Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e39362e302f31392d3139203d3e203237363836.roa
File:                     3135302e3138362e39362e302f31392d3139203d3e203237363836.roa (raw, json)
Hash identifier:          dx2RBfpTlSBolmi4Uj8RJ2EG1idqP8wia0YkgjdvS4A=
Subject key identifier:   70:17:1E:37:6B:3D:C0:9C:B4:72:1C:41:AF:51:71:53:C7:21:73:6B
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       40A51002B88BB9EEB262C9BBB30887DD0A55A7FA
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e39362e302f31392d3139203d3e203237363836.roa
Signing time:             Sun 12 Jul 2026 00:00:00 +0000
ROA not before:           Sat 11 Jul 2026 23:55:00 +0000
ROA not after:            Sun 11 Jul 2027 00:00:00 +0000
asID:                     27686
IP address blocks:        150.186.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 15:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a5:10:02:b8:8b:b9:ee:b2:62:c9:bb:b3:08:87:dd:0a:55:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jul 11 23:55:00 2026 GMT
            Not After : Jul 11 00:00:00 2027 GMT
        Subject: CN=70171E376B3DC09CB4721C41AF517153C721736B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:9c:0c:44:24:0f:8b:57:35:2e:c6:ae:f7:
                    7e:a6:c1:98:9d:a3:4f:ac:f6:f3:34:e6:fa:0c:ba:
                    d8:a1:40:6c:26:c2:c4:26:9a:d9:60:c0:50:ab:4a:
                    b9:3d:7f:92:ee:77:cf:16:50:36:eb:2d:c0:f6:59:
                    f4:cb:93:e7:4e:94:ec:9d:b0:ed:99:66:96:4e:72:
                    d2:c7:1e:cd:8c:5f:46:33:68:b4:7e:4f:d2:3d:d4:
                    a1:2f:26:50:0b:15:8b:9b:dd:7d:30:d7:90:66:ea:
                    d0:5f:fa:e2:61:63:fd:66:dd:6f:b2:f0:bb:ca:9e:
                    d5:eb:7c:2c:ad:9b:d4:e5:56:a6:fd:70:6e:cc:46:
                    01:38:fb:e5:01:fd:9a:67:ca:02:78:6c:6d:9b:cd:
                    c6:63:81:50:7c:64:20:19:a9:1a:3b:d2:a2:17:94:
                    a5:a9:b8:9b:d8:48:a2:36:e7:4f:60:9d:80:2a:e0:
                    33:20:d3:40:57:a2:9d:25:75:79:5b:10:3a:1e:26:
                    17:cb:6a:0e:9b:31:31:66:d1:4b:f3:bb:ba:7b:5c:
                    cb:be:26:e6:2a:bf:46:e8:f0:e3:79:14:10:4a:15:
                    09:ed:4e:f1:d6:1c:76:f0:78:6c:58:9b:8b:1f:c6:
                    7f:45:5d:16:d6:4e:89:b5:e6:9a:b5:ad:08:a2:99:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:1E:37:6B:3D:C0:9C:B4:72:1C:41:AF:51:71:53:C7:21:73:6B
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e39362e302f31392d3139203d3e203237363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:c6:74:c0:32:3e:34:33:8a:5b:f2:1e:36:51:43:43:7c:
         55:84:bd:ee:26:89:70:1c:d9:33:74:b6:cb:96:f1:41:73:b2:
         bc:75:1d:14:8d:98:5d:59:14:d9:9b:63:ea:fe:8b:21:cb:97:
         70:19:cb:0c:44:a2:02:f2:33:b8:5b:13:96:e3:ac:69:0a:f9:
         33:74:91:1c:fe:5f:09:d1:ed:40:74:b3:a9:21:f6:c3:41:30:
         45:21:56:b7:62:19:f3:98:00:4f:a2:6f:75:b0:25:ca:cc:55:
         21:d5:e0:66:3c:e7:10:7c:d8:11:05:40:6e:9e:b5:bc:6c:ee:
         60:1f:b7:e1:bd:d9:5e:d3:76:93:aa:47:07:a7:df:76:44:29:
         3c:4e:53:81:ea:71:92:95:f4:36:bc:a1:40:30:87:a3:ca:41:
         20:e6:96:25:a5:b8:59:15:ab:b4:a9:f6:ce:82:ed:99:85:c1:
         f0:73:ff:2f:a2:80:64:22:fe:6a:d9:7c:86:6f:e9:ae:0b:46:
         00:ff:2a:b8:9a:4b:50:c6:0f:b8:e0:70:43:a6:e4:30:d7:35:
         33:ca:5f:43:dc:00:13:28:d3:ff:31:8b:d2:dc:0a:4c:66:50:
         cd:f0:05:ca:bb:a5:a9:84:b9:34:87:29:f0:5e:76:d4:91:7f:
         e0:34:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:06 2026 by rpki-client