Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231312e302f32342d3234203d3e20323733313634.roa
File:                     3138362e352e3231312e302f32342d3234203d3e20323733313634.roa (raw, json)
Hash identifier:          V8YOgGX1eAjurbkvO+diGrJVZNw/ykxxLft2DYyhaGo=
Subject key identifier:   27:EA:8D:F8:12:01:05:D5:5B:76:F0:95:20:45:45:C0:A6:FB:95:40
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       1CD1B23DCB8A80BF5D2B9DF72CECF9C252ECB18C
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231312e302f32342d3234203d3e20323733313634.roa
Signing time:             Sat 24 Oct 2026 06:43:12 +0000
ROA not before:           Sat 24 Oct 2026 06:38:12 +0000
ROA not after:            Sat 23 Oct 2027 06:43:12 +0000
asID:                     273164
IP address blocks:        186.5.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:b2:3d:cb:8a:80:bf:5d:2b:9d:f7:2c:ec:f9:c2:52:ec:b1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Oct 24 06:38:12 2026 GMT
            Not After : Oct 23 06:43:12 2027 GMT
        Subject: CN=27EA8DF8120105D55B76F095204545C0A6FB9540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:12:c3:2b:aa:4a:6f:cb:cf:c1:40:1a:f4:
                    d9:fe:1b:b0:3e:2b:ff:89:51:63:47:6e:96:3d:5b:
                    f2:9c:f6:41:83:ac:77:7b:b4:2a:27:2a:d3:fb:9b:
                    72:b5:0c:b3:a4:b4:97:89:80:81:8e:0f:20:af:12:
                    41:bd:b4:f1:55:d3:14:9e:da:48:46:cb:40:d8:c4:
                    da:15:69:e1:16:0e:aa:34:d6:1f:89:5d:3a:ee:56:
                    d0:06:cb:3f:e2:2d:40:1c:c6:44:01:a7:e8:f6:90:
                    12:f7:14:66:94:d0:39:a3:0e:08:a0:4c:67:d0:6c:
                    ba:d5:13:34:d2:08:84:d0:41:67:a6:e1:f8:d1:26:
                    44:ce:8f:c1:22:f8:d3:00:0c:9d:77:04:7a:ab:b5:
                    98:bd:c9:24:a4:b5:5e:d1:9b:66:5c:2d:01:60:94:
                    1f:d6:17:b0:22:cb:30:36:37:3c:b7:d6:29:3e:66:
                    21:7a:08:c7:0d:01:31:42:df:b8:f3:27:36:72:cf:
                    eb:79:c0:34:a4:8b:8a:25:c8:07:54:37:d7:a0:d9:
                    54:cd:f0:ac:8b:e2:92:de:36:8e:fa:f6:26:9b:fd:
                    62:3b:9b:80:fe:9f:01:4d:60:1e:47:c5:8a:a8:49:
                    df:f7:45:ae:5a:ba:7b:e3:38:03:65:61:25:29:e8:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:8D:F8:12:01:05:D5:5B:76:F0:95:20:45:45:C0:A6:FB:95:40
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231312e302f32342d3234203d3e20323733313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:89:98:7d:fb:81:70:6a:31:6c:18:7a:bc:4e:2f:aa:e1:
         c3:49:c0:88:d5:52:a5:65:47:6a:a1:25:d8:2f:0a:94:1c:8a:
         27:23:d8:c1:e5:24:6f:32:34:b1:9e:8c:e6:db:67:4d:f9:3d:
         e0:b3:d8:40:39:01:20:11:3a:a8:81:7f:d7:25:4b:04:9d:48:
         7a:8c:f1:2c:8b:75:e0:06:2b:83:cb:fc:02:b0:ac:6a:c7:1c:
         4d:d2:75:76:f8:7e:f9:c0:83:ef:7b:c0:2c:08:51:6b:3d:c2:
         2f:fa:bc:4c:39:e3:ba:48:96:19:df:ec:97:e2:04:89:f6:21:
         e8:ff:6a:7f:0b:98:84:6b:b0:8a:50:5e:42:85:ef:16:a1:63:
         63:de:0c:4b:29:4f:14:94:9f:6a:22:77:46:fa:79:df:e5:e2:
         a3:2b:e8:34:bf:1c:21:2f:43:cf:ed:cc:84:ee:74:47:98:50:
         17:5f:c6:1e:31:7a:23:17:b2:30:d8:b3:4e:ef:f0:c9:b0:80:
         0b:6d:9c:08:a4:6d:87:e8:9f:b5:09:8b:99:d1:93:b2:d4:88:
         cb:23:ab:83:72:34:03:18:dc:16:cd:3b:f6:69:cc:c3:cc:36:
         4a:53:7b:50:42:50:31:2f:63:27:3d:53:17:80:98:eb:f2:6c:
         a2:96:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:54:25 2026 by rpki-client