Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39382e302f32342d3234203d3e203236363137.roa
File:                     3138362e33322e39382e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          cZVYBaA1szSAKUurrfKkxN8TRpZ+vOTbsrRkLdeeaKQ=
Subject key identifier:   3B:94:41:5E:6A:07:E4:62:0E:F9:E6:23:E2:68:DE:E8:C8:78:2E:05
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1D3DF513965C181A5A99623FABCDA87930AC5A2C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39382e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 31 Mar 2026 00:05:00 +0000
ROA not before:           Tue 31 Mar 2026 00:00:00 +0000
ROA not after:            Tue 30 Mar 2027 00:05:00 +0000
asID:                     26617
IP address blocks:        186.32.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 20:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3d:f5:13:96:5c:18:1a:5a:99:62:3f:ab:cd:a8:79:30:ac:5a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar 31 00:00:00 2026 GMT
            Not After : Mar 30 00:05:00 2027 GMT
        Subject: CN=3B94415E6A07E4620EF9E623E268DEE8C8782E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:b6:93:45:56:2f:8f:9e:46:53:29:ce:cf:
                    f5:20:13:fd:e3:49:72:7c:04:2a:d1:20:48:02:52:
                    05:81:b1:b5:2f:6b:a4:5b:cc:50:c4:3f:2c:08:9f:
                    72:76:2a:05:3d:8a:cd:be:05:42:84:43:42:ad:3c:
                    eb:61:94:4c:c5:66:56:98:61:e1:b5:99:c8:46:77:
                    46:5d:a4:78:4a:ff:3f:c5:d0:d1:62:34:4b:81:21:
                    5b:c8:e3:8b:20:90:51:b0:87:38:29:c0:d8:5f:07:
                    4d:01:00:ce:e5:76:67:57:b5:c6:c2:aa:ad:df:96:
                    b3:29:48:db:73:6b:8e:d3:54:f2:a7:ae:17:31:87:
                    5b:d5:38:1e:98:0b:42:51:93:49:4c:4c:06:e5:4a:
                    7e:8b:e0:ec:be:38:e2:95:d0:0d:15:0b:ee:6a:90:
                    91:ed:fb:a9:5b:3b:05:30:8e:80:ef:52:4c:3a:c4:
                    c1:fa:0e:8a:af:7b:3b:ee:a5:96:1a:41:fd:0b:3c:
                    48:f5:4a:7c:c5:89:45:51:5d:13:09:57:09:59:48:
                    2b:a5:9a:b1:8c:a9:ff:84:ab:a3:a5:01:7a:5c:9b:
                    53:2b:61:48:3b:d2:a7:c2:b4:92:8d:33:1a:2a:dc:
                    d6:27:ae:a3:56:5f:83:63:5d:53:69:33:9d:90:2e:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:41:5E:6A:07:E4:62:0E:F9:E6:23:E2:68:DE:E8:C8:78:2E:05
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39382e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:18:77:d9:f5:78:0a:bd:3e:41:8f:fe:dd:ce:ad:d6:e0:1f:
         a2:a3:65:61:2e:2b:11:48:13:8a:12:15:6f:90:be:5d:d1:6a:
         18:1b:d5:4f:61:26:29:0c:87:ca:e4:44:23:3c:f7:e4:e4:78:
         38:5e:b9:2d:76:81:f8:85:f8:e2:70:28:74:37:3f:87:b9:50:
         50:9f:61:a6:d1:7d:d6:4e:99:fe:ee:05:19:34:77:d4:8f:f3:
         51:a6:d9:80:09:a0:b5:07:29:e9:84:0e:29:1c:f1:6f:2d:d8:
         1a:f7:13:a6:35:7a:81:1c:5b:aa:1f:21:77:8b:67:55:6c:c8:
         eb:d7:de:61:d2:05:f5:0f:95:a0:f2:a0:df:d5:bc:1c:8c:91:
         b9:23:c4:eb:84:2a:03:5d:d9:fa:8b:22:40:9f:4c:1e:0b:52:
         d3:60:6d:a6:dc:21:a0:51:f9:0f:e2:d3:a2:3f:eb:04:16:08:
         51:f1:11:54:e3:da:ad:1a:73:a8:69:22:87:24:e5:bf:8e:e3:
         62:56:00:a0:15:88:fb:45:31:7d:e7:d1:b3:82:9b:f1:f5:36:
         33:94:ec:de:f4:c7:ec:2e:8e:54:77:8e:38:43:d2:a5:be:ca:
         cf:a8:aa:7c:8f:70:b5:8c:43:9f:e0:49:75:0b:9c:00:64:7b:
         44:a1:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 07:21:11 2026 by rpki-client