Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3138362e3132312e3136362e302f32332d3234203d3e20323633323338.roa
File:                     3138362e3132312e3136362e302f32332d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          XoEb8JdIzxWSbR4EixK9TEvi98bLinBa9JBBnwiaOus=
Subject key identifier:   50:71:B2:8A:04:9B:C9:8D:79:D3:6A:8D:7C:DC:41:5C:DC:D3:77:26
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       671440B7ABD8D069C27CACB14F35B5D87613C97A
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3138362e3132312e3136362e302f32332d3234203d3e20323633323338.roa
Signing time:             Fri 17 Oct 2025 03:30:00 +0000
ROA not before:           Fri 17 Oct 2025 03:25:00 +0000
ROA not after:            Fri 16 Oct 2026 03:30:00 +0000
asID:                     263238
IP address blocks:        186.121.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 21:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:14:40:b7:ab:d8:d0:69:c2:7c:ac:b1:4f:35:b5:d8:76:13:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Oct 17 03:25:00 2025 GMT
            Not After : Oct 16 03:30:00 2026 GMT
        Subject: CN=5071B28A049BC98D79D36A8D7CDC415CDCD37726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:11:5a:c5:a3:c4:df:e1:26:3a:38:8f:81:
                    ca:92:0c:26:46:f3:f0:6d:bc:9c:fd:37:a2:c8:46:
                    15:27:7b:b1:9d:16:44:f5:74:b8:ad:fa:8b:ce:3c:
                    67:f8:89:5f:16:0d:0a:b4:28:9c:dd:75:c2:d1:aa:
                    ee:e4:de:0b:dd:b2:cb:01:ea:60:2f:2f:f1:84:e5:
                    4e:21:fe:77:b6:dd:3e:37:71:9c:54:df:62:8f:46:
                    ab:34:a4:50:0d:5d:23:b0:af:a8:cc:8e:39:34:89:
                    30:14:68:cc:6b:e7:10:11:28:ef:c0:ce:d4:86:f1:
                    a5:90:17:73:de:fc:a1:13:5a:e1:df:0a:2c:e3:ed:
                    dd:3e:8b:be:b4:73:7c:3f:8a:4f:8f:60:25:dc:23:
                    d6:7c:89:9e:b3:97:9e:bf:e5:2f:64:7d:73:30:5c:
                    ea:bc:d9:13:b6:47:fe:40:c0:61:60:bc:85:c3:c9:
                    c2:f2:99:d9:90:6a:e2:a1:04:20:50:f9:29:e9:74:
                    d3:78:b1:ae:04:45:d1:de:74:f0:7e:82:94:8a:b1:
                    4c:25:a8:76:6c:50:7c:e9:65:ac:71:89:8d:27:30:
                    5a:28:72:e1:ff:19:da:4d:95:48:cc:37:0f:df:9f:
                    d4:b4:dc:b9:fd:54:d9:7d:14:cf:7e:96:e6:56:36:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:71:B2:8A:04:9B:C9:8D:79:D3:6A:8D:7C:DC:41:5C:DC:D3:77:26
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3138362e3132312e3136362e302f32332d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:73:63:96:bc:11:ad:7d:40:e9:63:0c:a4:60:94:e9:2c:f2:
         5c:f3:07:57:84:98:87:e5:73:6a:b0:00:85:0d:37:54:92:a2:
         7d:de:66:6b:5d:0b:29:47:bf:e6:65:5b:a7:b5:bf:ea:fa:00:
         ae:8e:ce:4c:9a:80:5c:b0:5a:bc:bd:cd:8c:28:0f:15:74:6f:
         8b:1c:71:ce:3e:c4:da:31:58:5d:34:68:19:fd:63:4d:53:e3:
         bf:76:59:db:dc:d2:a3:d3:ff:71:80:3f:65:20:55:08:df:87:
         2b:e7:bc:25:44:d7:f5:43:61:fd:24:ca:c8:82:32:68:ea:26:
         a5:14:d8:85:60:5c:c4:0b:d2:7d:7a:54:ef:fc:51:9c:33:c8:
         be:87:9f:75:dd:c5:0c:3a:ec:ca:93:6b:de:d4:9b:75:50:69:
         21:90:44:ae:cb:88:1e:59:69:7e:4f:a3:7d:51:e4:56:51:d0:
         e0:1c:ea:01:2d:6c:89:7e:0d:b0:c6:4d:ef:4d:a5:36:cd:7c:
         22:a0:52:29:f4:96:b9:67:97:cf:e1:62:9a:d1:ee:d3:eb:dc:
         6d:e7:4e:f1:28:6f:5a:0a:ec:1a:dc:27:a6:b8:05:c1:86:43:
         c4:6f:b9:cd:0b:65:fb:f6:ef:73:3a:3b:b8:a1:5c:80:c0:f4:
         1e:67:92:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:05:17 2025 by rpki-client