Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa
File:                     3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa (raw, json)
Hash identifier:          mfGYN5bOXc2nHdU6IPQ9VDNJwk5bbpCWpC1QAj0mnic=
Subject key identifier:   99:91:61:D8:DB:97:B7:E8:1B:96:0A:22:23:FF:26:30:6E:3E:E8:9F
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       680F6155D9C93720EAFFB91148AF54DA090D89AA
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa
Signing time:             Sun 19 Apr 2026 12:39:19 +0000
ROA not before:           Sun 19 Apr 2026 12:34:19 +0000
ROA not after:            Sun 18 Apr 2027 12:39:19 +0000
asID:                     274119
IP address blocks:        186.0.224.16/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 May 2026 01:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0f:61:55:d9:c9:37:20:ea:ff:b9:11:48:af:54:da:09:0d:89:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Apr 19 12:34:19 2026 GMT
            Not After : Apr 18 12:39:19 2027 GMT
        Subject: CN=999161D8DB97B7E81B960A2223FF26306E3EE89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:61:49:a2:ca:40:62:e1:02:7a:a2:a4:61:
                    5e:55:5c:de:6a:ca:d8:d1:31:37:95:8b:ce:9a:b5:
                    c0:f8:ef:8c:be:7e:ef:b1:03:f3:a6:dc:1e:a1:e2:
                    d0:b5:38:dc:d3:dc:2d:39:c2:a5:66:ce:9e:95:07:
                    81:82:b2:78:0f:d2:fd:da:dc:8b:6f:c3:c4:4a:0a:
                    e8:3a:a6:76:30:05:2e:20:3e:05:ed:0c:0e:c6:83:
                    f5:87:4d:e6:70:e3:9a:30:7d:d0:4c:be:1b:02:e9:
                    77:3f:b1:6b:e0:75:54:68:24:f7:5c:14:01:f8:70:
                    19:e7:b0:b7:31:58:fe:fc:35:4b:f0:18:18:82:01:
                    25:f7:b4:3c:8f:43:d4:c2:4c:1b:ea:7d:9c:ef:d9:
                    e7:a5:19:83:91:9c:09:e6:0b:a7:04:a6:a1:f6:fd:
                    ce:42:68:88:bb:19:83:e4:a3:58:45:2f:a3:78:b0:
                    0b:79:cc:f6:e5:34:14:aa:64:41:4e:25:9a:81:05:
                    c3:dd:66:6b:97:52:61:a7:b8:b2:83:53:b6:55:4d:
                    a0:5f:88:f8:a7:a2:4c:c8:a5:f7:ad:5b:5d:58:79:
                    c9:57:5d:a8:08:28:38:f3:56:cd:f9:6d:a4:75:e4:
                    71:35:fb:bc:5f:dd:e6:af:fd:86:4c:30:8b:7f:b4:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:61:D8:DB:97:B7:E8:1B:96:0A:22:23:FF:26:30:6E:3E:E8:9F
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.224.16/28

    Signature Algorithm: sha256WithRSAEncryption
         48:d2:3e:84:fb:84:79:03:a5:c1:12:d1:76:a7:1f:fa:a1:bc:
         e6:33:a3:88:96:d8:cf:01:5d:d8:d7:08:22:be:f2:68:92:ce:
         cb:75:77:2c:c5:2f:48:3e:cf:a9:a6:89:a0:7d:39:70:39:c3:
         8d:ac:00:f6:25:af:ad:05:ee:82:c7:0a:92:ae:0e:39:7f:3d:
         1e:54:b2:51:28:c2:68:ca:67:4a:34:71:35:03:47:07:ac:c2:
         b8:3f:0f:a3:8a:6f:f5:ef:d6:00:75:94:4d:ae:9f:b5:bc:2a:
         2e:8b:39:30:9f:1c:14:a4:87:86:19:af:5e:42:38:61:06:57:
         ae:fa:d5:ae:a2:ab:06:85:83:10:fc:4b:78:72:de:46:6e:2d:
         22:e9:fd:ca:2f:93:62:3b:13:b1:a4:8b:1b:a5:3f:e8:d0:be:
         e0:19:6e:0a:5d:b0:3d:51:76:63:d0:5d:7c:31:3e:13:df:14:
         cb:4c:52:6d:ac:7b:a0:63:d3:47:95:2f:5d:3f:15:c9:c1:8a:
         47:ca:a0:58:6c:53:8d:b2:5c:e5:e6:dd:f8:49:bd:25:b3:69:
         10:b9:77:e9:7d:17:a6:ce:ba:24:5d:cb:5b:11:17:68:db:dd:
         95:80:5e:85:8b:31:92:98:e8:d6:dd:50:15:6f:fa:fa:2f:4e:
         64:d2:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:13:36 2026 by rpki-client