Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139382e302f32342d3234203d3e20323733313634.roa
File:                     3138362e352e3139382e302f32342d3234203d3e20323733313634.roa (raw, json)
Hash identifier:          +93SzTP+LfOhgZPlWzhRpIVuve3VZ7WwlZgiJpQ+4Gs=
Subject key identifier:   EC:4D:B6:42:90:A0:AB:37:0B:56:0F:94:B0:8D:B4:D1:52:99:E8:B0
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       07C8F139A8CB4D710D3A157E6A82398FC8CC9E48
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139382e302f32342d3234203d3e20323733313634.roa
Signing time:             Sat 24 Oct 2026 11:43:13 +0000
ROA not before:           Sat 24 Oct 2026 11:38:13 +0000
ROA not after:            Sat 23 Oct 2027 11:43:13 +0000
asID:                     273164
IP address blocks:        186.5.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c8:f1:39:a8:cb:4d:71:0d:3a:15:7e:6a:82:39:8f:c8:cc:9e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Oct 24 11:38:13 2026 GMT
            Not After : Oct 23 11:43:13 2027 GMT
        Subject: CN=EC4DB64290A0AB370B560F94B08DB4D15299E8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:e8:a3:d7:32:55:60:b3:09:2a:01:4b:48:
                    a8:05:2d:95:2a:03:e5:7d:9e:52:20:fc:c8:b3:f4:
                    9d:43:eb:ea:b7:8f:73:0d:82:eb:70:0e:30:94:7b:
                    64:e2:c0:b8:17:35:82:81:eb:a6:ea:05:ff:3f:aa:
                    56:4c:91:de:09:66:3d:af:33:d7:eb:e0:5e:59:46:
                    e5:36:17:77:d7:86:72:7b:8c:ff:14:f2:12:34:23:
                    2c:79:92:87:56:52:0f:d6:c9:01:f2:8e:11:0b:54:
                    33:a2:80:ea:e7:33:66:15:ce:4a:50:42:88:f8:a0:
                    6d:b3:ae:00:60:9c:f1:99:97:7a:d7:3b:27:d2:f3:
                    21:ca:df:f5:6a:c4:78:81:6b:5b:31:2b:27:0f:f7:
                    32:7c:44:a3:2f:b1:57:1a:f1:d4:87:c3:7b:57:5a:
                    66:31:4c:82:c5:0f:4c:c3:a7:b4:0e:65:4e:b2:9c:
                    46:36:16:e0:68:d6:fe:e2:20:f6:37:cd:db:1d:1d:
                    31:5b:3d:16:0c:d2:49:38:52:5d:8b:d8:74:d7:4e:
                    ce:e6:f0:e4:43:5f:89:64:9a:5a:40:d1:b2:dd:47:
                    cb:f0:4f:47:07:a0:bb:5d:b4:6e:13:7c:3f:41:5a:
                    77:cb:20:37:cb:66:a2:32:34:e1:44:4a:a5:ad:ad:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:B6:42:90:A0:AB:37:0B:56:0F:94:B0:8D:B4:D1:52:99:E8:B0
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3139382e302f32342d3234203d3e20323733313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:23:45:22:c3:27:5b:fd:1e:ec:95:45:15:6a:29:94:9b:9f:
         0b:2d:4e:69:52:94:57:48:34:56:ed:78:9f:de:17:f2:32:2a:
         99:22:22:bb:86:84:17:44:76:81:f1:5b:fb:f5:7c:9b:03:79:
         7e:17:fc:c2:ce:a7:a6:b7:0a:31:82:e2:fc:51:f8:66:e7:53:
         47:bd:e1:6f:87:9f:73:9c:20:50:20:8e:c1:d8:f3:9a:2d:87:
         69:30:72:fa:f6:fc:a6:2b:48:f8:a9:10:32:a3:6d:98:cd:b8:
         8c:87:b2:65:41:bd:d7:af:f5:c1:b3:66:9b:0a:f1:2f:dd:9c:
         4a:5c:8f:9b:01:46:33:21:d0:81:1d:13:0c:8f:e8:b5:c7:dc:
         30:b8:c9:9a:0a:19:ca:e7:28:7f:8a:8c:cf:84:ef:9a:dd:a6:
         63:3a:c4:fd:47:35:62:3c:80:2f:a5:ad:0b:32:ba:2d:e0:0c:
         0e:5a:a4:8a:10:7c:21:ef:06:2e:5b:b0:eb:53:fd:67:24:3c:
         f3:6f:c2:d5:38:fa:1e:ad:86:cb:e5:38:ea:ff:e7:80:30:ef:
         50:a1:16:5c:60:ce:61:d2:84:a9:08:73:2d:c4:fe:41:a6:c5:
         e0:a5:b2:7d:94:39:f1:4c:23:6a:37:52:2e:cb:c2:f7:ff:5e:
         17:7b:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:00:39 2026 by rpki-client