Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e39362e302f31392d3139203d3e203238303234.roa
File:                     3138362e32372e39362e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          b1gnqDfTZlRvhc6ePsBrfBtuxk13NEtPJGQW0TUAS30=
Subject key identifier:   11:84:03:25:A1:40:8B:F5:CD:8C:52:87:5F:02:E5:00:92:0D:FA:8B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       7DA79359239ABF374B2C9D566CC90E5F713347CE
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e39362e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:00:59 +0000
ROA not before:           Tue 06 Jan 2026 18:55:59 +0000
ROA not after:            Tue 05 Jan 2027 19:00:59 +0000
asID:                     28024
IP address blocks:        186.27.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a7:93:59:23:9a:bf:37:4b:2c:9d:56:6c:c9:0e:5f:71:33:47:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:55:59 2026 GMT
            Not After : Jan  5 19:00:59 2027 GMT
        Subject: CN=11840325A1408BF5CD8C52875F02E500920DFA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:ae:3d:a4:0a:b2:82:7d:f5:69:9d:86:93:
                    c7:fe:68:f6:71:ee:0c:c9:f2:7f:a0:84:0f:b0:52:
                    88:03:f2:52:80:fa:ac:7a:85:c4:f5:45:b2:5f:2d:
                    9b:0b:65:96:1b:02:1c:bc:11:20:c1:d7:cb:6a:34:
                    17:41:96:96:b8:c4:98:42:94:41:46:56:9e:88:b3:
                    2b:7f:13:05:8b:cd:17:98:19:77:c7:42:0b:32:81:
                    00:f6:98:7a:ee:3d:8d:56:bd:63:7a:b5:e9:1c:8f:
                    c7:55:0d:af:fa:05:02:70:8c:34:44:02:ea:72:75:
                    8d:9a:e8:9e:23:84:bd:d5:c8:7d:2c:69:f4:53:dd:
                    28:ba:3d:09:ca:04:da:4f:ce:b2:c6:de:ce:05:cd:
                    27:d3:99:ce:8d:06:e4:5e:54:4a:bc:f4:7f:8c:d4:
                    16:87:ba:7b:55:5d:ca:9b:7e:a1:b0:a8:3f:9c:7a:
                    5a:f4:87:8c:18:6e:d9:1d:9f:34:31:29:7f:c3:46:
                    ea:de:29:01:5b:db:2b:56:17:53:fb:e1:87:ec:79:
                    e7:17:4b:a6:44:e4:70:c8:b9:d0:f2:e9:9b:e3:46:
                    d4:ec:08:8f:8e:da:63:fe:ed:d3:8e:5c:77:a3:83:
                    32:cb:c1:cf:74:3d:aa:7b:84:49:87:d5:11:34:84:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:03:25:A1:40:8B:F5:CD:8C:52:87:5F:02:E5:00:92:0D:FA:8B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e32372e39362e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:3d:58:06:11:f1:78:8c:15:5c:c5:ec:6d:1a:64:e5:b1:9b:
         81:67:db:f7:77:95:a9:4e:4c:f8:b7:c5:f4:82:f2:31:d8:24:
         64:ee:86:c4:21:89:75:dd:a7:08:30:8b:88:81:f9:b7:70:d7:
         45:01:10:92:77:ab:14:1f:5f:e3:a7:f9:89:ff:af:23:3d:1f:
         ed:3d:ea:d6:47:fc:e0:be:27:42:1e:a0:bc:93:b4:56:b6:58:
         ff:ae:d4:d5:5a:a9:5b:46:2b:59:a1:ed:08:b6:79:87:e2:a4:
         ff:76:bc:a8:56:3c:d6:c9:70:ba:d8:c8:f0:b2:c2:ee:a6:88:
         71:88:2f:25:26:05:f9:a4:b4:f9:c6:08:47:9d:25:e2:54:b2:
         93:91:f7:79:95:f0:84:9f:94:d2:26:72:09:f3:3b:4b:bf:e5:
         a2:5d:7a:90:ce:9b:4b:69:c7:66:8b:83:bd:9f:e7:1f:8e:65:
         3c:14:2b:fb:b3:e8:20:ae:11:dc:ed:c1:f2:85:a6:cc:55:19:
         10:6c:db:13:3a:0d:df:a9:b3:3e:81:47:fe:ce:d9:8b:4f:b0:
         5b:dc:6e:ba:7a:88:41:ac:3c:0f:46:56:d2:f6:33:b0:3b:49:
         c0:98:95:cd:e5:1b:8b:fa:4a:12:ff:f6:98:41:59:ad:b1:c8:
         5a:c8:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:35 2026 by rpki-client