Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3135302e302f32342d3234203d3e20323633373835.roa
File:                     3138362e31352e3135302e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          JVYFJvx0FdPhKQSUEr63J1z/y1WPYFcbuxF+VsbkWOk=
Subject key identifier:   8D:43:00:CE:0B:11:1A:75:DB:3F:5D:6B:EA:10:08:42:0A:C6:F1:5A
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       21C2D2E2FB373E25BC6FD7CAC4DBFEFF64F00553
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3135302e302f32342d3234203d3e20323633373835.roa
Signing time:             Fri 05 Jun 2026 22:46:46 +0000
ROA not before:           Fri 05 Jun 2026 22:41:46 +0000
ROA not after:            Fri 04 Jun 2027 22:46:46 +0000
asID:                     263785
IP address blocks:        186.15.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:d2:e2:fb:37:3e:25:bc:6f:d7:ca:c4:db:fe:ff:64:f0:05:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Jun  5 22:41:46 2026 GMT
            Not After : Jun  4 22:46:46 2027 GMT
        Subject: CN=8D4300CE0B111A75DB3F5D6BEA1008420AC6F15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:91:33:21:91:9e:e5:08:cb:6c:5e:ef:a7:
                    96:3d:f2:02:f7:11:06:18:bc:5e:a4:ef:3e:77:3d:
                    50:8f:61:f3:b9:7a:13:ae:ac:54:6f:07:6e:8c:e5:
                    a9:73:6f:b4:01:ce:9c:9a:02:47:f5:61:06:80:b9:
                    38:a8:14:63:eb:7b:5a:35:eb:b0:85:28:2d:41:05:
                    79:04:b1:ff:bd:e5:10:8d:98:fd:a0:02:bf:18:02:
                    89:71:82:27:99:7e:1b:93:d6:36:b7:26:de:a4:1a:
                    c8:58:d1:a1:ab:80:c3:86:af:a7:db:ca:a1:27:9c:
                    92:19:37:63:cd:a1:dd:e1:65:86:a8:94:54:56:59:
                    6b:52:64:7d:ad:ed:fe:de:f2:cb:4c:bc:ad:52:d5:
                    c9:09:f0:2c:fd:f3:75:9e:9e:0b:e4:a7:72:3c:ec:
                    4f:10:45:6f:38:51:5d:4c:8c:13:5c:27:b9:8f:b7:
                    ad:52:89:f3:63:b3:14:55:0d:90:8c:8a:17:44:02:
                    d3:d8:69:6a:12:b6:83:e7:3d:99:29:3e:5f:7b:db:
                    65:94:7c:27:ab:2c:08:bc:77:14:fe:0e:0d:b2:9a:
                    fc:cc:63:fa:80:4b:38:02:12:26:39:7a:95:46:64:
                    1c:3b:1c:73:85:91:e9:da:39:54:f5:c0:a0:d9:cd:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:00:CE:0B:11:1A:75:DB:3F:5D:6B:EA:10:08:42:0A:C6:F1:5A
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3135302e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:97:d6:bf:5c:96:91:8c:c3:5a:39:cf:77:7a:e7:63:91:3d:
         1a:13:f0:27:99:c7:1b:9e:83:35:f6:e6:5b:93:9e:be:99:f1:
         3a:0c:3b:0e:64:3b:e6:c8:d8:ea:7b:dd:57:94:19:89:31:0e:
         da:3f:3e:5c:a2:6a:04:b8:16:70:d5:08:e6:16:6c:9f:6d:1a:
         ba:85:78:db:86:b5:0d:da:ca:cb:08:b2:be:44:9b:40:9c:7e:
         d7:0d:42:b9:45:59:9f:9a:e5:2e:79:05:95:29:82:f9:21:ef:
         eb:75:9f:0e:5e:72:78:66:18:b5:38:f2:bf:95:cd:41:18:c3:
         ef:1f:c4:a6:bd:4e:0d:02:3e:77:15:6c:74:7a:c5:1e:d9:31:
         42:bd:07:7b:f1:26:e8:dd:35:7e:09:0b:a9:7d:a5:18:6f:d9:
         71:6a:0e:6c:ca:28:e5:6e:34:07:0e:8b:ba:a2:d8:bf:69:c3:
         03:36:a2:2a:69:32:78:14:e9:1d:2c:22:df:12:a6:41:39:4b:
         ee:3b:02:fa:a9:3b:10:ae:89:cb:7e:5a:ee:29:c7:ae:cd:d3:
         41:a1:6b:01:12:de:34:d6:55:14:5f:cd:9b:db:43:5d:cd:fe:
         a3:79:f0:c7:04:36:24:72:8e:2e:c1:6b:66:b9:2c:47:83:87:
         50:74:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:16:30 2026 by rpki-client