Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          O5IyKr+vqHn+ynBEU+4bxLlO0AWB+931zOVaBXKgO4g=
Subject key identifier:   5E:D2:29:8C:FA:2F:11:A5:6F:0E:EE:09:1E:67:5D:81:B0:8B:DB:76
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       6E44B056B5696BA6FA5F8B58B6945669769B642F
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 19 Aug 2026 18:26:04 +0000
ROA not before:           Wed 19 Aug 2026 18:21:04 +0000
ROA not after:            Wed 18 Aug 2027 18:26:04 +0000
asID:                     22927
IP address blocks:        186.141.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:44:b0:56:b5:69:6b:a6:fa:5f:8b:58:b6:94:56:69:76:9b:64:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Aug 19 18:21:04 2026 GMT
            Not After : Aug 18 18:26:04 2027 GMT
        Subject: CN=5ED2298CFA2F11A56F0EEE091E675D81B08BDB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:91:1f:8f:32:dd:f3:30:59:9e:43:9a:60:
                    b1:b2:71:fc:37:b0:11:f3:69:72:7c:e2:d0:14:35:
                    70:bf:b9:38:1f:9d:ea:26:22:32:f1:b9:39:9d:7c:
                    71:95:a1:68:2a:a8:1c:eb:49:93:b5:0a:a7:68:f1:
                    63:27:b2:6d:f8:19:8f:10:bc:2b:d4:6f:8d:ec:69:
                    1c:7e:43:a1:9d:d6:81:21:03:39:ba:15:82:a7:ef:
                    4a:12:31:7a:2c:92:14:be:1a:e2:1e:c9:38:1d:69:
                    7f:27:f4:17:dd:28:6d:42:f3:51:3c:be:83:d7:13:
                    05:73:d3:70:e7:40:16:5e:81:cb:c4:d0:95:d3:1a:
                    e9:f1:f3:b6:50:4f:20:54:f9:73:de:68:15:e6:cf:
                    32:b1:4b:37:bb:d8:c7:af:48:83:d3:82:c8:50:b5:
                    23:43:c3:be:38:67:bd:04:67:8f:e6:f2:65:11:0e:
                    55:21:8a:a5:c5:ee:9a:1d:d0:a5:ee:87:25:f4:cf:
                    84:4f:75:51:10:da:cc:c0:ae:16:1f:d8:d3:d3:55:
                    83:7c:e7:96:59:67:dd:26:b1:4b:6b:67:ac:56:c9:
                    ab:3f:69:57:2f:f6:99:df:c7:49:7d:8c:87:0d:6c:
                    24:d3:b4:ea:74:3e:98:ac:bf:31:88:f1:f7:ac:d2:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:29:8C:FA:2F:11:A5:6F:0E:EE:09:1E:67:5D:81:B0:8B:DB:76
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:3f:1a:2c:41:f4:b4:66:d6:ed:73:f7:f6:6a:c4:16:21:
         23:67:bd:ad:a7:21:74:8f:6b:e9:a2:a9:74:9e:0d:7f:39:f3:
         33:06:eb:6e:33:14:e7:d1:e4:b6:8b:45:e8:9b:9b:33:5d:0b:
         cd:88:c7:56:91:63:31:c9:94:88:8a:52:88:6e:53:5c:bc:e9:
         33:43:1a:61:f6:df:3a:0c:c4:66:e2:c7:51:a7:5d:1b:7b:d9:
         62:47:37:90:cd:5f:30:f4:b8:61:37:cd:7f:18:cb:0f:5b:f5:
         74:b2:a7:fd:fe:d9:ea:6d:3a:3e:5f:48:2e:81:54:01:9a:5a:
         5d:ec:46:ef:71:10:66:ef:93:3f:eb:0a:b1:4b:a3:42:a7:39:
         73:3e:56:50:09:f9:b8:53:58:0b:9e:a2:8b:d2:50:8e:d6:40:
         09:1f:20:91:59:d7:5b:14:74:ff:c5:e0:df:17:dd:23:17:6e:
         29:a1:06:57:37:cb:cd:94:49:08:95:7c:60:de:3c:08:fd:f3:
         f2:67:a7:e7:1c:16:5f:de:d2:d2:b9:df:2d:ab:26:21:51:9d:
         04:0c:65:08:5b:8d:2e:20:dc:f5:6e:39:fa:a2:0d:87:32:d2:
         c4:86:27:f0:2b:da:49:10:01:ee:c9:b4:d4:7c:c8:84:3c:70:
         80:a1:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:46:03 2026 by rpki-client