Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3235352e302f32342d3234203d3e20323639383739.roa
File:                     3138362e312e3235352e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          w89CQLdRb2lhPuIjc7KwYIylnPAy26o2NyVYsyKSgwM=
Subject key identifier:   A7:6E:04:6D:D2:5C:8E:BA:86:71:F3:96:BA:01:30:ED:45:8E:ED:B9
Certificate issuer:       /CN=5CF345A906A56B23EAB682075391A3046AE12C48
Certificate serial:       5694B03A00B142F5EB22B8D33726143A5106D950
Authority key identifier: 5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3235352e302f32342d3234203d3e20323639383739.roa
Signing time:             Thu 08 Oct 2026 23:25:00 +0000
ROA not before:           Thu 08 Oct 2026 23:20:00 +0000
ROA not after:            Thu 07 Oct 2027 23:25:00 +0000
asID:                     269879
IP address blocks:        186.1.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:94:b0:3a:00:b1:42:f5:eb:22:b8:d3:37:26:14:3a:51:06:d9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF345A906A56B23EAB682075391A3046AE12C48
        Validity
            Not Before: Oct  8 23:20:00 2026 GMT
            Not After : Oct  7 23:25:00 2027 GMT
        Subject: CN=A76E046DD25C8EBA8671F396BA0130ED458EEDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:a0:62:39:7c:54:86:26:eb:a2:34:3e:ab:
                    b2:fa:2f:83:ab:23:d8:b1:36:c5:b9:5d:1c:de:eb:
                    d5:53:8c:65:39:b9:47:6f:65:e3:88:d5:d7:69:93:
                    37:7f:06:46:1b:72:62:77:c9:85:1a:54:f6:7a:8f:
                    b7:fe:4b:94:5d:21:70:bb:97:d7:b7:dc:ad:77:4d:
                    f6:a1:6b:bb:b4:ae:14:21:12:a1:fd:a5:a4:94:5b:
                    32:6d:6b:2b:ad:58:72:38:af:d6:2d:91:05:97:66:
                    06:96:7d:e6:25:3e:7f:b8:1e:48:12:0f:2f:d3:e9:
                    06:72:48:e3:28:42:ff:bb:a3:c3:a0:db:a2:2d:d2:
                    8b:d9:77:2a:7c:f6:f0:9c:eb:46:8a:a9:c6:97:90:
                    d8:3b:6a:78:ab:c4:0b:ac:65:ca:40:3a:83:90:4f:
                    1d:6e:45:e4:25:a2:63:e0:42:fa:82:a5:98:90:59:
                    49:1a:39:23:60:5e:2f:0a:19:eb:7d:04:ad:4c:c2:
                    78:ba:8d:55:e4:57:71:0f:02:67:ce:73:97:34:d7:
                    5b:e9:33:cf:0d:26:d6:df:e9:9c:92:66:f0:53:e3:
                    55:a7:36:b0:9d:09:75:37:6f:75:41:a4:9f:5c:c7:
                    fc:de:2b:01:e4:a8:68:1b:fd:f6:31:1f:05:48:65:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:04:6D:D2:5C:8E:BA:86:71:F3:96:BA:01:30:ED:45:8E:ED:B9
            X509v3 Authority Key Identifier:
                keyid:5C:F3:45:A9:06:A5:6B:23:EA:B6:82:07:53:91:A3:04:6A:E1:2C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/5CF345A906A56B23EAB682075391A3046AE12C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CF345A906A56B23EAB682075391A3046AE12C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3235352e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e7:6f:c9:80:77:1e:b6:13:72:7e:ca:5d:d2:0c:93:c9:e5:
