Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e2037343138.roa
File:                     3138362e34312e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          628yKyYeiZIuBN8DT7+RrKZDe8ymSqNTWr4zOjU+KIY=
Subject key identifier:   54:B0:2B:D8:F5:88:35:FA:68:21:00:8D:16:4C:6F:F7:FF:00:A8:DA
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       7CBF1253F999E5703DE3ED13E5CED637DFFB358C
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e2037343138.roa
Signing time:             Thu 24 Sep 2026 21:36:36 +0000
ROA not before:           Thu 24 Sep 2026 21:31:36 +0000
ROA not after:            Thu 23 Sep 2027 21:36:36 +0000
asID:                     7418
IP address blocks:        186.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:12:53:f9:99:e5:70:3d:e3:ed:13:e5:ce:d6:37:df:fb:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Sep 24 21:31:36 2026 GMT
            Not After : Sep 23 21:36:36 2027 GMT
        Subject: CN=54B02BD8F58835FA6821008D164C6FF7FF00A8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:d8:70:5d:17:6d:54:15:08:fe:a3:22:46:
                    67:b4:3f:c8:05:a2:03:df:ee:52:46:8c:0d:62:dd:
                    d2:d3:16:6e:c4:78:aa:cc:ef:b4:f7:46:dd:2a:35:
                    87:c0:f7:33:ca:94:bb:fd:21:35:32:de:86:bc:2f:
                    48:31:01:f2:74:f4:43:88:79:96:da:23:04:00:09:
                    9a:a4:59:6f:7d:0a:38:cf:1f:27:c7:e5:a6:4b:96:
                    f0:5d:1d:69:d0:00:3e:75:34:eb:68:5c:ab:e9:2f:
                    c1:7a:db:b4:1e:95:c7:69:55:e8:94:6c:64:ad:13:
                    84:31:8f:05:c1:c2:7c:2b:4d:17:04:7e:e2:5c:0f:
                    18:b9:53:f6:37:fb:11:db:fe:9c:a4:de:c6:27:ed:
                    90:44:76:c9:c0:e1:82:31:97:c8:87:44:8a:ff:2c:
                    85:83:8e:5b:ad:11:e7:c4:54:a3:5f:0c:4c:63:50:
                    6f:d6:69:5b:0f:a7:db:74:2d:fa:22:fd:8e:5a:20:
                    2c:e2:1c:35:7f:84:f2:0c:00:33:bb:8a:68:65:48:
                    37:f2:26:6f:80:9c:f0:fe:b9:5d:8b:81:ae:77:35:
                    3f:f5:76:fb:fa:00:01:98:60:2c:8a:b4:d3:35:28:
                    0b:41:fb:d0:2f:df:fd:e6:59:4e:e0:ad:b1:80:57:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:2B:D8:F5:88:35:FA:68:21:00:8D:16:4C:6F:F7:FF:00:A8:DA
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:2d:3f:a8:da:fa:ec:5d:e4:a4:fb:68:24:2a:ea:74:63:
         ef:23:cc:dd:02:04:d7:c4:6d:19:dc:dd:93:f0:17:86:f2:89:
         a5:d2:33:ae:94:73:d6:b4:9c:85:79:9e:ef:49:6f:09:3d:0c:
         bc:9b:91:91:74:ea:ae:55:7a:74:f2:51:85:16:37:79:ef:08:
         5f:0b:29:11:52:e7:d5:0b:fc:a8:f2:e2:ae:2f:9f:85:b4:5d:
         18:90:69:3d:b4:0b:13:2a:8b:79:ac:ea:08:1b:f1:f7:ee:fb:
         c7:52:b0:c2:f1:0b:58:33:37:79:2e:c6:c5:ae:5c:9c:0f:bd:
         24:76:8a:f3:de:fd:55:82:d2:a0:35:88:00:56:60:06:4f:1b:
         44:a1:ef:6a:0c:a1:4f:14:82:6a:3b:a3:3a:f2:3a:2c:35:21:
         a3:d9:7c:63:c4:1f:42:22:a8:dd:18:7f:34:52:fc:d9:c9:4c:
         4c:36:fe:42:85:e8:4a:79:c9:b4:c0:f6:6c:d4:8d:c0:25:10:
         30:9f:36:17:e4:cb:5a:3f:74:27:27:aa:b2:a2:cc:df:b1:21:
         43:94:08:82:c0:a0:f9:54:cf:20:33:ba:75:0d:42:7c:ec:ed:
         9e:cf:fb:89:fa:7b:11:1f:93:85:88:39:46:d0:6c:85:6a:c4:
         5b:3c:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:58:22 2026 by rpki-client