Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3133382e3138362e38382e302f32322d3234203d3e203138383039.roa
File:                     3133382e3138362e38382e302f32322d3234203d3e203138383039.roa (raw, json)
Hash identifier:          K7xKbvMH9l2yQBlrg5iTFnprGV3Si++hWIdNOK8AMQs=
Subject key identifier:   92:03:08:19:E9:97:E6:62:79:07:A4:3C:49:DD:70:1A:81:D7:EA:F0
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       01D82545A8B74A16828CD142CA16F27FAAFBD2D7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3133382e3138362e38382e302f32322d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:52 +0000
ROA not before:           Fri 25 Sep 2026 14:31:52 +0000
ROA not after:            Fri 24 Sep 2027 14:36:52 +0000
asID:                     18809
IP address blocks:        138.186.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d8:25:45:a8:b7:4a:16:82:8c:d1:42:ca:16:f2:7f:aa:fb:d2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:52 2026 GMT
            Not After : Sep 24 14:36:52 2027 GMT
        Subject: CN=92030819E997E6627907A43C49DD701A81D7EAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:aa:c6:5f:4a:b1:54:a6:fd:66:54:a4:e7:
                    a1:fd:42:92:dc:e5:6a:36:0a:fe:66:0a:be:3f:86:
                    b2:a3:f5:e7:c4:1f:ff:03:aa:37:57:df:0b:99:6d:
                    7c:a6:47:df:7d:d3:a1:97:31:08:0c:94:2d:d4:b5:
                    72:5f:33:7b:62:a4:ac:ae:6c:f5:9a:bb:c5:bb:ec:
                    30:e6:0f:f4:e5:0a:97:67:b3:22:23:1b:90:ca:db:
                    11:bf:6c:42:9d:fd:13:67:cf:f8:55:75:9a:bf:e3:
                    94:0f:80:31:dc:5d:ee:6d:57:12:70:03:b9:a5:45:
                    84:79:29:b0:95:17:79:5a:66:97:32:6d:a6:72:79:
                    e8:88:98:04:b7:63:8d:2c:e8:2b:81:7c:3a:0f:0f:
                    bd:94:ae:cf:c9:d2:c7:d6:9e:bb:a7:f9:95:a2:f6:
                    91:b7:2c:e5:2c:3d:a8:3e:c1:66:9a:b6:bf:9e:2f:
                    0f:f6:83:c0:1b:17:6b:99:3d:cd:b8:95:ea:9b:22:
                    51:18:7c:04:73:41:1a:b2:8c:bb:80:06:d8:70:ad:
                    3f:55:fd:76:c7:f4:c4:8d:2b:10:2c:ae:4c:1a:8b:
                    2e:15:17:a2:be:ee:5d:be:cf:af:39:32:47:f9:43:
                    50:d5:2c:47:53:42:8b:ff:99:0d:de:cd:6f:80:fc:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:03:08:19:E9:97:E6:62:79:07:A4:3C:49:DD:70:1A:81:D7:EA:F0
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3133382e3138362e38382e302f32322d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:0b:23:df:6e:03:0a:0b:5a:6e:cb:f4:51:42:87:9c:80:
         94:b1:95:39:9d:72:e8:b6:c8:a4:3e:4a:df:e6:09:39:1c:07:
         9f:4e:99:f3:14:d4:04:42:ee:30:15:53:d0:e9:77:bb:15:96:
         41:d0:02:11:a2:6b:74:02:96:2c:2a:7b:d2:93:7f:c7:c8:29:
         6b:08:7e:43:92:c8:52:55:c8:7f:e8:0d:03:03:81:ab:f2:1b:
         6b:c4:45:18:e1:b6:84:ab:34:2f:de:77:31:a9:cd:7f:cf:38:
         cc:f3:e2:2d:18:be:2f:49:3a:d1:04:0c:49:a3:ce:33:ba:7a:
         a6:42:9b:c1:33:5e:4c:b4:c5:97:57:90:c2:76:21:0f:11:7d:
         8c:71:14:9c:ca:19:97:3e:bf:10:64:c3:13:e8:39:12:19:6b:
         f0:9f:12:6e:12:30:59:07:41:a0:b6:4e:54:cc:6d:60:41:87:
         5a:db:9c:07:c3:d2:94:f7:33:28:ee:04:2e:13:eb:4c:95:8e:
         ef:2d:b7:14:60:90:77:b5:50:c9:98:72:9a:13:58:37:0f:16:
         18:ec:ed:bd:5e:5e:62:9b:45:56:41:ce:a3:15:ce:0d:ae:6a:
         97:19:e5:00:c6:14:fd:c5:d8:9b:6d:35:5e:1c:b4:0b:5b:62:
         fe:74:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:02:23 2026 by rpki-client