Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa
File:                     3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa (raw, json)
Hash identifier:          mgL92AgYhroFDZhdbv6kKB4zsyocCPWvVwH8q7wRjPk=
Subject key identifier:   EF:EE:17:8B:62:DF:3C:2A:3E:BD:2C:8A:80:8B:18:FE:AE:00:3C:1D
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       6D7C5348295D410DAA7F1AED4E98254AB4D76E8D
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa
Signing time:             Thu 26 Mar 2026 21:36:08 +0000
ROA not before:           Thu 26 Mar 2026 21:31:08 +0000
ROA not after:            Thu 25 Mar 2027 21:36:08 +0000
asID:                     270023
IP address blocks:        186.148.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 03:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7c:53:48:29:5d:41:0d:aa:7f:1a:ed:4e:98:25:4a:b4:d7:6e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Mar 26 21:31:08 2026 GMT
            Not After : Mar 25 21:36:08 2027 GMT
        Subject: CN=EFEE178B62DF3C2A3EBD2C8A808B18FEAE003C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:d7:7b:89:70:68:4f:11:de:6e:5f:cd:77:
                    e0:1a:ef:b2:7d:78:f1:13:05:fc:34:85:be:68:00:
                    99:3e:56:8f:1e:bb:71:1f:b0:49:6a:7c:66:ec:98:
                    b0:27:01:72:34:af:f8:77:37:bb:5e:c6:4b:91:40:
                    da:c9:ae:0a:51:0a:7c:61:c9:ad:1d:bf:2d:bb:4d:
                    5c:3d:f6:bb:b4:24:ba:b4:b0:10:d6:af:c4:d8:68:
                    b3:1e:54:74:d7:9a:ec:90:1b:59:9f:46:ad:39:26:
                    fc:50:8f:7a:02:bd:f9:f1:eb:1e:4c:0e:6f:f5:5b:
                    0c:65:76:55:cd:0c:a9:74:51:31:65:4a:1b:12:a2:
                    b5:0b:80:03:dd:b7:54:f8:02:3a:2c:9a:3c:b8:c7:
                    c7:ff:a7:c3:fb:1e:29:8e:e6:57:9f:55:9b:f2:e1:
                    e0:86:8b:95:74:ba:7a:fe:4a:70:57:3f:c8:6a:fb:
                    25:2c:eb:f5:3c:64:b5:4b:bb:ae:fb:3e:ad:b4:42:
                    01:09:d3:96:4e:98:44:51:7d:62:48:83:bd:86:ed:
                    f9:53:14:8e:09:0e:ff:f1:9e:8c:3a:ee:08:ec:05:
                    81:9c:33:96:5d:31:e0:d8:2f:3c:e9:8d:c5:43:01:
                    d2:69:7b:de:6e:7e:af:b6:fd:df:d7:34:3e:a4:00:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:17:8B:62:DF:3C:2A:3E:BD:2C:8A:80:8B:18:FE:AE:00:3C:1D
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:d7:93:a8:39:aa:70:b1:22:a7:89:06:81:c3:87:4d:1c:
         46:29:e3:75:f9:41:46:87:94:d1:9e:51:a0:f6:33:66:20:5e:
         4c:6b:45:36:9d:c4:4a:a9:59:2d:7a:45:3e:67:25:6c:fd:11:
         22:01:f0:49:4d:6b:9a:9c:ee:88:86:c3:a7:66:97:d0:72:49:
         98:d4:47:a4:e1:2d:4a:2e:fd:22:70:52:33:a2:56:d7:31:e7:
         b8:72:a2:2e:2e:42:b2:60:7e:c9:38:cd:50:57:6a:07:33:2c:
         23:9d:b2:23:87:b8:15:a9:8f:bf:f5:57:68:34:75:9e:89:31:
         04:fe:a7:fb:41:de:4e:5d:b5:d4:32:38:23:9b:10:4a:5e:ea:
         ef:69:6b:d2:d9:1e:8d:3f:20:48:63:da:00:a1:01:fc:d1:aa:
         be:f7:8d:04:1c:fc:d0:1a:bd:55:b5:74:f1:a1:b7:ec:10:dd:
         77:42:0e:c3:a8:26:89:89:33:87:1c:29:29:29:d2:1c:85:b3:
         a7:31:f4:cc:b5:a9:9a:f6:f0:57:69:7c:96:8b:43:1e:d2:08:
         92:29:b2:4f:2e:5a:ad:e0:a4:86:5c:9f:9f:96:fd:69:3f:6f:
         11:a9:7a:e3:77:ec:20:56:1f:28:52:91:fd:10:f7:99:c2:2f:
         95:32:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:03:57 2026 by rpki-client