Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa
File:                     3138362e302e3135322e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          YwI90aPpa+CMAd84VBlGI4Odw16HuhSKmMd/4YX6pmg=
Subject key identifier:   92:7A:97:D2:69:05:0F:9F:9B:D5:5F:B6:DA:76:5C:C8:84:B0:D9:0D
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       4CEB9AE5DF6D58F27ABF8FACDCD6E4FCA053740F
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa
Signing time:             Mon 31 Aug 2026 19:33:06 +0000
ROA not before:           Mon 31 Aug 2026 19:28:06 +0000
ROA not after:            Mon 30 Aug 2027 19:33:06 +0000
asID:                     3356
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 10:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:eb:9a:e5:df:6d:58:f2:7a:bf:8f:ac:dc:d6:e4:fc:a0:53:74:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Aug 31 19:28:06 2026 GMT
            Not After : Aug 30 19:33:06 2027 GMT
        Subject: CN=927A97D269050F9F9BD55FB6DA765CC884B0D90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:30:ac:46:dd:ea:21:cf:b9:53:17:df:49:
                    6b:42:30:b8:22:b5:23:2b:0c:75:92:ad:c7:47:fa:
                    76:54:42:c3:cd:ec:d9:11:30:47:29:3d:b2:cc:2f:
                    5b:b4:d2:59:01:31:7b:27:24:bb:d8:d7:32:ba:2b:
                    43:8f:72:e8:73:1e:71:fb:c6:72:29:5f:3c:42:92:
                    67:a8:d3:cd:9b:a8:0b:b8:da:ee:39:ac:03:a9:7b:
                    ad:c4:5b:a1:c1:ee:27:63:57:c3:3b:35:45:cb:f0:
                    38:ed:78:4d:4d:9a:84:86:f0:94:f1:05:d1:35:ef:
                    f0:bf:e2:37:33:27:84:6a:91:ee:c6:41:5f:68:29:
                    8e:bc:dc:d8:9a:09:42:a7:66:70:94:78:14:83:c4:
                    c4:65:3e:2f:73:d1:12:c6:b6:63:63:cd:a5:15:5b:
                    16:a1:48:31:15:4a:ff:ac:ca:26:6b:fc:ea:2f:18:
                    c6:9c:e2:3c:56:a3:57:47:e4:c6:53:ee:25:b3:9f:
                    88:5b:06:ee:79:15:cc:62:b9:4d:58:5e:81:97:04:
                    a7:b5:06:56:d4:dc:90:6e:92:c1:a2:23:e6:44:31:
                    a8:2f:2b:45:d4:1d:e4:83:3a:5b:b7:6c:5f:45:b4:
                    b2:1e:0b:de:36:df:ae:3c:6a:69:ce:69:b9:81:5d:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7A:97:D2:69:05:0F:9F:9B:D5:5F:B6:DA:76:5C:C8:84:B0:D9:0D
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:77:df:6e:5e:3e:cf:8f:02:07:5c:25:3a:5e:21:13:24:
         4e:c2:cd:ab:7e:24:e6:81:fb:6e:26:42:fd:12:17:ae:13:d7:
         c2:32:c6:c1:45:1b:40:b7:14:b4:36:a7:00:af:98:93:5d:5a:
         3b:67:f0:54:23:89:25:35:fb:2a:f9:cc:7b:83:48:0b:de:e8:
         6d:58:20:b3:e3:d6:37:82:bf:72:62:b6:15:a7:92:21:65:4d:
         48:b2:b2:1a:9f:51:d0:7b:92:b6:1e:31:4d:24:c3:e6:6d:2f:
         e7:65:23:22:ed:8c:e6:5e:26:88:7b:7e:85:1a:28:84:ed:41:
         87:de:ce:30:a7:10:2e:15:ca:6d:11:69:b9:a7:e1:a8:4b:62:
         ab:28:78:4a:ed:8f:b2:d2:37:98:71:79:e0:de:c4:49:37:13:
         ae:23:c3:43:05:ce:73:9e:69:a7:d6:9b:be:7b:1c:e9:68:30:
         7c:53:0a:c0:81:ba:38:24:2e:93:29:4c:90:35:c7:3d:1e:b1:
         93:42:0e:99:c4:20:84:9f:35:ef:b0:1d:94:fe:cd:b1:2d:fe:
         13:41:23:54:b9:fb:12:8f:e0:74:a4:52:46:36:1b:d4:db:46:
         f4:84:2c:35:67:b8:2d:e2:4f:be:77:d0:ea:fe:54:f9:30:9c:
         e5:e1:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:48:07 2026 by rpki-client