Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3138362e3230392e39322e302f32322d3234203d3e20323635353233.roa
File:                     3138362e3230392e39322e302f32322d3234203d3e20323635353233.roa (raw, json)
Hash identifier:          TW22PC9F2NKpRuXM+9/pp6Bg1qfm7bdc9I/Nv7C2fd4=
Subject key identifier:   38:C9:D8:F9:BF:91:52:77:36:E7:5C:D5:B6:1F:5A:B1:23:A8:E8:FE
Certificate issuer:       /CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
Certificate serial:       23C9061E8249D14ABAC8F183B3735CC564EA6A68
Authority key identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3138362e3230392e39322e302f32322d3234203d3e20323635353233.roa
Signing time:             Thu 05 Mar 2026 17:25:00 +0000
ROA not before:           Thu 05 Mar 2026 17:20:00 +0000
ROA not after:            Thu 04 Mar 2027 17:25:00 +0000
asID:                     265523
IP address blocks:        186.209.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Mar 2026 20:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:06:1e:82:49:d1:4a:ba:c8:f1:83:b3:73:5c:c5:64:ea:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
        Validity
            Not Before: Mar  5 17:20:00 2026 GMT
            Not After : Mar  4 17:25:00 2027 GMT
        Subject: CN=38C9D8F9BF91527736E75CD5B61F5AB123A8E8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:60:ee:27:d1:b1:45:f6:4b:68:c5:b7:b7:
                    92:b3:8b:66:0d:41:fd:81:6f:25:9e:24:dd:ff:3b:
                    fe:04:31:1c:22:f7:ad:49:64:d1:56:05:14:9a:d9:
                    13:6f:6e:76:7c:3b:a3:13:e8:8f:3e:3d:44:0b:6b:
                    da:b2:89:fb:d1:cb:c8:a3:a8:5b:d4:15:eb:7e:3b:
                    73:4e:2d:c2:89:70:31:0d:d8:c9:e6:7a:6d:2b:c9:
                    80:b8:f2:38:75:52:40:57:cc:64:b9:25:52:bd:01:
                    56:3c:d1:5f:05:02:02:25:ba:27:23:95:2f:d7:d7:
                    2d:54:61:d1:a6:0f:69:cc:30:03:41:31:33:19:a6:
                    c1:cb:c2:f5:86:ea:df:b6:0c:fb:2a:da:e0:67:07:
                    dd:47:47:40:ac:6a:b5:cf:d1:ab:b7:cc:81:a5:f6:
                    1e:c9:61:35:f5:f9:83:84:a4:19:0c:40:01:5b:b7:
                    d7:ae:6f:39:98:56:fe:c6:48:5c:fa:c9:27:02:0a:
                    f2:cc:44:0d:02:c1:71:a8:19:db:45:cc:3e:4b:15:
                    d5:3a:f8:7a:8d:84:ca:67:96:c9:05:81:1f:f1:2b:
                    4a:df:67:3c:13:d6:ba:99:61:11:7b:29:ec:a5:69:
                    de:56:a3:07:8a:2c:4d:92:ff:7d:e0:02:25:e5:b6:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C9:D8:F9:BF:91:52:77:36:E7:5C:D5:B6:1F:5A:B1:23:A8:E8:FE
            X509v3 Authority Key Identifier:
                keyid:40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3138362e3230392e39322e302f32322d3234203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:14:3d:ac:c2:5d:12:36:23:bd:99:6b:35:89:24:83:40:4b:
         b9:c4:c2:91:5d:cd:87:ba:f5:6d:86:09:36:a4:13:cf:82:30:
         27:6e:ea:3a:89:cb:1b:fb:74:9d:f6:bb:bc:c5:a5:11:36:b5:
         fd:df:cf:a8:7f:00:64:9a:62:0f:28:91:41:d8:0e:14:9e:be:
         02:96:19:c2:d9:64:b5:56:46:bc:57:2f:80:be:6c:a8:7a:d6:
         83:13:c3:5c:78:62:f0:f9:53:aa:7e:72:b3:8a:8e:05:71:63:
         6f:18:ef:70:48:01:4a:98:17:ee:28:d5:cf:df:9c:1f:cd:be:
         12:60:db:b8:00:b5:0e:17:3f:8c:2b:d2:d0:38:43:d4:0b:a9:
         b4:fd:d9:1c:ec:2f:10:6a:da:dd:ad:bc:27:50:ba:5e:1e:71:
         d2:01:de:88:74:ac:80:7a:85:71:e8:8b:71:47:f3:9e:9c:cf:
         37:33:c1:45:ac:90:c9:9c:d7:74:c7:5c:d3:25:ac:b9:14:f0:
         3b:0a:6b:71:fd:93:c8:77:15:76:42:d2:55:c0:d4:8b:90:8b:
         90:31:36:df:c0:07:32:de:2f:a5:ba:b1:59:21:8a:e8:e1:28:
         0b:20:6f:4c:e6:ca:32:d6:0d:fd:8d:7e:15:f3:9b:02:c9:e9:
         37:d1:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:47:12 2026 by rpki-client