Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3138362e352e3232382e302f32322d3234203d3e203532333732.roa
File:                     3138362e352e3232382e302f32322d3234203d3e203532333732.roa (raw, json)
Hash identifier:          zSpSccZkfTfvAn9O6SW+vGOnBrHj66MN5BeP/OmDMtY=
Subject key identifier:   DC:B1:C6:80:12:FB:51:B7:D3:74:67:95:A3:70:F7:D5:68:98:21:DE
Certificate issuer:       /CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
Certificate serial:       753B72CE7B8C2DC7280FBFE3FD2F264164E3678A
Authority key identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3138362e352e3232382e302f32322d3234203d3e203532333732.roa
Signing time:             Wed 27 May 2026 15:44:22 +0000
ROA not before:           Wed 27 May 2026 15:39:22 +0000
ROA not after:            Wed 26 May 2027 15:44:22 +0000
asID:                     52372
IP address blocks:        186.5.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3b:72:ce:7b:8c:2d:c7:28:0f:bf:e3:fd:2f:26:41:64:e3:67:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
        Validity
            Not Before: May 27 15:39:22 2026 GMT
            Not After : May 26 15:44:22 2027 GMT
        Subject: CN=DCB1C68012FB51B7D3746795A370F7D5689821DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:b3:4f:69:a2:66:3e:50:d7:41:0d:7e:d9:
                    84:a9:16:5a:45:e8:9c:01:16:98:cf:59:2c:7b:41:
                    75:13:35:94:c3:df:8a:e5:5a:22:92:d2:00:74:42:
                    34:ab:fc:84:b3:50:42:ee:98:9c:1c:8f:6c:a9:8a:
                    bb:7e:d7:ac:b9:97:14:fb:55:dc:ea:ec:71:18:c4:
                    ce:3d:9e:23:b6:d8:e3:db:26:83:a9:5b:80:be:f5:
                    92:f8:15:bd:60:ff:d9:aa:09:46:f5:86:f0:d8:1b:
                    ca:e3:4e:7d:82:81:d6:9c:6b:c9:46:3c:7e:4f:a9:
                    b5:94:a3:40:be:cd:1d:5c:d9:c9:68:cb:a3:9c:3e:
                    fd:f1:62:f6:a9:ef:73:e9:92:45:9b:fc:be:3f:f6:
                    8f:ef:de:73:ec:2d:86:32:de:b5:db:9b:1c:c4:43:
                    83:fb:a4:63:7e:8e:05:2e:18:8f:d0:ee:62:2f:99:
                    3f:94:fb:f1:a7:35:75:c3:05:bd:20:d1:0a:ba:d4:
                    4b:6c:e2:f8:32:8f:63:f0:f0:3f:bc:68:88:d2:6c:
                    39:b2:1f:db:88:f2:ef:f1:fa:03:cc:36:75:8a:78:
                    4e:7d:e3:3d:ad:92:cb:10:c1:c9:5f:9c:7b:6c:89:
                    0e:a3:ee:34:bd:94:27:63:5d:fc:42:ec:95:13:5e:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:C6:80:12:FB:51:B7:D3:74:67:95:A3:70:F7:D5:68:98:21:DE
            X509v3 Authority Key Identifier:
                keyid:66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3138362e352e3232382e302f32322d3234203d3e203532333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:b0:30:c6:22:e1:7b:8d:70:48:33:8a:9e:4e:e3:9f:e7:dd:
