Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/3138362e3132312e3134382e302f32322d3234203d3e20323634383235.roa
File:                     3138362e3132312e3134382e302f32322d3234203d3e20323634383235.roa (raw, json)
Hash identifier:          bPjulfB2OHBBZGvTurwhJ0lk7y/CKDn9v3kuP8gORsk=
Subject key identifier:   6D:AD:A0:02:A9:B6:70:5B:A2:8C:DD:05:55:55:5C:9D:75:86:71:FB
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       48CE2ADE545B6B606014E92A283928D660FEDEE8
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/3138362e3132312e3134382e302f32322d3234203d3e20323634383235.roa
Signing time:             Fri 06 Mar 2026 17:55:00 +0000
ROA not before:           Fri 06 Mar 2026 17:50:00 +0000
ROA not after:            Fri 05 Mar 2027 17:55:00 +0000
asID:                     264825
IP address blocks:        186.121.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Mar 2026 00:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ce:2a:de:54:5b:6b:60:60:14:e9:2a:28:39:28:d6:60:fe:de:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Mar  6 17:50:00 2026 GMT
            Not After : Mar  5 17:55:00 2027 GMT
        Subject: CN=6DADA002A9B6705BA28CDD0555555C9D758671FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:09:2c:a8:9f:35:0c:6e:53:d0:89:ad:9b:
                    b8:cb:e8:62:22:6c:b1:b2:85:b6:b3:9f:87:43:b5:
                    0b:39:c3:0c:16:9a:0f:19:fe:9f:48:17:3c:9b:74:
                    fd:c7:25:b9:6d:4f:bc:06:5e:58:75:91:ad:3b:56:
                    db:21:79:e0:5e:06:15:f8:4a:8d:27:31:3c:39:88:
                    99:2c:df:86:93:48:48:0d:cd:9f:9d:f2:c2:4e:90:
                    86:f5:c5:37:dc:11:26:36:de:1d:c8:e5:2a:0f:35:
                    31:d1:d8:90:56:f6:8a:2b:12:3a:e5:55:5a:49:76:
                    f8:a0:e2:60:31:dc:38:8f:9d:8c:60:04:b1:a3:3e:
                    1e:75:f6:bf:c0:8d:34:fd:19:43:a6:e6:44:3d:42:
                    54:80:05:4a:78:10:fd:a4:36:dd:27:a3:8b:de:60:
                    29:5f:8f:3e:ac:0e:51:dd:72:f5:b2:5d:fa:af:29:
                    76:8c:b2:50:6e:14:5c:c2:26:ff:38:88:74:b4:76:
                    f8:9e:32:07:78:78:87:f0:42:c4:bd:d3:02:93:71:
                    13:b8:c6:8e:b0:98:56:f3:12:6b:7e:ab:c5:59:ac:
                    fc:98:b6:32:69:ab:71:b5:83:63:d0:16:d2:e3:66:
                    4c:b8:ff:5d:ad:05:b6:b9:9e:bc:98:bb:d9:f7:91:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AD:A0:02:A9:B6:70:5B:A2:8C:DD:05:55:55:5C:9D:75:86:71:FB
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/3138362e3132312e3134382e302f32322d3234203d3e20323634383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:db:7f:6c:6c:7a:05:3a:04:cd:e9:81:1b:77:9c:ad:82:66:
         d7:62:7c:2e:b8:20:f2:6c:25:2e:fa:4e:a3:d3:c7:e7:38:00:
         3a:e9:74:61:72:6e:f0:14:c3:76:90:19:6c:c4:5c:76:28:c7:
         ff:7c:b2:4f:7d:05:d8:f6:57:a4:dd:b2:74:76:97:3c:98:51:
         fc:a2:b5:63:67:0c:61:fe:89:cc:7e:aa:9d:f4:d1:7e:4f:e5:
         c3:c3:e4:80:df:2a:0a:02:8e:71:04:f4:92:2f:c0:ad:48:0d:
         69:aa:ed:ed:c5:92:17:1c:8d:69:c8:b5:3b:1f:d1:6d:f3:fe:
         51:e5:b2:f2:b7:e3:e8:4e:dc:31:1b:c0:0c:c0:16:3e:62:57:
         f7:8c:37:c8:f7:49:a3:28:91:96:03:f9:2c:08:7b:d0:d2:87:
         dd:2b:fe:a2:c9:f9:b2:a8:f8:ec:44:03:60:41:a8:21:5c:89:
         f0:ef:23:e1:d9:60:29:f5:51:87:98:7c:49:af:cf:11:18:7b:
         77:62:e4:be:e0:a1:21:7f:92:e1:08:59:e9:dd:39:9a:40:90:
         ce:f1:2d:3f:fe:cf:de:b4:42:78:64:5c:8e:ea:62:4d:eb:8a:
         b2:fe:e5:62:32:d8:64:5d:88:c4:a4:53:e6:f4:61:1e:0e:ff:
         2a:96:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:50:47 2026 by rpki-client