         c8:f9:d3:4e:67:1f:dc:13:1a:05:38:42:10:7f:34:54:c1:e2:
         4c:d7:ea:2b:dc:a8:39:f8:8e:3e:39:df:ab:4a:5f:ba:81:80:
         55:ee:05:db:12:df:5d:a1:67:5f:53:7a:de:da:14:6f:8a:22:
         52:c2:ed:86:6e:77:fc:9c:41:8a:04:e2:29:08:d5:7b:94:73:
         b0:70:09:76:7c:cb:b3:ef:1b:f1:7d:dd:ed:f2:14:f2:9b:e8:
         57:2d:9b:a7:1f:13:9a:81:61:39:2e:bb:f2:35:41:3d:2a:62:
         ed:fb:f6:ca:8d:1a:cb:a2:04:0a:ed:60:bc:91:2d:f1:76:41:
         7c:f5:fb:ef:dc:a6:2e:7f:ae:94:b0:6e:37:81:2d:e3:70:30:
         bb:5f:bb:b8:99:2d:6c:1e:dd:9b:57:37:b1:5b:80:71:74:ca:
         f9:80:ba:99:f3:08:51:7f:ea:73:99:0d:83:b7:74:94:9e:0e:
         e7:9a:6a:c1:c6:c1:67:41:ce:91:d8:8d:f3:61:b6:f8:98:19:
         88:4c:45:96:a3:7a:ae:93:4f:ec:d4:83:bb:67:fb:a2:4a:b6:
         db:0b:99:bd:e2:4b:db:68:cc:19:0d:3c:12:a7:87:77:bd:58:
         32:dc:4c:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVpSwOgCxQvXrIrjTNyYUOlEG2VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGMzQ1QTkwNkE1NkIyM0VBQjY4MjA3NTM5MUEzMDQ2
QUUxMkM0ODAeFw0yNjEwMDgyMzIwMDBaFw0yNzEwMDcyMzI1MDBaMDMxMTAvBgNV
BAMTKEE3NkUwNDZERDI1QzhFQkE4NjcxRjM5NkJBMDEzMEVENDU4RUVEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKKBiOXxUhibrojQ+q7L6L4Or
I9ixNsW5XRze69VTjGU5uUdvZeOI1ddpkzd/BkYbcmJ3yYUaVPZ6j7f+S5RdIXC7
l9e33K13Tfaha7u0rhQhEqH9paSUWzJtayutWHI4r9YtkQWXZgaWfeYlPn+4HkgS
Dy/T6QZySOMoQv+7o8Og26It0ovZdyp89vCc60aKqcaXkNg7anirxAusZcpAOoOQ
Tx1uReQlomPgQvqCpZiQWUkaOSNgXi8KGet9BK1Mwni6jVXkV3EPAmfOc5c011vp
M88NJtbf6ZySZvBT41WnNrCdCXU3b3VBpJ9cx/zeKwHkqGgb/fYxHwVIZW1NAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUp24EbdJcjrqGcfOWugEw7UWO7bkwHwYDVR0j
BBgwFoAUXPNFqQalayPqtoIHU5GjBGrhLEgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQkQ2QkU4MTY2QjYxNDUwQzAxOTY2NDkzOEZFNkI3ODI5
MEFDMUMzQzI5Mzk4NzA4RDI2QkY5QTZEMzlDMjJDLzAvNUNGMzQ1QTkwNkE1NkIy
M0VBQjY4MjA3NTM5MUEzMDQ2QUUxMkM0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Q0YzNDVBOTA2QTU2QjIzRUFC
NjgyMDc1MzkxQTMwNDZBRTEyQzQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkJENkJFODE2NkI2MTQ1MEMwMTk2NjQ5MzhGRTZCNzgyOTBBQzFDM0My
OTM5ODcwOEQyNkJGOUE2RDM5QzIyQy8wLzMxMzgzNjJlMzEyZTMyMzUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALoB/zAN
BgkqhkiG9w0BAQsFAAOCAQEAHOdvyYB3HrYTcn7KXdIMk8nlyPnTTmcf3BMaBThC
EH80VMHiTNfqK9yoOfiOPjnfq0pfuoGAVe4F2xLfXaFnX1N63toUb4oiUsLthm53
/JxBigTiKQjVe5RzsHAJdnzLs+8b8X3d7fIU8pvoVy2bpx8TmoFhOS678jVBPSpi
7fv2yo0ay6IECu1gvJEt8XZBfPX779ymLn+ulLBuN4Et43Awu1+7uJktbB7dm1c3
sVuAcXTK+YC6mfMIUX/qc5kNg7d0lJ4O55pqwcbBZ0HOkdiN82G2+JgZiExFlqN6
rpNP7NSDu2f7okq22wuZveJL22jMGQ08EqeHd71YMtxMbw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:18:43 2026 by rpki-client