Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31382d3138203d3e203238303234.roa
File:                     3138362e32372e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          qTqswnoCgFXzQu/ufOnpFbDSxrr8ybjoBUu2fP8KBDo=
Subject key identifier:   CF:3F:FD:04:75:6B:EF:DB:3D:34:AB:46:80:0D:06:EF:69:3D:0D:EE
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       3801A64EF4175BFB8810E189761CEF747E404392
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:08 +0000
ROA not before:           Tue 06 Jan 2026 18:56:08 +0000
ROA not after:            Tue 05 Jan 2027 19:01:08 +0000
asID:                     28024
IP address blocks:        186.27.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:01:a6:4e:f4:17:5b:fb:88:10:e1:89:76:1c:ef:74:7e:40:43:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:08 2026 GMT
            Not After : Jan  5 19:01:08 2027 GMT
        Subject: CN=CF3FFD04756BEFDB3D34AB46800D06EF693D0DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:e8:6a:8f:5c:e4:b8:31:dc:f1:6c:2f:79:
                    28:96:f6:05:1d:ea:b3:04:8a:ca:41:66:a8:fb:2d:
                    bd:9a:96:0b:37:03:e5:d7:68:54:a5:1c:67:9e:45:
                    73:c3:9a:81:95:73:8c:02:f4:b0:5c:ea:c2:67:e1:
                    96:2a:d0:17:73:f6:b9:9a:f8:91:32:21:05:89:97:
                    d7:cc:5f:31:c6:d3:6a:e0:87:58:66:c2:2a:54:93:
                    7b:19:97:ea:c4:30:aa:5f:cc:a0:f2:12:7b:4d:e9:
                    5b:b9:0a:0b:c0:05:17:55:b4:89:91:4f:eb:c3:50:
                    89:db:75:2a:b3:e9:e4:45:c7:9c:78:42:28:e1:7f:
                    e2:48:82:13:34:d9:7b:ac:e7:6f:f3:de:4c:66:7e:
                    8e:b3:52:de:2a:1f:fa:27:ea:fa:df:32:6f:b6:15:
                    cb:3f:3f:a5:b3:85:b4:af:26:9b:53:e2:a2:c2:92:
                    0d:8d:38:df:2e:53:15:b1:98:c6:b6:40:8b:13:cb:
                    53:7a:ed:2c:b3:1e:f4:81:32:71:83:80:a8:7d:4c:
                    49:10:3f:88:69:28:54:70:ab:ac:d8:82:1e:f6:b8:
                    5b:cf:06:2d:26:5f:f4:e9:e2:b7:e3:dc:6b:46:bb:
                    37:66:31:51:9d:77:cd:ed:c1:63:81:1b:03:ef:dd:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3F:FD:04:75:6B:EF:DB:3D:34:AB:46:80:0D:06:EF:69:3D:0D:EE
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:0b:c2:0a:5b:8f:27:62:70:14:f6:5c:39:8d:10:3f:eb:
         2b:a4:d8:81:57:65:d4:19:63:02:6e:e1:0a:65:53:74:e7:e5:
         23:79:69:19:91:b0:9b:bf:56:5d:b7:5f:c3:f5:86:b4:0a:90:
         e0:cb:82:6b:46:05:58:29:e7:3f:0f:6d:be:8f:4a:bd:7b:59:
         1c:3f:ff:f0:7d:c6:6a:a1:ba:15:37:e4:f4:6c:59:28:d8:73:
         83:6c:ba:b1:b2:65:35:e4:4a:8c:23:91:c4:b1:fa:91:57:fe:
         17:b3:f7:d7:34:b1:d9:af:e0:98:f2:1d:d1:03:52:bf:a8:0f:
         87:b5:95:5c:f4:7e:11:a1:7e:00:22:21:44:95:d6:1b:77:14:
         80:a9:5b:32:03:eb:7e:28:ba:70:a7:bd:ef:b7:a2:5f:a5:74:
         87:7b:b8:26:0f:ed:16:6d:82:37:43:ec:09:70:fa:37:a4:31:
         c6:d3:75:65:13:4f:19:fe:0e:66:c5:c4:7a:50:07:b2:29:87:
         ec:12:7c:67:5d:02:01:66:5e:11:7b:d1:cc:f1:eb:49:70:e6:
         48:01:7e:d3:7b:03:b0:3c:95:b5:65:e9:4a:9f:22:ef:e4:84:
         59:1a:e2:cb:41:2e:7c:c6:89:bd:16:b0:41:e4:bf:48:7c:ea:
         cd:69:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:05 2026 by rpki-client