Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
File:                     AS8151.roa (raw, json)
Hash identifier:          yxrDETniilc1Ietkk/Rb2xrhqlKZlrQTrAjiOGu/Y4Y=
Subject key identifier:   F4:20:D7:80:24:D5:BB:FA:B5:5D:36:0D:20:38:EE:8F:3A:71:60:FA
Certificate issuer:       /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial:       79F8FBB1607D06A2E36CF6F4E030A350B8BC8F82
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa
Signing time:             Tue 04 Aug 2026 00:10:00 +0000
ROA not before:           Tue 04 Aug 2026 00:05:00 +0000
ROA not after:            Tue 03 Aug 2027 00:10:00 +0000
asID:                     8151
IP address blocks:        148.221.0.0/16 maxlen: 24
                          148.223.0.0/16 maxlen: 24
                          148.233.0.0/16 maxlen: 24
                          148.233.37.0/24 maxlen: 24
                          148.235.0.0/16 maxlen: 24
                          187.128.0.0/12 maxlen: 24
                          187.132.0.0/16 maxlen: 24
                          187.135.0.0/16 maxlen: 24
                          187.136.0.0/16 maxlen: 24
                          187.143.0.0/16 maxlen: 24
                          187.144.0.0/12 maxlen: 24
                          187.146.0.0/16 maxlen: 24
                          187.148.0.0/16 maxlen: 24
                          187.150.0.0/17 maxlen: 24
                          187.150.128.0/18 maxlen: 24
                          187.150.224.0/19 maxlen: 24
                          187.153.0.0/16 maxlen: 24
                          187.154.0.0/16 maxlen: 24
                          187.155.32.0/19 maxlen: 24
                          187.155.64.0/18 maxlen: 24
                          187.155.128.0/18 maxlen: 24
                          187.168.0.0/13 maxlen: 24
                          187.168.0.0/14 maxlen: 24
                          187.192.0.0/11 maxlen: 24
                          187.194.96.0/19 maxlen: 24
                          187.194.128.0/17 maxlen: 24
                          187.199.0.0/16 maxlen: 24
                          187.202.0.0/16 maxlen: 24
                          187.207.0.0/16 maxlen: 24
                          187.212.0.0/16 maxlen: 24
                          187.214.0.0/16 maxlen: 24
                          187.220.0.0/14 maxlen: 24
                          187.224.0.0/12 maxlen: 24
                          187.224.0.0/15 maxlen: 24
                          187.228.0.0/16 maxlen: 24
                          187.229.24.0/21 maxlen: 24
                          187.229.32.0/22 maxlen: 24
                          187.229.88.0/21 maxlen: 24
                          187.229.120.0/21 maxlen: 24
                          187.235.0.0/16 maxlen: 24
                          187.237.0.0/16 maxlen: 24
                          189.128.0.0/11 maxlen: 24
                          189.128.0.0/15 maxlen: 24
                          189.130.0.0/17 maxlen: 24
                          189.130.128.0/18 maxlen: 24
                          189.130.224.0/19 maxlen: 24
                          189.131.0.0/16 maxlen: 24
                          189.132.0.0/15 maxlen: 24
                          189.136.0.0/16 maxlen: 24
                          189.146.0.0/15 maxlen: 24
                          189.148.0.0/14 maxlen: 24
                          189.160.0.0/11 maxlen: 24
                          189.161.0.0/16 maxlen: 24
                          189.164.0.0/15 maxlen: 24
                          189.167.0.0/16 maxlen: 24
                          189.188.0.0/16 maxlen: 24
                          189.190.0.0/16 maxlen: 24
                          189.224.0.0/12 maxlen: 24
                          189.230.0.0/16 maxlen: 24
                          189.235.64.0/19 maxlen: 24
                          189.236.0.0/16 maxlen: 24
                          189.239.128.0/17 maxlen: 24
                          189.240.0.0/12 maxlen: 24
                          189.242.0.0/16 maxlen: 24
                          189.247.104.0/24 maxlen: 24
                          189.249.0.0/16 maxlen: 24
                          189.250.0.0/16 maxlen: 24
                          192.100.232.0/23 maxlen: 24
                          200.33.136.0/21 maxlen: 24
                          200.33.144.0/21 maxlen: 24
                          200.33.148.0/24 maxlen: 24
                          200.34.32.0/20 maxlen: 24
                          200.34.133.0/24 maxlen: 24
                          200.36.32.0/19 maxlen: 24
                          200.38.128.0/19 maxlen: 24
