Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e39362e302f32302d3234203d3e203532343638.roa
File:                     3138362e3134382e39362e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          SISbiEWbT4Kvp+HYeLBoZnVdqL2A9Ntx+1LQiUmbjs0=
Subject key identifier:   76:61:E1:B7:E9:EF:12:A3:2E:A9:E4:AE:C9:F8:F8:5A:A1:DB:F7:10
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       5A4B55C75E83D8508DCB2F1AD71634E007E8E502
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e39362e302f32302d3234203d3e203532343638.roa
Signing time:             Sat 25 Jul 2026 15:39:36 +0000
ROA not before:           Sat 25 Jul 2026 15:34:36 +0000
ROA not after:            Sat 24 Jul 2027 15:39:36 +0000
asID:                     52468
IP address blocks:        186.148.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 21:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4b:55:c7:5e:83:d8:50:8d:cb:2f:1a:d7:16:34:e0:07:e8:e5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Jul 25 15:34:36 2026 GMT
            Not After : Jul 24 15:39:36 2027 GMT
        Subject: CN=7661E1B7E9EF12A32EA9E4AEC9F8F85AA1DBF710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:29:79:5e:81:02:a2:aa:bf:b9:67:c6:e4:
                    ce:7f:4a:5c:33:c9:8e:85:6a:0b:f5:47:c7:8a:7d:
                    f1:88:9f:5d:be:56:d9:41:bc:4c:57:cb:dc:e7:f5:
                    d9:ae:af:bd:02:af:93:9c:51:5e:8a:ea:58:34:8b:
                    28:e3:86:8f:0c:97:21:1a:31:f8:0a:ee:5e:00:1d:
                    d7:ff:fe:71:9d:b0:6b:7b:56:a8:d4:6a:91:6c:b3:
                    6c:ee:c4:0d:ed:72:c7:1e:28:28:93:64:ee:c5:75:
                    d0:a4:a4:5a:9e:bc:4b:cc:40:96:ca:d0:c5:be:ea:
                    69:5a:77:7a:6d:64:8e:00:15:d3:f1:70:39:40:92:
                    76:bb:6f:29:38:34:3a:0c:c6:9e:08:62:df:3a:38:
                    22:2d:5d:93:de:b5:4f:d1:38:20:68:40:be:ce:51:
                    4f:51:19:c0:29:95:a5:3c:c7:0b:4f:78:eb:8c:30:
                    ba:b2:71:52:d1:c7:6a:8c:ad:c8:83:b5:99:dd:ad:
                    a9:d9:b2:01:43:c7:83:6e:f2:09:86:05:02:25:41:
                    c5:d6:e1:9c:c6:fe:4a:92:4b:0c:29:6f:e4:e4:db:
                    43:e8:22:b5:c0:4a:fb:46:fb:c8:4f:91:b0:6d:0e:
                    12:c9:47:6c:b2:0b:c5:cf:63:3e:40:11:d5:b2:eb:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:E1:B7:E9:EF:12:A3:2E:A9:E4:AE:C9:F8:F8:5A:A1:DB:F7:10
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e39362e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:f2:ce:d1:e2:28:b2:c8:13:18:45:95:b8:74:b0:d5:46:
         b2:ea:b4:78:7b:6c:45:bd:8a:ee:3e:3a:ce:50:e1:fe:f8:1e:
         89:a9:eb:e2:77:78:8d:85:34:4d:13:3e:e9:50:58:e2:97:b1:
         50:a1:19:32:a6:27:83:7a:fa:80:00:64:5d:82:72:cd:5e:7c:
         4c:e1:6c:0d:c0:69:fa:26:3c:10:69:65:69:68:6d:7d:7b:98:
         b5:e8:f3:ea:b4:d1:b9:d8:82:b3:c0:3e:66:3a:96:d8:c4:d1:
         d1:1c:0f:e4:0c:6b:8e:bb:6b:85:29:a9:1f:5b:d7:b1:18:f4:
         bc:40:ca:de:69:a3:ea:a5:b2:0e:31:ee:ec:eb:76:53:0d:54:
         0b:11:c1:17:85:f9:3b:bb:d4:3b:f7:8a:eb:27:bb:a2:dd:15:
         a0:25:3e:37:d9:e0:3a:95:d9:2b:12:22:ea:ed:f8:de:90:03:
         08:99:cb:c6:c9:c3:a9:01:c6:40:46:b0:f1:be:f4:c3:81:24:
         38:a6:04:66:11:92:45:86:a4:80:b9:bd:f0:dd:56:25:57:63:
         11:21:f1:16:f8:a5:bf:4c:e5:04:94:2a:b4:c2:e8:c9:22:c7:
         db:37:cc:0d:46:b4:e8:4f:86:3d:ba:49:ed:99:36:12:cb:cc:
         43:0e:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:44:50 2026 by rpki-client