Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa
File:                     3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa (raw, json)
Hash identifier:          3KzoP5JeBESVi24UnSLPEAC9M8PM6KRcTxGwSbiLHL4=
Subject key identifier:   6F:8E:43:EB:CF:1B:E6:2D:4F:95:C9:7E:7B:EE:57:F7:EA:36:B6:BC
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       41CDD59B53347E0014445E65241EEC24A155F781
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa
Signing time:             Tue 26 May 2026 16:44:07 +0000
ROA not before:           Tue 26 May 2026 16:39:07 +0000
ROA not after:            Tue 25 May 2027 16:44:07 +0000
asID:                     27660
IP address blocks:        186.190.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cd:d5:9b:53:34:7e:00:14:44:5e:65:24:1e:ec:24:a1:55:f7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: May 26 16:39:07 2026 GMT
            Not After : May 25 16:44:07 2027 GMT
        Subject: CN=6F8E43EBCF1BE62D4F95C97E7BEE57F7EA36B6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:d3:93:66:76:de:d9:96:2e:ec:94:91:20:
                    7a:47:5e:39:be:ff:84:d8:c1:a7:85:0c:ed:96:5b:
                    91:2e:76:ce:d7:e5:fb:01:aa:6c:f1:82:97:5d:74:
                    36:48:44:f1:80:c8:db:aa:81:85:24:08:f1:8b:e7:
                    bd:7c:86:d5:83:9f:93:09:09:3e:03:27:0a:52:ca:
                    d7:ad:b2:4b:6d:f1:ba:87:5f:64:3d:20:6d:b2:47:
                    09:12:e3:cb:4a:41:74:f9:25:7c:84:8d:b7:72:96:
                    e1:17:ee:04:a2:b8:0e:72:dd:c1:8d:44:f8:95:5f:
                    d7:c9:c5:03:92:e5:7f:eb:43:11:ab:fa:64:9a:3e:
                    ee:09:fb:5b:5c:28:77:72:8a:3c:e7:4e:ca:06:79:
                    ec:08:d0:bd:bb:19:d3:4c:b4:69:18:c1:ee:c7:71:
                    a4:49:b0:df:e8:7e:71:86:21:9a:93:93:43:b9:a8:
                    ee:17:63:76:1a:cc:6f:90:2a:08:63:87:37:7f:02:
                    5c:2e:1a:1c:f6:e2:59:8a:17:0d:93:d1:2f:77:e8:
                    4b:83:c0:c3:8a:3a:5e:68:6d:a5:be:29:23:02:76:
                    87:f3:07:22:b8:b6:35:5a:06:60:99:51:36:ec:07:
                    f7:c5:75:95:85:b9:b9:0c:95:2f:21:6e:f4:79:1d:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8E:43:EB:CF:1B:E6:2D:4F:95:C9:7E:7B:EE:57:F7:EA:36:B6:BC
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:92:d2:1f:ab:25:fd:af:cd:02:e3:c8:c5:74:95:ee:69:
         cf:80:66:e1:c1:fd:80:29:ee:d2:40:84:3a:42:0b:26:0d:e0:
         c9:c4:95:77:cc:15:fa:52:f2:32:95:50:13:c1:57:67:e0:d3:
         1f:02:2e:c2:d0:83:ac:70:ae:50:f4:20:97:be:0a:07:30:63:
         94:fd:a8:64:f3:73:02:93:0e:9c:57:09:49:0d:94:b2:b3:86:
         c0:ef:6d:40:bf:71:4e:b6:3b:a3:42:76:cb:53:d9:a6:ae:1c:
         53:70:b6:3c:76:9d:2b:fa:fe:a6:ab:4a:81:2f:96:a3:f9:1c:
         b9:90:38:56:1a:ea:a8:5d:1a:55:50:d8:6b:d3:f8:65:c7:11:
         10:46:1b:8c:da:3c:7c:25:ba:9e:ad:9a:80:f4:60:5d:55:61:
         7a:84:e9:d1:82:d1:bb:6c:b5:e9:d1:35:9f:4b:2e:00:3f:9e:
         24:6e:2e:ec:41:c6:fe:24:f1:9e:41:75:ca:41:aa:0b:38:c5:
         54:0a:0a:6f:16:9f:f8:61:81:19:08:a3:86:6c:53:25:77:20:
         d0:b0:26:f5:aa:2d:38:b8:65:52:7c:05:67:c2:12:7f:ae:13:
         5e:45:1b:62:c6:50:01:cc:23:1b:6d:d0:6d:51:1f:9c:48:5c:
         7f:02:f8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:13:36 2026 by rpki-client