Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3131302e302f32342d3234203d3e203236363137.roa
File:                     3138362e33322e3131302e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          LTTLWcu4TiEft+W5jLG1FwjPEdg//iiko1XGrfJz7Rg=
Subject key identifier:   E1:57:B9:D1:8C:A1:45:BF:34:62:59:80:E3:19:91:37:90:53:EA:83
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       11519A3D5A3EDDDAB00C2316039BD2121D456114
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3131302e302f32342d3234203d3e203236363137.roa
Signing time:             Mon 21 Sep 2026 18:35:00 +0000
ROA not before:           Mon 21 Sep 2026 18:30:00 +0000
ROA not after:            Mon 20 Sep 2027 18:35:00 +0000
asID:                     26617
IP address blocks:        186.32.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:9a:3d:5a:3e:dd:da:b0:0c:23:16:03:9b:d2:12:1d:45:61:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Sep 21 18:30:00 2026 GMT
            Not After : Sep 20 18:35:00 2027 GMT
        Subject: CN=E157B9D18CA145BF34625980E31991379053EA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:d9:b2:43:a2:fd:b4:72:80:ef:0f:cb:0c:
                    25:94:de:5e:6b:2a:b1:02:55:f8:f0:de:5e:fc:75:
                    14:46:16:71:05:e7:04:22:51:4b:38:4d:86:4e:97:
                    a6:6f:14:67:16:71:ae:4b:25:4c:6e:5a:c0:1c:4a:
                    6e:d7:9f:30:4f:2c:bd:58:c6:55:ab:e8:4f:b1:c9:
                    0d:e1:9f:7a:aa:e9:41:db:d1:9f:9d:cf:32:32:97:
                    38:e1:17:02:11:1f:95:28:a9:f5:7c:35:e7:d7:34:
                    e7:23:52:b6:df:34:15:04:56:93:52:58:f8:6a:72:
                    65:ae:1a:bb:2d:bb:15:4b:29:f7:e7:53:18:87:8e:
                    48:e8:2b:4d:ed:11:1f:e6:ba:6d:4f:dc:4e:cd:5c:
                    94:c2:e8:30:db:57:b4:ce:f8:19:a0:48:ef:b0:b7:
                    66:5f:24:30:49:fe:bf:8b:6a:1c:76:69:45:e5:cd:
                    67:62:4a:3e:bd:fe:07:0c:0b:d7:90:6e:72:59:e0:
                    60:38:39:ef:2c:05:08:4e:ab:a4:b3:c6:79:da:60:
                    3f:42:0c:63:2c:f2:44:f5:80:54:d5:51:9c:64:dd:
                    d7:8f:3b:53:63:60:2f:dc:66:2c:01:d4:a2:a6:37:
                    2f:1c:24:1c:bc:23:27:db:23:1f:cb:58:01:56:6a:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:57:B9:D1:8C:A1:45:BF:34:62:59:80:E3:19:91:37:90:53:EA:83
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3131302e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:4c:f4:d4:69:dc:fb:0d:64:5b:d8:37:37:dc:1b:3e:e7:
         5f:45:0b:2f:3d:f9:7e:ef:1b:b0:72:92:8f:e6:30:af:e2:c9:
         2c:64:fc:c9:28:b6:98:35:46:fe:16:8f:7c:15:7b:cd:26:63:
         02:fd:f5:18:a5:06:76:ca:48:ca:47:1c:4b:0c:61:5f:ab:d1:
         2f:e6:12:a2:5d:db:dd:21:9f:3e:98:d5:bf:5d:c7:50:ee:04:
         9d:28:3b:f7:4c:bb:5a:1a:35:29:65:6f:61:9c:d6:51:b1:cf:
         1c:45:b1:0a:e2:7e:a5:8b:51:d5:0b:b3:95:39:87:fb:f8:42:
         fc:81:49:e3:4a:66:1e:de:e0:08:a2:e6:9b:39:9a:47:7a:39:
         1c:ca:f7:e2:b0:cf:91:bc:35:62:a0:1d:4d:19:01:ca:53:51:
         e4:23:23:7d:f8:b5:0c:5f:3e:c1:f0:70:a8:a4:66:1d:45:50:
         24:7e:c7:f8:b4:3d:34:19:ae:28:ae:c9:51:6c:af:73:ce:92:
         1f:d0:88:2d:e4:90:15:14:00:98:01:a8:d7:ba:50:5b:ec:da:
         80:66:84:3f:42:94:0e:ec:a8:90:e4:0e:94:bf:17:1c:79:1e:
         ab:26:1c:c0:a0:58:0e:8e:cc:8f:6c:30:3e:fa:75:68:67:b4:
         61:09:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:41:52 2026 by rpki-client