Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa
File:                     3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa (raw, json)
Hash identifier:          g3X8/dkGbIraRWxiiCr4snXfCPavWbs/lwkzXRCh8DM=
Subject key identifier:   E9:45:52:6F:C0:A4:D0:00:33:F0:7A:8D:E0:79:4F:64:47:77:3F:20
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       65932C813909154BC8DF5643FD6B71D2EE3BC12C
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa
Signing time:             Mon 02 Feb 2026 02:28:49 +0000
ROA not before:           Mon 02 Feb 2026 02:23:49 +0000
ROA not after:            Mon 01 Feb 2027 02:28:49 +0000
asID:                     64123
IP address blocks:        186.148.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:93:2c:81:39:09:15:4b:c8:df:56:43:fd:6b:71:d2:ee:3b:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Feb  2 02:23:49 2026 GMT
            Not After : Feb  1 02:28:49 2027 GMT
        Subject: CN=E945526FC0A4D00033F07A8DE0794F6447773F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:6e:6b:66:14:26:97:9b:a7:ce:58:4f:32:
                    08:91:2e:86:3d:d9:9f:58:ed:19:cc:57:32:04:14:
                    4e:15:db:ab:8f:69:ee:fd:59:00:82:6b:bb:d0:c7:
                    c9:d1:ba:5c:29:7f:5c:c7:1c:86:98:fa:7c:2d:35:
                    65:70:b2:b7:88:ca:3c:a8:4f:89:d3:9f:cc:8e:53:
                    c8:96:5e:87:de:d2:dc:f2:9f:2b:5d:3d:38:f2:54:
                    02:b3:36:c0:38:64:4f:f9:bf:85:18:6a:ea:0b:5f:
                    08:9d:d4:28:a4:39:23:ed:05:89:b3:62:54:5b:df:
                    09:b1:0f:1b:09:ce:63:bd:cf:79:b0:35:92:5c:d5:
                    66:42:99:0a:2f:49:14:bd:34:74:2d:7a:46:42:04:
                    40:45:91:09:13:e0:f5:b6:bc:37:1b:26:41:ea:7d:
                    d2:2a:05:82:19:fc:a2:2b:f1:10:12:06:e1:e1:65:
                    00:a4:53:82:27:5d:10:bb:d5:f7:16:8b:06:03:be:
                    29:26:98:e6:7f:36:5d:69:5e:04:4f:47:a4:54:a0:
                    e4:18:77:f9:7f:5f:40:5c:6b:ba:c9:94:c9:85:ea:
                    0a:3e:69:92:b5:68:8c:70:02:d9:cf:b0:d7:d2:dc:
                    3a:fe:a1:40:b4:29:9e:3f:14:e9:63:47:dc:d3:f7:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:45:52:6F:C0:A4:D0:00:33:F0:7A:8D:E0:79:4F:64:47:77:3F:20
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232372e302f32342d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:53:3b:41:c6:72:3b:a7:cc:e7:36:d6:32:32:2d:5e:82:d6:
         32:3e:97:0f:c0:e4:9a:9c:5d:b7:9a:55:9c:20:e1:e1:37:a3:
         21:26:a3:c4:da:29:72:61:8f:98:03:27:90:c1:2b:e7:be:f5:
         e0:d2:44:b6:19:f8:2f:00:a1:20:f5:02:f3:43:fa:e3:e7:fe:
         d2:e1:c0:5e:54:18:cf:58:0e:43:16:cb:d9:08:cb:4b:6c:92:
         e8:60:2d:d3:b6:a6:6f:8c:f1:28:0a:0a:83:31:87:79:4f:b0:
         2c:d1:1e:1f:a1:cb:c3:c5:b2:3a:5a:9b:c3:94:13:95:43:8f:
         46:3b:8f:cd:fe:86:4b:ac:a6:6d:4b:36:a1:90:de:28:56:d6:
         0a:2e:5c:7b:55:b5:f3:1c:51:40:2f:f8:78:86:4a:d5:18:e0:
         c8:7b:17:1c:91:3f:d7:bd:63:15:fb:73:5b:a0:16:3b:18:c2:
         d4:d2:d2:7a:4d:73:db:ec:87:c0:16:f1:80:a6:60:9a:c3:92:
         2a:2f:41:99:b4:e3:51:81:fa:cb:c8:4e:f8:de:12:c5:91:7f:
         f7:cf:76:2d:45:dd:88:7c:0c:0e:bc:32:60:bf:c1:bc:14:ff:
         89:d6:fd:64:b2:da:32:2f:48:49:0e:5a:c7:49:f7:75:53:d4:
         86:d6:22:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:44:55 2026 by rpki-client