Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          RbVSnSCCqwSBxztYQXPkZYHYBoHlfFdyhl1Kz4FHBY8=
Subject key identifier:   59:52:C4:24:2F:53:4B:5D:88:F2:79:06:A6:48:4D:67:A9:4D:5A:D1
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       6345C3BFA401F7FB8061921E2B35E6A8542952AB
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa
Signing time:             Fri 24 Oct 2025 20:50:55 +0000
ROA not before:           Fri 24 Oct 2025 20:45:55 +0000
ROA not after:            Fri 23 Oct 2026 20:50:55 +0000
asID:                     22927
IP address blocks:        186.141.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:45:c3:bf:a4:01:f7:fb:80:61:92:1e:2b:35:e6:a8:54:29:52:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct 24 20:45:55 2025 GMT
            Not After : Oct 23 20:50:55 2026 GMT
        Subject: CN=5952C4242F534B5D88F27906A6484D67A94D5AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:73:51:4b:a6:3d:2c:b1:eb:cf:bc:a5:48:
                    d3:bf:e8:84:13:be:ed:a2:fb:ae:0d:14:c9:92:09:
                    20:41:9a:b9:b6:b8:4b:c6:02:48:96:e9:36:96:d0:
                    60:cc:f8:8c:70:dd:e6:d4:21:87:e1:c2:94:bd:bd:
                    c0:e7:78:3f:92:df:1d:2c:7f:48:29:e8:6f:5d:39:
                    e3:87:9d:c2:88:fa:8a:21:15:80:fa:47:5d:8c:ec:
                    ef:15:1a:ba:30:2b:2b:c2:19:63:b8:e5:c9:4f:23:
                    9c:9f:24:ab:32:4d:b6:7d:93:c2:d5:20:ce:2c:d2:
                    ee:3c:f1:a2:95:d0:87:71:bc:2c:a9:30:a4:ea:e6:
                    90:53:72:07:84:12:24:44:ff:ea:65:c6:2e:db:10:
                    d1:67:2c:9f:e5:95:e5:f8:b6:65:6b:d0:d6:f9:5e:
                    7e:93:cc:31:7a:a7:ba:af:0d:65:1f:cd:c4:ff:1d:
                    3d:fa:57:bf:cd:6f:fa:a9:0c:e9:2f:4c:ce:42:d5:
                    bf:27:76:5e:cf:8d:65:12:25:09:5a:25:a1:f1:29:
                    d2:92:97:fe:a2:cd:b1:ab:99:ca:7a:83:54:ca:36:
                    b7:cc:d3:b2:62:36:f2:61:97:39:43:c2:f2:a0:34:
                    ea:91:47:79:77:d1:f1:ce:a2:4a:c5:55:14:df:c9:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:C4:24:2F:53:4B:5D:88:F2:79:06:A6:48:4D:67:A9:4D:5A:D1
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:4e:35:bc:40:99:9e:15:11:e6:72:c0:d8:fc:85:ac:b1:76:
         d7:34:1c:d0:b5:21:17:21:8b:f6:f7:29:06:62:b5:c9:73:86:
         a7:e2:c3:9b:6e:a4:d2:69:14:ee:98:0e:38:06:f1:dd:8e:50:
         c9:4e:76:49:0a:d4:a1:60:c8:96:6b:6f:0b:0c:08:a4:fd:fa:
         a9:37:2f:1a:ff:1f:3b:9b:40:3a:57:a2:47:97:67:5d:82:07:
         fe:fc:d7:49:ab:fe:65:3a:81:16:63:d8:a1:dd:59:e7:8c:ba:
         1d:0a:2b:9c:bf:1d:4b:a4:c6:10:27:36:6e:0f:36:61:9a:fd:
         65:98:67:44:8f:f9:de:e1:c4:e2:c9:97:0f:e9:07:3f:47:55:
         6f:6f:c6:3b:06:53:7e:15:41:e6:bb:41:66:a1:30:5e:df:6b:
         45:90:cd:33:1f:e5:24:a1:e3:3b:7d:4f:9e:ae:eb:aa:56:5a:
         10:69:87:33:43:c0:da:db:be:cb:8c:a0:75:bf:0a:79:25:83:
         59:4b:0a:9f:3e:fb:15:74:c5:ab:d2:5b:43:51:22:75:76:3c:
         d1:db:15:82:c7:f8:23:3b:87:a6:ed:9a:30:ab:5e:65:2b:a0:
         8a:e6:fe:7b:70:ff:28:e9:45:64:cc:4d:50:08:b5:84:cc:dd:
         cb:4f:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 01:11:29 2025 by rpki-client