                          200.38.192.0/19 maxlen: 24
                          200.64.0.0/15 maxlen: 24
                          200.66.128.0/17 maxlen: 24
                          200.67.0.0/16 maxlen: 24
                          200.78.0.0/17 maxlen: 24
                          200.78.120.0/21 maxlen: 24
                          200.79.0.0/17 maxlen: 24
                          200.95.0.0/17 maxlen: 24
                          201.96.0.0/12 maxlen: 24
                          201.97.0.0/16 maxlen: 24
                          201.98.230.0/23 maxlen: 24
                          201.99.0.0/16 maxlen: 24
                          201.103.0.0/16 maxlen: 24
                          201.104.128.0/17 maxlen: 24
                          201.105.0.0/16 maxlen: 24
                          201.108.0.0/16 maxlen: 24
                          201.111.0.0/16 maxlen: 24
                          201.112.0.0/13 maxlen: 24
                          201.114.0.0/16 maxlen: 24
                          201.119.0.0/16 maxlen: 24
                          201.120.0.0/14 maxlen: 24
                          201.121.0.0/19 maxlen: 24
                          201.122.16.0/23 maxlen: 24
                          201.122.73.0/24 maxlen: 24
                          201.122.88.0/23 maxlen: 24
                          201.122.113.0/24 maxlen: 24
                          201.122.120.0/24 maxlen: 24
                          201.122.127.0/24 maxlen: 24
                          201.122.128.0/24 maxlen: 24
                          201.122.146.0/24 maxlen: 24
                          201.122.153.0/24 maxlen: 24
                          201.122.161.0/24 maxlen: 24
                          201.122.170.0/24 maxlen: 24
                          201.122.190.0/24 maxlen: 24
                          201.122.194.0/24 maxlen: 24
                          201.122.199.0/24 maxlen: 24
                          201.122.201.0/24 maxlen: 24
                          201.122.213.0/24 maxlen: 24
                          201.122.214.0/24 maxlen: 24
                          201.122.226.0/24 maxlen: 24
                          201.123.0.0/16 maxlen: 24
                          201.124.0.0/14 maxlen: 24
                          201.124.0.0/16 maxlen: 24
                          201.125.120.0/24 maxlen: 24
                          201.128.0.0/17 maxlen: 24
                          201.128.128.0/17 maxlen: 24
                          201.129.0.0/16 maxlen: 24
                          201.130.80.0/24 maxlen: 24
                          201.131.52.0/22 maxlen: 24
                          201.131.76.0/24 maxlen: 24
                          201.133.0.0/16 maxlen: 24
                          201.134.0.0/16 maxlen: 24
                          201.134.128.0/18 maxlen: 24
                          201.135.0.0/16 maxlen: 24
                          201.136.0.0/15 maxlen: 24
                          201.136.64.0/18 maxlen: 24
                          201.137.0.0/16 maxlen: 24
                          201.138.0.0/16 maxlen: 24
                          201.139.160.0/21 maxlen: 24
                          201.144.0.0/14 maxlen: 24
                          201.152.0.0/14 maxlen: 24
                          201.155.12.0/24 maxlen: 24
                          201.155.91.0/24 maxlen: 24
                          201.155.109.0/24 maxlen: 24
                          201.155.121.0/24 maxlen: 24
                          201.155.188.0/24 maxlen: 24
                          201.155.203.0/24 maxlen: 24
                          201.155.215.0/24 maxlen: 24
                          207.248.128.0/19 maxlen: 24
                          2001:1208::/32 maxlen: 48
                          2806:238::/48 maxlen: 48
                          2806:2c0::/32 maxlen: 48
                          2806:1000::/24 maxlen: 48
                          2806:1001::/32 maxlen: 48
                          2806:1002::/31 maxlen: 48
                          2806:1004::/30 maxlen: 48
                          2806:1009::/32 maxlen: 48
                          2806:100a::/31 maxlen: 48
                          2806:100c::/30 maxlen: 48
                          2806:103e:5::/48 maxlen: 48
                          2806:103e:c::/48 maxlen: 48
                          2806:104e::/32 maxlen: 48
                          2806:1061::/32 maxlen: 48
                          2806:1062::/31 maxlen: 48
                          2806:1064::/30 maxlen: 48
                          2806:1068::/29 maxlen: 48
