Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e36342e302f31392d3139203d3e203238303234.roa
File:                     3138362e32372e36342e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          eYMfoLzGOh8MJUAo7lnrg+uN82KMgK7FNVr/TwtGscM=
Subject key identifier:   C2:AD:1C:4B:E0:57:EE:12:EE:FE:E4:56:62:1E:F5:30:21:DC:9F:A2
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       24F86B29EB563A0709EE6643EB2E04898394EBCF
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e36342e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:10 +0000
ROA not before:           Tue 06 Jan 2026 18:56:10 +0000
ROA not after:            Tue 05 Jan 2027 19:01:10 +0000
asID:                     28024
IP address blocks:        186.27.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f8:6b:29:eb:56:3a:07:09:ee:66:43:eb:2e:04:89:83:94:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:10 2026 GMT
            Not After : Jan  5 19:01:10 2027 GMT
        Subject: CN=C2AD1C4BE057EE12EEFEE456621EF53021DC9FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:1d:76:2d:df:8f:33:27:90:fc:59:14:1a:
                    aa:03:e3:51:92:bc:8a:c2:e1:b5:31:8f:5b:5f:65:
                    3b:6f:c0:77:73:f7:fe:86:29:36:8f:19:31:3f:98:
                    cb:20:51:e4:bd:9e:fa:ab:97:ea:53:ac:96:3b:80:
                    22:45:bf:d8:71:c0:63:ab:69:66:de:58:00:30:29:
                    81:3f:f9:d9:f8:21:d4:96:2a:0b:da:f4:19:e0:28:
                    d6:0e:3a:61:22:ca:d6:db:19:4f:a4:a9:f0:a3:7e:
                    2d:4a:18:6b:49:74:28:b6:9c:11:55:66:1d:04:78:
                    f7:0c:12:83:f7:ae:4e:58:8b:02:06:b2:d4:08:da:
                    c5:17:f4:ca:bb:e3:83:c2:7e:a3:54:e1:06:26:d5:
                    30:36:12:2c:a1:a6:7e:c0:6b:af:04:60:95:fc:7a:
                    24:ec:fb:d2:62:77:01:49:fd:71:61:31:46:d7:b2:
                    20:17:b9:e1:c1:3e:17:b7:8e:0f:3a:d8:77:cc:3f:
                    0a:ab:25:07:ac:eb:64:67:2a:c3:10:bc:94:d4:be:
                    2b:42:1a:2f:98:bd:bf:d6:a2:91:d4:e1:a3:6a:c9:
                    1a:95:68:0e:5a:63:7f:ff:94:f8:ad:ee:0a:18:66:
                    94:a5:e9:ea:1c:cf:43:fc:24:c3:11:a7:87:41:45:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:1C:4B:E0:57:EE:12:EE:FE:E4:56:62:1E:F5:30:21:DC:9F:A2
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e36342e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:8b:d0:1b:e1:9d:66:0f:ac:86:c1:5d:5c:3d:8b:c2:d8:
         b8:22:5a:9a:23:6a:cc:87:64:28:fe:e4:d4:6b:c0:23:d9:ba:
         29:92:0f:a7:8c:f4:e6:15:f5:78:ba:e3:14:4c:79:8a:e1:93:
         8a:e4:f1:fd:1c:86:54:71:56:7d:df:31:8e:99:f0:47:c3:91:
         10:9c:ab:dd:a4:88:0f:0e:70:36:8f:01:cc:41:de:58:a0:10:
         d5:3e:ad:fc:c7:2b:81:14:fe:bb:83:01:0b:6c:fb:6a:28:3f:
         93:cc:a8:27:b1:65:53:83:6c:ea:ad:a5:97:9f:94:2b:e7:97:
         52:89:30:f3:63:f8:a2:6a:52:99:48:8d:1e:22:e8:20:ec:c2:
         6f:ea:c2:ad:78:a8:5d:4e:68:f8:86:fc:52:39:39:05:28:16:
         a3:e1:1d:c3:ac:77:0e:f8:b2:43:3e:92:74:ea:85:1f:7b:ae:
         cd:1a:49:93:f7:ec:9c:44:40:47:c0:93:bf:aa:5e:f1:9b:cf:
         65:e6:fb:d4:82:a9:eb:82:7a:5f:16:2b:87:d3:5d:38:f4:42:
         33:33:37:39:65:fa:82:29:09:df:81:da:f2:0a:ba:f3:be:7a:
         95:1a:02:5b:eb:86:47:c5:c1:6c:96:dc:76:9a:26:29:fd:f0:
         0d:f0:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:47 2026 by rpki-client