 18:56:05 +0000
ROA not after:            Tue 05 Jan 2027 19:01:05 +0000
asID:                     28024
IP address blocks:        186.2.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:05:3c:e4:74:f6:70:72:eb:c2:38:25:34:1b:55:8a:71:ca:6a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:05 2026 GMT
            Not After : Jan  5 19:01:05 2027 GMT
        Subject: CN=8C059E8EFFD8D22689902FB108A02FCE6AA213A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:10:bb:5f:ed:ee:b7:2b:ef:2b:e7:d9:4a:
                    53:08:d3:5a:89:fd:fe:15:71:ce:ca:3e:ab:13:8c:
                    60:ac:42:a4:3b:10:20:b3:db:4a:17:0f:96:66:20:
                    dd:9d:15:bb:86:92:6a:e0:10:94:6b:a5:5b:84:dc:
                    47:f0:40:4e:a4:11:d5:cc:dd:69:42:6c:27:8a:82:
                    5a:e6:cd:17:b8:20:41:c3:03:3e:c3:e9:c2:29:35:
                    b8:9b:c9:78:81:70:35:8c:12:93:ac:ba:1d:b3:cf:
                    1e:fc:78:35:0e:e3:7b:f9:f3:e0:7b:24:75:25:51:
                    46:4f:fc:c8:49:ba:2a:33:e1:fb:3c:e5:68:c7:82:
                    9c:87:da:8c:19:90:e7:b3:1f:15:22:13:77:7c:fe:
                    e5:8b:6f:e9:5b:87:b5:c6:3d:2c:ee:07:9f:f0:9f:
                    0c:d3:30:40:40:95:c5:c5:78:17:b6:dd:ee:2f:24:
                    5a:8e:46:5d:29:25:90:86:92:d8:7d:a3:12:f3:10:
                    28:0f:f0:d4:6b:28:00:9a:9a:bb:fe:2f:3e:19:20:
                    0d:4c:48:b6:cc:bb:91:5d:7c:b9:e1:75:97:31:aa:
                    c1:f5:4e:10:53:04:ff:ef:b7:dd:27:93:6b:f9:0d:
                    66:a5:21:b6:d3:97:52:74:f7:6a:53:f6:90:6e:50:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:9E:8E:FF:D8:D2:26:89:90:2F:B1:08:A0:2F:CE:6A:A2:13:A0
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e36342e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:11:44:60:2f:21:cd:26:98:3f:38:94:64:a8:2f:9d:a7:9a:
         6c:65:19:8f:7d:18:0a:bc:8c:bd:a7:75:db:78:3e:75:94:34:
         9c:60:b1:ec:94:70:35:68:b8:85:0d:ea:0d:88:c1:eb:d1:a9:
         b2:2b:65:f2:c8:55:64:c3:ff:8e:09:3e:aa:49:ad:91:84:94:
         72:b6:b0:54:37:3e:11:91:d8:6c:75:c1:96:a5:1d:a6:fe:58:
         8f:1d:63:73:d4:70:f0:fa:a7:ac:ee:a2:e9:08:44:29:17:93:
         b3:68:d6:93:bc:98:ec:4e:77:4a:5d:c5:b1:c4:b7:8e:31:b9:
         95:31:2f:9d:28:58:37:d0:87:43:b4:27:e8:61:6d:97:7a:1f:
         65:b4:6b:98:00:ec:07:54:b9:c2:fb:63:95:6c:f1:06:40:18:
         4b:48:ee:27:b4:41:2a:54:e2:ae:5a:6e:57:48:8d:c6:17:fc:
         05:bb:02:5c:00:e1:3b:87:f0:7c:46:2c:98:d8:c1:a8:2b:ea:
         05:48:16:b3:e2:7b:16:4c:2f:a6:0c:c0:80:2f:9c:bf:cf:0a:
         42:e5:bd:fe:8b:01:f5:48:21:10:76:25:a8:db:82:05:84:bb:
         5a:af:c6:58:31:51:1d:67:ae:2c:15:28:c4:cf:35:f9:4f:4a:
         cc:4f:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:58 2026 by rpki-client