Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132382e302f32342d3234203d3e203532323632.roa
File:                     3138362e322e3132382e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          ANPqFScWr6rLeO6Jw1jvClZzsjuCmdY62aFsEgS6ZIo=
Subject key identifier:   D6:64:49:2B:C1:AA:6E:93:9E:0E:2D:C7:1A:63:56:9D:08:B9:3F:9F
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       36C4DC4EA2DF3C7432E299A50ECE89E07B679BBB
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132382e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 03 Mar 2026 00:32:28 +0000
ROA not before:           Tue 03 Mar 2026 00:27:28 +0000
ROA not after:            Tue 02 Mar 2027 00:32:28 +0000
asID:                     52262
IP address blocks:        186.2.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Mar 2026 20:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c4:dc:4e:a2:df:3c:74:32:e2:99:a5:0e:ce:89:e0:7b:67:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Mar  3 00:27:28 2026 GMT
            Not After : Mar  2 00:32:28 2027 GMT
        Subject: CN=D664492BC1AA6E939E0E2DC71A63569D08B93F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:45:73:0d:53:3f:e6:21:a4:49:a8:19:6d:
                    3d:66:54:28:cf:ee:b7:8d:2b:78:c4:40:02:3a:7f:
                    c9:07:99:a2:83:86:0f:9e:5d:54:72:d8:dd:ed:0d:
                    70:41:53:04:b9:93:d5:72:9c:35:a5:dd:3e:15:ef:
                    af:7d:f8:22:72:be:57:36:e6:cf:3f:a9:c7:a0:1f:
                    e6:b5:33:9a:bb:78:e6:32:bd:b8:2d:b5:78:49:4c:
                    7d:73:14:74:ca:a0:c0:04:08:cd:27:dc:c8:1c:66:
                    97:8f:22:aa:52:18:68:ab:00:ff:1c:4c:e4:a4:30:
                    e5:3f:df:9c:03:aa:7f:3a:d8:c5:1e:49:f9:b1:d3:
                    fe:ba:a1:d7:4f:36:50:d9:12:cc:b4:11:48:1c:0e:
                    a4:1b:ba:69:25:40:d6:38:04:57:f7:52:02:43:bd:
                    e2:e3:f0:8f:5d:49:b5:df:4c:58:a8:79:26:b7:02:
                    9e:b3:d8:ef:4a:37:40:21:fa:75:f7:cd:3d:11:38:
                    13:97:c1:6b:e8:a9:f9:72:6c:08:87:9e:e8:5b:67:
                    b5:56:01:d3:25:a6:6e:b5:da:86:db:05:b7:69:c3:
                    d8:d5:6b:fc:1d:64:c1:76:d1:05:aa:df:79:3a:b5:
                    39:90:e8:63:16:b1:41:6d:50:b7:db:59:35:8d:47:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:64:49:2B:C1:AA:6E:93:9E:0E:2D:C7:1A:63:56:9D:08:B9:3F:9F
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132382e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:6f:46:46:0c:00:88:a6:9b:7c:c7:75:91:96:77:7b:78:
         24:fa:3b:93:3c:0c:c8:ca:43:10:6c:94:96:df:4a:2f:88:f6:
