Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3138362e3132312e3136302e302f32332d3234203d3e20323633323338.roa
File:                     3138362e3132312e3136302e302f32332d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          E8/XANaE3ckAuGtd5nYVms9Ix2AyPiLE20f3Oz2OiRM=
Subject key identifier:   9D:3C:2A:0A:63:89:CE:56:7A:1D:30:FC:CE:BD:51:A9:49:96:E6:C0
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       614F440AEC9858AA92CB37D3FA87FB5EB512F8C7
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3138362e3132312e3136302e302f32332d3234203d3e20323633323338.roa
Signing time:             Fri 17 Oct 2025 03:30:00 +0000
ROA not before:           Fri 17 Oct 2025 03:25:00 +0000
ROA not after:            Fri 16 Oct 2026 03:30:00 +0000
asID:                     263238
IP address blocks:        186.121.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 21:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4f:44:0a:ec:98:58:aa:92:cb:37:d3:fa:87:fb:5e:b5:12:f8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Oct 17 03:25:00 2025 GMT
            Not After : Oct 16 03:30:00 2026 GMT
        Subject: CN=9D3C2A0A6389CE567A1D30FCCEBD51A94996E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:02:b8:e4:16:63:d4:b7:7d:b6:7b:3c:6c:
                    9c:c5:af:9e:7f:ee:69:6c:15:d9:91:c3:fa:ac:64:
                    a7:02:94:7b:ea:3c:7e:cc:d1:dd:4c:8a:36:73:c9:
                    28:b8:ce:66:8e:90:f6:c9:86:f7:12:86:88:05:b7:
                    94:cf:1e:9b:f1:0c:c7:24:e4:25:8c:25:8b:9e:a2:
                    be:f4:d1:ed:a4:01:64:c0:4f:99:4f:c9:ed:0d:18:
                    c7:85:45:f3:89:71:9b:b8:f9:34:27:e3:1a:46:36:
                    c1:17:06:55:d0:d3:8c:0a:45:6f:e1:32:3c:89:d3:
                    d1:ec:aa:3a:3b:29:87:72:83:f3:73:52:17:c8:e4:
                    51:5a:f8:a2:70:81:67:85:8c:17:78:fc:55:80:d7:
                    f4:32:8c:cb:d5:e0:97:aa:f2:ea:d1:d1:1a:a7:9f:
                    de:9f:37:5e:8f:48:88:1c:d2:77:9a:c9:11:a5:4d:
                    c3:85:0c:ed:f8:e1:db:f4:7d:3a:94:1d:25:7b:76:
                    4e:2f:98:43:5d:75:30:ff:a8:36:68:2a:0b:a6:b5:
                    16:c1:da:e0:51:c6:c4:04:a1:9c:66:68:56:3c:9d:
                    0e:eb:d5:f1:1a:d2:f7:e5:b3:07:4d:6b:24:3e:b3:
                    15:aa:ff:47:73:32:f0:3a:92:21:dc:36:b9:68:26:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:2A:0A:63:89:CE:56:7A:1D:30:FC:CE:BD:51:A9:49:96:E6:C0
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3138362e3132312e3136302e302f32332d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:06:c3:30:ed:74:10:0f:d8:5b:c8:94:fc:62:93:f6:c4:02:
         57:a8:34:2b:88:07:51:fb:42:d3:ac:8f:ed:50:55:04:6f:66:
         a0:c7:02:e0:b9:5d:df:9f:4b:f8:b7:05:bb:2c:55:a1:c7:4a:
         58:5a:01:83:17:e5:0d:00:d9:6a:a9:87:b5:49:e7:a6:c6:5b:
         f4:6f:55:d4:40:c8:d2:14:bb:6f:90:7f:27:ce:2a:0a:79:a8:
         37:fd:8a:f9:2f:8c:90:fc:d3:bc:89:64:a9:f8:b9:c9:5b:a1:
         72:02:ad:a6:16:c8:13:f5:5e:85:88:fb:16:09:0e:10:f0:2a:
         d6:00:bb:57:a8:b0:23:0e:24:0e:7e:0a:b3:f0:22:80:95:3c:
         32:bb:7f:0d:8f:66:96:c7:27:bb:5e:e7:52:79:ed:4e:e4:ba:
         85:b3:8e:2f:17:7c:ba:fb:4c:32:86:90:15:20:b4:fe:3c:60:
         c7:98:b5:ff:9a:5f:ef:b8:be:84:0e:c4:89:34:50:c0:cc:43:
         8a:73:a2:3f:94:dd:5f:b3:af:47:7f:5b:c0:b0:5a:c9:0c:3d:
         f2:44:8c:a8:65:83:8b:21:72:ef:f8:7f:66:83:fd:fe:e7:89:
         ec:6b:45:a5:f3:dc:58:7b:e8:59:67:4f:b3:1b:57:c7:21:0e:
         12:a3:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:05:17 2025 by rpki-client