         51:44:38:1f:0d:f2:26:02:ce:99:15:05:a9:37:37:ea:05:09:
         2d:17:97:b9:d6:0f:5a:39:0e:0d:1b:6b:e8:8d:5e:02:c2:49:
         da:87:c0:58:16:0a:2d:93:39:a4:4d:68:f8:c2:74:e5:19:13:
         4c:5e:37:28:e3:4f:d2:a8:05:fb:71:93:0a:d2:0a:5a:46:d2:
         de:f6:14:47:4d:56:b8:82:32:c0:92:0d:35:98:9c:ee:30:24:
         5a:15:30:f9:77:72:0f:bb:6f:8c:41:ec:c8:4c:0e:50:8d:ac:
         1a:64:13:3b:13:e5:ff:90:7d:6f:09:5e:30:c4:30:3e:28:8f:
         69:55:16:5f:d7:fd:61:aa:31:14:f4:99:47:7d:57:20:1b:24:
         79:c8:6b:76:15:15:43:03:76:01:e8:fa:2d:3b:b2:b6:64:0e:
         f1:fa:79:6b:85:88:2e:2f:48:46:d7:9b:d1:d6:1f:c1:d1:9c:
         ed:02:43:f6:9f:f3:ff:f8:4d:c6:e6:01:dd:ff:90:db:a9:1e:
         98:b2:ea:f6:23:b1:8c:fd:fa:88:56:28:39:87:be:eb:49:c0:
         2a:34:45:b4:10:c1:87:ef:ba:83:df:dc:81:92:67:9a:c3:fc:
         94:68:8b:0c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdTtyznuMLccoD7/j/S8mQWTjZ4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1QjYyQjBEMEYxRDA1OEE2OUIzMEVERkRENTBCODA4
QTNBOTFFRTAeFw0yNjA1MjcxNTM5MjJaFw0yNzA1MjYxNTQ0MjJaMDMxMTAvBgNV
BAMTKERDQjFDNjgwMTJGQjUxQjdEMzc0Njc5NUEzNzBGN0Q1Njg5ODIxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXbNPaaJmPlDXQQ1+2YSpFlpF
6JwBFpjPWSx7QXUTNZTD34rlWiKS0gB0QjSr/ISzUELumJwcj2ypirt+16y5lxT7
Vdzq7HEYxM49niO22OPbJoOpW4C+9ZL4Fb1g/9mqCUb1hvDYG8rjTn2Cgdaca8lG
PH5PqbWUo0C+zR1c2cloy6OcPv3xYvap73PpkkWb/L4/9o/v3nPsLYYy3rXbmxzE
Q4P7pGN+jgUuGI/Q7mIvmT+U+/GnNXXDBb0g0Qq61Ets4vgyj2Pw8D+8aIjSbDmy
H9uI8u/x+gPMNnWKeE594z2tkssQwclfnHtsiQ6j7jS9lCdjXfxC7JUTXmjLAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3LHGgBL7UbfTdGeVo3D31WiYId4wHwYDVR0j
BBgwFoAUZltisNDx0FimmzDt/dULgIo6ke4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QzVBN0Q1Q0ZBNTlGNTJFNjY1OURGRjEzNzYzMEQyMEU2
REQ1NDdGNzE1RTVDMDRBNEQyM0U0OTJDMjA0MjEyLzAvNjY1QjYyQjBEMEYxRDA1
OEE2OUIzMEVERkRENTBCODA4QTNBOTFFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjVCNjJCMEQwRjFEMDU4QTY5
QjMwRURGREQ1MEI4MDhBM0E5MUVFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEM1QTdENUNGQTU5RjUyRTY2NTlERkYxMzc2MzBEMjBFNkRENTQ3Rjcx
NUU1QzA0QTREMjNFNDkyQzIwNDIxMi8wLzMxMzgzNjJlMzUyZTMyMzIzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzMzM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6BeQwDQYJ
KoZIhvcNAQELBQADggEBAM6wMMYi4XuNcEgzip5O45/n3VFEOB8N8iYCzpkVBak3
N+oFCS0Xl7nWD1o5Dg0ba+iNXgLCSdqHwFgWCi2TOaRNaPjCdOUZE0xeNyjjT9Ko
BftxkwrSClpG0t72FEdNVriCMsCSDTWYnO4wJFoVMPl3cg+7b4xB7MhMDlCNrBpk
EzsT5f+QfW8JXjDEMD4oj2lVFl/X/WGqMRT0mUd9VyAbJHnIa3YVFUMDdgHo+i07
srZkDvH6eWuFiC4vSEbXm9HWH8HRnO0CQ/af8//4TcbmAd3/kNupHpiy6vYjsYz9
+ohWKDmHvutJwCo0RbQQwYfvuoPf3IGSZ5rD/JRoiww=
-----END CERTIFICATE-----
Generated at Sat May 30 00:10:05 2026 by rpki-client