Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32342d3234203d3e20323639383739.roa
File:                     3138362e312e3234382e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          WNRNU3TGH5jfb++ESq5cS5kvpue4ESL82ox4hXQsgx0=
Subject key identifier:   3C:61:5B:48:63:09:97:E9:B6:0D:AA:F8:AA:E4:3F:F7:29:EF:A9:CB
Certificate issuer:       /CN=5CF345A906A56B23EAB682075391A3046AE12C48
Certificate serial:       5F0977023FEFEFE6AD89FE6D6DB0F2C82F60998B
Authority key identifier: 5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32342d3234203d3e20323639383739.roa
Signing time:             Thu 08 Oct 2026 23:25:02 +0000
ROA not before:           Thu 08 Oct 2026 23:20:02 +0000
ROA not after:            Thu 07 Oct 2027 23:25:02 +0000
asID:                     269879
IP address blocks:        186.1.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:77:02:3f:ef:ef:e6:ad:89:fe:6d:6d:b0:f2:c8:2f:60:99:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF345A906A56B23EAB682075391A3046AE12C48
        Validity
            Not Before: Oct  8 23:20:02 2026 GMT
            Not After : Oct  7 23:25:02 2027 GMT
        Subject: CN=3C615B48630997E9B60DAAF8AAE43FF729EFA9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:44:2b:a8:c1:ca:fe:85:bb:c2:78:16:9b:
                    2b:6d:f0:eb:bf:d9:2f:91:24:e9:f7:5c:b5:56:a1:
                    15:f7:a4:69:e1:68:f3:0d:27:48:6c:62:6f:ec:a7:
                    71:66:a0:8c:94:9c:28:1f:18:e9:ce:0e:80:3a:d3:
                    72:ab:2d:8c:7b:31:c3:8c:26:d8:d4:0b:bc:e5:55:
                    3f:3a:c6:60:0f:79:61:e0:ac:cc:b0:9d:3d:f8:06:
                    30:6e:ce:4c:89:0d:3b:cd:5b:0b:16:07:59:46:c9:
                    2c:87:a6:32:5e:32:a8:91:c6:32:ee:3e:a5:ac:36:
                    08:94:0e:b9:bd:20:e1:6b:1d:28:c7:17:ff:07:ab:
                    49:31:e5:42:7b:05:b6:ed:c1:8b:f6:28:90:71:55:
                    e3:0d:0c:2a:f9:08:c7:c9:cd:c4:bb:fd:1a:a5:03:
                    fc:23:db:69:23:51:91:f1:0f:eb:31:49:05:1f:b6:
                    ec:48:a9:51:7b:3d:a9:a1:56:70:0e:c8:bd:98:21:
                    85:6e:f3:8a:43:b6:5a:05:c5:0c:8b:64:cf:a7:d9:
                    14:14:7d:3c:15:81:7c:24:74:68:4d:a4:40:05:00:
                    0a:ba:3a:57:97:c4:eb:8f:83:b1:c4:4b:92:0d:8c:
                    f2:88:61:0c:b3:81:92:d8:5b:0f:6e:48:cd:19:f9:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:5B:48:63:09:97:E9:B6:0D:AA:F8:AA:E4:3F:F7:29:EF:A9:CB
            X509v3 Authority Key Identifier:
                keyid:5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:40:27:56:ea:40:12:51:6b:14:01:09:04:46:81:76:3e:c0:
         2b:f6:a6:2c:a4:af:ca:80:cd:5e:ea:e6:5b:3e:87:90:2e:c8:
         9c:ad:05:e9:c7:01:9a:e4:52:de:d7:7c:c5:b9:52:66:0b:a8:
         04:44:0f:fb:67:23:8f:88:51:83:94:55:96:63:b0:b7:5a:18:
         fd:69:99:a6:eb:d4:7a:5b:4b:44:dd:1a:ac:25:78:fe:f8:b2:
         f1:0c:f6:7b:f9:27:8a:44:81:43:f6:d2:c8:fa:f6:59:ce:7c:
         ff:55:ea:2b:ff:b9:43:03:52:27:68:8d:06:eb:84:49:2b:71:
         a9:7e:70:3f:18:60:26:a4:8d:93:40:eb:cb:1f:6d:5e:fd:35:
         cf:ee:b9:cd:d8:a9:05:1d:59:5b:b7:e1:c8:a3:dc:fd:63:18:
         cc:59:89:e0:4a:16:6f:67:66:85:39:60:73:d0:37:08:e6:d9:
         79:a2:26:a9:01:db:c9:f0:0b:55:bc:be:ca:70:c4:41:8c:7a:
         2a:3e:b3:14:f0:5e:35:1d:20:7d:08:24:f3:f7:1f:72:62:54:
         bf:31:0d:42:03:a9:fa:db:ea:0f:1c:ef:54:72:e8:9a:31:db:
         03:bc:db:9f:1f:35:c4:aa:7d:87:06:8b:e6:73:4b:66:ce:46:
         35:96:36:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:18:54 2026 by rpki-client