                          2806:1071::/32 maxlen: 48
                          2806:1072::/31 maxlen: 48
                          2806:1074::/30 maxlen: 48
                          2806:1078::/29 maxlen: 48
                          2806:10a1::/32 maxlen: 48
                          2806:10a2::/31 maxlen: 48
                          2806:10a4::/30 maxlen: 48
                          2806:10a9::/32 maxlen: 48
                          2806:10aa::/31 maxlen: 48
                          2806:10ac::/30 maxlen: 48
                          2806:10be:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f8:fb:b1:60:7d:06:a2:e3:6c:f6:f4:e0:30:a3:50:b8:bc:8f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
        Validity
            Not Before: Aug  4 00:05:00 2026 GMT
            Not After : Aug  3 00:10:00 2027 GMT
        Subject: CN=F420D78024D5BBFAB55D360D2038EE8F3A7160FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:c8:a6:92:6d:6c:a2:30:ba:22:96:52:35:
                    44:b6:c4:48:ee:ac:68:c7:c1:07:d9:38:d4:23:87:
                    cd:ee:f9:89:55:94:26:cf:87:77:e2:0c:68:45:fd:
                    87:63:58:0c:40:3c:7d:24:99:ed:65:e9:e1:ea:cc:
                    1b:ba:b9:eb:07:2b:87:58:5c:ed:d7:21:38:76:46:
                    07:55:69:8e:89:cc:42:21:44:64:79:1b:06:2e:00:
                    f9:5d:ef:ec:69:ab:a0:57:b4:af:10:0d:2f:89:1f:
                    2f:02:33:2e:8b:e1:60:be:2b:18:97:88:8f:24:9a:
                    11:74:33:29:2c:d4:79:b5:8d:2b:6a:13:57:3d:fc:
                    fc:0b:ac:c8:0b:50:f9:29:c4:1c:3d:83:5a:56:f7:
                    10:22:50:c5:83:ab:d5:ad:85:0f:9d:92:fc:6f:24:
                    f1:18:4a:bc:81:38:f6:e2:68:9f:6f:d6:b0:b2:8b:
                    43:6f:23:12:39:48:67:d0:66:fc:a4:74:2b:36:c5:
                    df:62:78:a7:69:45:2a:8a:75:26:f5:ac:21:20:2a:
                    0a:3a:de:4d:29:38:30:24:7f:9a:ee:c2:81:15:86:
                    0f:42:d2:ff:52:0e:56:46:62:4f:58:d5:a9:2a:0c:
                    38:26:fc:2c:23:7d:4d:34:70:a4:1b:50:3a:76:eb:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:D7:80:24:D5:BB:FA:B5:5D:36:0D:20:38:EE:8F:3A:71:60:FA
            X509v3 Authority Key Identifier:
                keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS8151.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.221.0.0/16
                  148.223.0.0/16
                  148.233.0.0/16
                  148.235.0.0/16
                  187.128.0.0/11
                  187.168.0.0/13
                  187.192.0.0-187.239.255.255
                  189.128.0.0/10
                  189.224.0.0/11
                  192.100.232.0/23
                  200.33.136.0-200.33.151.255
                  200.34.32.0/20
                  200.34.133.0/24
                  200.36.32.0/19
                  200.38.128.0/19
                  200.38.192.0/19
                  200.64.0.0/15
                  200.66.128.0-200.67.255.255
                  200.78.0.0/17
                  200.79.0.0/17
                  200.95.0.0/17
                  201.96.0.0-201.129.255.255
                  201.130.80.0/24
                  201.131.52.0/22
                  201.131.76.0/24
                  201.133.0.0-201.138.255.255
                  201.139.160.0/21
                  201.144.0.0/14
                  201.152.0.0/14
                  207.248.128.0/19
                IPv6:
                  2001:1208::/32
                  2806:238::/48
                  2806:2c0::/32
                  2806:1000::/24

    Signature Algorithm: sha256WithRSAEncryption
         82:17:a7:89:85:4a:ca:39:b7:d3:73:82:6c:83:be:f7:26:99:
         bd:84:0b:60:2c:8d:42:4e:6a:64:b6:6c:f0:27:24:7b:bd:9a:
         61:27:dd:96:1d:37:22:b8:20:5d:72:7d:39:e3:e6:e8:4b:f0:
         0e:60:67:a5:c9:38:ab:9a:0f:d4:62:e6:04:7c:3d:50:40:9d:
         3d:c0:6d:a2:e0:f2:7b:a0:88:a8:b3:f8:98:07:e5:12:62:ba:
         e2:ea:a4:32:c1:36:0b:76:27:05:44:80:cc:01:25:43:91:37:
         22:29:60:44:24:1e:42:4f:1b:ce:1e:7d:3c:60:62:e6:0b:b9:
         0e:66:07:b0:d7:d9:b7:59:33:79:7c:21:cb:ad:c8:ee:d6:76:
         d9:ad:7d:4f:63:19:51:14:09:b6:0e:96:17:3a:7b:9f:79:ca:
         38:22:26:59:55:4b:fd:9c:0f:4d:7d:37:21:ec:6d:6f:e9:5f:
         8f:05:47:f9:e4:f0:35:cc:11:63:33:3c:53:f9:ed:f7:3d:2c:
         97:f6:03:15:0a:27:b2:18:7d:41:26:14:80:e6:3c:72:a0:c1:
         27:a8:5c:9d:62:a4:9f:e9:06:2b:8c:9b:e0:88:16:d3:d5:ca:
         20:40:43:84:0b:39:76:c7:10:7d:2a:08:23:77:95:ab:12:5e:
         b4:a5:35:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 06:23:40 2026 by rpki-client