Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e36342e302f32312d3234203d3e203130363137.roa
File:                     3138362e3134382e36342e302f32312d3234203d3e203130363137.roa (raw, json)
Hash identifier:          NDVddD/Lhtnc5QCWnOZc9PTRnuTkkdGPp5hHLHQe5V4=
Subject key identifier:   42:A3:ED:EB:38:7D:49:6C:05:AF:FF:27:B2:01:52:2A:37:2B:36:BA
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       3C69E65DF6827065E84B42965A3BB3C7D6064F07
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e36342e302f32312d3234203d3e203130363137.roa
Signing time:             Mon 18 May 2026 20:25:00 +0000
ROA not before:           Mon 18 May 2026 20:20:00 +0000
ROA not after:            Mon 17 May 2027 20:25:00 +0000
asID:                     10617
IP address blocks:        186.148.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:e6:5d:f6:82:70:65:e8:4b:42:96:5a:3b:b3:c7:d6:06:4f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 18 20:20:00 2026 GMT
            Not After : May 17 20:25:00 2027 GMT
        Subject: CN=42A3EDEB387D496C05AFFF27B201522A372B36BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:2b:ed:b4:5a:82:c9:b1:e7:7b:62:ee:f5:
                    87:13:53:60:3e:40:66:89:82:5c:43:01:bf:0c:83:
                    97:b0:68:68:6f:f6:f4:65:c2:83:c5:26:63:00:1b:
                    cb:05:cc:1c:4b:52:1b:31:5a:52:7d:19:82:55:c8:
                    6a:99:65:43:18:84:a6:18:96:51:1c:27:36:2d:5f:
                    0e:d2:d6:cc:b1:26:b4:11:80:95:4b:13:54:59:2a:
                    b5:ee:d8:9d:a1:d2:fc:4d:58:47:30:1c:1d:84:56:
                    cc:74:98:3d:ec:db:41:74:34:f0:22:51:7b:89:0b:
                    60:be:c4:4b:bb:d1:c1:74:53:7b:1e:a7:38:e4:61:
                    e4:c0:94:96:01:80:2c:11:77:be:fc:71:15:8b:ff:
                    ff:11:4b:9f:a3:fb:aa:9e:52:62:5a:2f:4d:2c:c6:
                    bb:51:5b:c7:ea:3b:f9:e5:97:8f:55:dc:7f:b9:43:
                    05:17:f0:17:c8:fc:aa:a3:ee:d4:2b:06:3c:7d:c7:
                    e0:f4:bf:1d:84:92:85:70:95:b9:3a:bb:31:0d:74:
                    f2:40:16:22:da:fe:e2:59:07:ed:bc:06:e5:e0:02:
                    06:c7:53:89:a3:e1:64:23:26:06:2c:a6:ac:21:c9:
                    52:d3:25:6a:6c:05:e5:ee:e5:b2:c7:5a:26:ce:ea:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:ED:EB:38:7D:49:6C:05:AF:FF:27:B2:01:52:2A:37:2B:36:BA
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e36342e302f32312d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:78:14:f2:96:da:e7:b3:08:1f:3d:f2:3c:5a:9d:d8:14:4f:
         55:6e:f5:b4:f8:2f:8a:22:61:64:ea:70:63:ed:96:22:c4:de:
         6d:1d:c1:ce:ff:dd:ec:4c:b6:70:5b:56:e6:a8:7a:a8:6f:58:
         ff:18:ec:16:75:8a:a9:2e:97:b1:f2:c2:c6:b3:38:70:d3:ff:
         1a:f3:34:63:06:98:0b:f1:58:ab:b6:d9:63:b2:e6:01:a5:32:
         67:20:0e:df:d8:70:d5:7e:f9:13:82:28:cd:07:7c:4e:43:ad:
         e8:8b:08:3f:fe:26:a9:28:87:1b:5f:59:f1:21:5c:be:15:54:
         96:aa:e8:8a:70:2c:2d:a6:88:d3:60:f5:e5:1f:66:11:13:fb:
         ea:fd:f3:29:1d:79:65:a0:fa:4b:d3:49:44:1a:6a:15:1a:40:
         e3:38:c1:fc:bb:06:67:c9:a8:85:00:a4:c4:ab:19:7a:bb:81:
         fb:b6:40:11:b5:d5:1d:bb:10:a4:76:6e:51:a5:87:33:ed:8f:
         6e:32:94:e7:a8:ca:82:6d:0e:47:18:e9:33:da:5f:5f:45:84:
         f5:c7:d6:82:a7:ba:40:58:cc:66:fe:01:b4:39:3d:9d:96:5d:
         5d:98:c0:38:98:c0:b8:78:33:30:37:0b:e5:62:7b:8f:95:74:
         5f:04:67:3d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPGnmXfaCcGXoS0KWWjuzx9YGTwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4NzlGQTc4QTNGNkMxOUYwRDFERDIxRjE4MUI5OTMy
NkEwNUNFRTAeFw0yNjA1MTgyMDIwMDBaFw0yNzA1MTcyMDI1MDBaMDMxMTAvBgNV
BAMTKDQyQTNFREVCMzg3RDQ5NkMwNUFGRkYyN0IyMDE1MjJBMzcyQjM2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHCvttFqCybHne2Lu9YcTU2A+
QGaJglxDAb8Mg5ewaGhv9vRlwoPFJmMAG8sFzBxLUhsxWlJ9GYJVyGqZZUMYhKYY
llEcJzYtXw7S1syxJrQRgJVLE1RZKrXu2J2h0vxNWEcwHB2EVsx0mD3s20F0NPAi
UXuJC2C+xEu70cF0U3sepzjkYeTAlJYBgCwRd778cRWL//8RS5+j+6qeUmJaL00s
xrtRW8fqO/nll49V3H+5QwUX8BfI/Kqj7tQrBjx9x+D0vx2EkoVwlbk6uzENdPJA
FiLa/uJZB+28BuXgAgbHU4mj4WQjJgYspqwhyVLTJWpsBeXu5bLHWibO6q1FAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQqPt6zh9SWwFr/8nsgFSKjcrNrowHwYDVR0j
BBgwFoAU/Iefp4o/bBnw0d0h8YG5kyagXO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDQ2Q0I3REZBMTYwQjk2NDY3RjdCREJFMjc2N0Q4NzQz
NDVDN0FDMDU1M0VDMDg1NUY0RjZBRTQ3NEZCMzRELzAvRkM4NzlGQTc4QTNGNkMx
OUYwRDFERDIxRjE4MUI5OTMyNkEwNUNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzg3OUZBNzhBM0Y2QzE5RjBE
MUREMjFGMTgxQjk5MzI2QTA1Q0VFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q0NkNCN0RGQTE2MEI5NjQ2N0Y3QkRCRTI3NjdEODc0MzQ1QzdBQzA1
NTNFQzA4NTVGNEY2QUU0NzRGQjM0RC8wLzMxMzgzNjJlMzEzNDM4MmUzNjM0MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzMDM2MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7qUQDAN
BgkqhkiG9w0BAQsFAAOCAQEAG3gU8pba57MIHz3yPFqd2BRPVW71tPgviiJhZOpw
Y+2WIsTebR3Bzv/d7Ey2cFtW5qh6qG9Y/xjsFnWKqS6XsfLCxrM4cNP/GvM0YwaY
C/FYq7bZY7LmAaUyZyAO39hw1X75E4IozQd8TkOt6IsIP/4mqSiHG19Z8SFcvhVU
lqroinAsLaaI02D15R9mERP76v3zKR15ZaD6S9NJRBpqFRpA4zjB/LsGZ8mohQCk
xKsZeruB+7ZAEbXVHbsQpHZuUaWHM+2PbjKU56jKgm0ORxjpM9pfX0WE9cfWgqe6
QFjMZv4BtDk9nZZdXZjAOJjAuHgzMDcL5WJ7j5V0XwRnPQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:44 2026 by rpki-client