Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e37322e302f32322d3234203d3e203130363137.roa
File:                     3138362e3134382e37322e302f32322d3234203d3e203130363137.roa (raw, json)
Hash identifier:          WMHzUgTL/MafTVxUZyatM01Ve/mFrTeg0HF7rYt5+Ic=
Subject key identifier:   81:8E:13:F9:6B:20:88:8C:70:CD:3B:19:A4:47:32:8C:D9:9E:2F:99
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       3BCDB12A196678B0267929BA1DBD3FAD0AF6FCFC
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e37322e302f32322d3234203d3e203130363137.roa
Signing time:             Tue 19 May 2026 15:00:00 +0000
ROA not before:           Tue 19 May 2026 14:55:00 +0000
ROA not after:            Tue 18 May 2027 15:00:00 +0000
asID:                     10617
IP address blocks:        186.148.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:b1:2a:19:66:78:b0:26:79:29:ba:1d:bd:3f:ad:0a:f6:fc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 19 14:55:00 2026 GMT
            Not After : May 18 15:00:00 2027 GMT
        Subject: CN=818E13F96B20888C70CD3B19A447328CD99E2F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:b6:f8:84:f5:db:a2:18:af:ee:0b:18:11:
                    44:fb:16:d3:46:2f:42:b2:d2:cd:1a:e2:53:21:9a:
                    38:95:15:74:b7:62:98:d5:5a:2a:31:fc:b7:d2:1d:
                    08:16:03:fa:1e:3e:cb:62:72:d7:8f:62:ad:0c:06:
                    79:b8:36:47:6e:4a:81:b6:3b:52:74:1b:f1:a5:14:
                    5a:e8:09:77:02:b3:1e:be:8b:c8:ea:a8:fc:2c:5c:
                    41:14:ae:98:6f:9c:dc:bb:d0:b6:7e:c8:5c:98:f1:
                    51:f8:09:42:85:aa:4e:d9:e6:15:19:67:6e:7d:d0:
                    7d:2c:c2:43:48:3e:61:13:3b:3f:1d:ce:ea:37:3a:
                    ed:ff:b7:74:4c:ea:45:9c:a8:4d:19:cc:44:b4:af:
                    59:92:51:1a:0e:b8:6d:15:5f:8a:0b:87:71:ef:00:
                    dc:79:d2:e1:58:3a:04:37:59:1d:f6:82:67:63:a3:
                    3d:9c:6b:8b:18:a2:d5:31:85:1b:fd:47:b1:c0:91:
                    a8:39:c5:cf:ce:0b:5e:b5:f0:bc:d1:d4:c2:37:05:
                    ca:f6:14:52:22:b4:c3:86:39:2f:13:38:50:00:fb:
                    ce:65:4b:c0:2f:42:99:e3:98:a3:03:14:53:31:c0:
                    13:ce:db:1b:47:e7:4c:d8:24:7a:60:43:ca:e4:90:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:13:F9:6B:20:88:8C:70:CD:3B:19:A4:47:32:8C:D9:9E:2F:99
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e37322e302f32322d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:ee:69:e2:75:49:a1:e2:1e:a1:f4:ce:87:d4:98:91:82:
         55:52:ad:bc:f3:a1:0e:ab:f0:06:0d:c2:b6:7c:44:7f:3c:77:
         61:44:6a:a2:91:b2:af:0b:36:92:bc:a9:5f:9a:79:29:9c:4e:
         18:1b:ec:af:c2:4f:a3:ed:c1:58:c7:5b:27:dc:ad:14:9a:9b:
         bc:76:af:a8:e6:25:ad:cc:cf:51:1f:7a:98:30:ea:3a:fd:eb:
         c1:e3:0e:94:63:67:3f:93:73:82:05:19:e7:d2:1f:a3:f1:19:
         dc:b8:62:c7:38:d9:ba:6d:e2:0c:74:18:25:3b:71:da:23:d9:
         53:95:e4:b8:34:95:77:a9:3c:b9:90:34:8e:70:d3:35:55:e2:
         5c:a2:1c:04:8a:64:a4:d7:6a:8e:f2:4e:90:be:60:d6:7c:62:
         9f:d5:68:b7:ef:22:af:d6:17:7e:23:d7:51:19:ae:2c:ab:9c:
         83:82:df:63:9e:d2:df:6f:99:f0:79:23:b9:1d:b3:5a:35:1b:
         88:bf:9c:cd:14:fb:6c:94:64:e1:b8:37:18:ba:dd:f4:6e:5f:
         06:90:94:f9:14:38:15:cc:00:c9:ed:fd:8c:38:39:a3:95:b2:
         63:5b:f3:c2:43:6b:aa:70:73:ed:8d:86:8d:24:70:6e:45:25:
         62:c5:3b:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO82xKhlmeLAmeSm6Hb0/rQr2/PwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4NzlGQTc4QTNGNkMxOUYwRDFERDIxRjE4MUI5OTMy
NkEwNUNFRTAeFw0yNjA1MTkxNDU1MDBaFw0yNzA1MTgxNTAwMDBaMDMxMTAvBgNV
BAMTKDgxOEUxM0Y5NkIyMDg4OEM3MENEM0IxOUE0NDczMjhDRDk5RTJGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZrb4hPXbohiv7gsYEUT7FtNG
L0Ky0s0a4lMhmjiVFXS3YpjVWiox/LfSHQgWA/oePstictePYq0MBnm4NkduSoG2
O1J0G/GlFFroCXcCsx6+i8jqqPwsXEEUrphvnNy70LZ+yFyY8VH4CUKFqk7Z5hUZ
Z2590H0swkNIPmETOz8dzuo3Ou3/t3RM6kWcqE0ZzES0r1mSURoOuG0VX4oLh3Hv
ANx50uFYOgQ3WR32gmdjoz2ca4sYotUxhRv9R7HAkag5xc/OC1618LzR1MI3Bcr2
FFIitMOGOS8TOFAA+85lS8AvQpnjmKMDFFMxwBPO2xtH50zYJHpgQ8rkkBzdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgY4T+WsgiIxwzTsZpEcyjNmeL5kwHwYDVR0j
BBgwFoAU/Iefp4o/bBnw0d0h8YG5kyagXO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDQ2Q0I3REZBMTYwQjk2NDY3RjdCREJFMjc2N0Q4NzQz
NDVDN0FDMDU1M0VDMDg1NUY0RjZBRTQ3NEZCMzRELzAvRkM4NzlGQTc4QTNGNkMx
OUYwRDFERDIxRjE4MUI5OTMyNkEwNUNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzg3OUZBNzhBM0Y2QzE5RjBE
MUREMjFGMTgxQjk5MzI2QTA1Q0VFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q0NkNCN0RGQTE2MEI5NjQ2N0Y3QkRCRTI3NjdEODc0MzQ1QzdBQzA1
NTNFQzA4NTVGNEY2QUU0NzRGQjM0RC8wLzMxMzgzNjJlMzEzNDM4MmUzNzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMDM2MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArqUSDAN
BgkqhkiG9w0BAQsFAAOCAQEAKZruaeJ1SaHiHqH0zofUmJGCVVKtvPOhDqvwBg3C
tnxEfzx3YURqopGyrws2krypX5p5KZxOGBvsr8JPo+3BWMdbJ9ytFJqbvHavqOYl
rczPUR96mDDqOv3rweMOlGNnP5NzggUZ59Ifo/EZ3LhixzjZum3iDHQYJTtx2iPZ
U5XkuDSVd6k8uZA0jnDTNVXiXKIcBIpkpNdqjvJOkL5g1nxin9Vot+8ir9YXfiPX
URmuLKucg4LfY57S32+Z8HkjuR2zWjUbiL+czRT7bJRk4bg3GLrd9G5fBpCU+RQ4
FcwAye39jDg5o5WyY1vzwkNrqnBz7Y2GjSRwbkUlYsU7lA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:44 2026 by rpki-client