         05:fe:bd:f0:ed:5d:cf:47:0b:19:36:08:87:ac:5d:3d:24:9b:
         20:ed:83:5b:82:07:e0:d6:45:f7:8d:e6:11:20:9f:c3:4f:e8:
         59:f6:27:a8:2d:55:b9:aa:68:3d:e9:f1:c0:9c:2b:4b:0a:5c:
         2f:f1:f2:24:ca:53:8f:4b:fb:15:cd:13:e8:5a:52:75:9a:a8:
         e0:97:d6:fd:72:a2:02:c7:2a:95:b5:93:45:a7:d4:a8:d5:ad:
         5c:6d:92:1e:ed:fc:2b:d2:00:55:aa:a7:a5:68:73:b1:ea:7a:
         4e:3d:0c:d1:db:42:4e:a7:65:81:16:9a:78:96:0d:82:33:2b:
         3c:63:eb:29:43:33:1f:1a:4f:49:f5:e1:46:78:f1:46:b8:26:
         d1:84:25:0d:a5:bd:71:36:65:0e:ad:24:ac:9c:10:d1:d1:f2:
         12:1c:ed:f8:7d:d0:aa:e9:f2:a5:72:ad:a2:c0:61:50:8b:f3:
         d5:81:5d:61:0b:c7:76:46:f6:e7:c2:cc:12:38:61:39:75:42:
         2a:bd:3b:1d:a6:1f:cf:7c:f1:00:b9:bd:77:14:db:6b:45:82:
         3a:ba:b0:3f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNsTcTqLfPHQy4pmlDs6J4Htnm7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEyRTVBODFGRjYxNUQzNkVFNURGQTQyNzgyQ0NCN0Ux
RkQ1QkI2NjAeFw0yNjAzMDMwMDI3MjhaFw0yNzAzMDIwMDMyMjhaMDMxMTAvBgNV
BAMTKEQ2NjQ0OTJCQzFBQTZFOTM5RTBFMkRDNzFBNjM1NjlEMDhCOTNGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRB0VzDVM/5iGkSagZbT1mVCjP
7reNK3jEQAI6f8kHmaKDhg+eXVRy2N3tDXBBUwS5k9VynDWl3T4V7699+CJyvlc2
5s8/qcegH+a1M5q7eOYyvbgttXhJTH1zFHTKoMAECM0n3MgcZpePIqpSGGirAP8c
TOSkMOU/35wDqn862MUeSfmx0/66oddPNlDZEsy0EUgcDqQbumklQNY4BFf3UgJD
veLj8I9dSbXfTFioeSa3Ap6z2O9KN0Ah+nX3zT0ROBOXwWvoqflybAiHnuhbZ7VW
AdMlpm612obbBbdpw9jVa/wdZMF20QWq33k6tTmQ6GMWsUFtULfbWTWNRzhrAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1mRJK8GqbpOeDi3HGmNWnQi5P58wHwYDVR0j
BBgwFoAU4S5agf9hXTbuXfpCeCzLfh/Vu2YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTBGMDY0MzhBNkQyQ0I3RTc2RENDQUFCOTU1Q0FBNzVE
OTZEMzlEMUMzRUY0MEQ1NzYwQkQ3MDY5QUY2MzhGLzAvRTEyRTVBODFGRjYxNUQz
NkVFNURGQTQyNzgyQ0NCN0UxRkQ1QkI2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTJFNUE4MUZGNjE1RDM2RUU1
REZBNDI3ODJDQ0I3RTFGRDVCQjY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEwRjA2NDM4QTZEMkNCN0U3NkRDQ0FBQjk1NUNBQTc1RDk2RDM5RDFD
M0VGNDBENTc2MEJENzA2OUFGNjM4Ri8wLzMxMzgzNjJlMzIyZTMxMzIzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMjM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6AoAwDQYJ
KoZIhvcNAQELBQADggEBAJ/xb0ZGDACIppt8x3WRlnd7eCT6O5M8DMjKQxBslJbf
Si+I9gX+vfDtXc9HCxk2CIesXT0kmyDtg1uCB+DWRfeN5hEgn8NP6Fn2J6gtVbmq
aD3p8cCcK0sKXC/x8iTKU49L+xXNE+haUnWaqOCX1v1yogLHKpW1k0Wn1KjVrVxt
kh7t/CvSAFWqp6Voc7Hqek49DNHbQk6nZYEWmniWDYIzKzxj6ylDMx8aT0n14UZ4
8Ua4JtGEJQ2lvXE2ZQ6tJKycENHR8hIc7fh90Krp8qVyraLAYVCL89WBXWELx3ZG
9ufCzBI4YTl1Qiq9Ox2mH8988QC5vXcU22tFgjq6sD8=
-----END CERTIFICATE-----
Generated at Tue Mar 10 14:54:00 2026 by rpki-client