Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3234203d3e203133343839.roa
File:                     3138362e3138302e302e302f31352d3234203d3e203133343839.roa (raw, json)
Hash identifier:          GRPpHV6uTa2FQ+2wlsLxcAXiIKA/NgGXVGrMH8rhfu4=
Subject key identifier:   03:10:68:8B:58:F7:40:F2:B7:5F:CF:09:C0:18:08:7C:DD:8F:96:BC
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       653263783BB5B7809DDC7C1E6E92A382C41CB962
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 13:05:00 +0000
ROA not before:           Thu 19 Mar 2026 13:00:00 +0000
ROA not after:            Thu 18 Mar 2027 13:05:00 +0000
asID:                     13489
IP address blocks:        186.180.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:63:78:3b:b5:b7:80:9d:dc:7c:1e:6e:92:a3:82:c4:1c:b9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar 19 13:00:00 2026 GMT
            Not After : Mar 18 13:05:00 2027 GMT
        Subject: CN=0310688B58F740F2B75FCF09C018087CDD8F96BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:22:c9:3d:66:df:a2:ef:39:6f:5f:a6:ac:
                    f0:1c:c1:a8:b2:7a:65:d5:d0:be:bb:be:19:91:03:
                    f3:2c:c4:42:71:21:6c:6b:58:0a:d0:33:2d:97:f3:
                    4b:85:d5:1a:55:0b:7a:79:51:81:d2:05:87:79:c4:
                    74:d0:7c:e6:67:ed:82:bc:f6:5d:d3:47:14:47:98:
                    98:a4:2c:05:59:3d:00:d7:8e:5b:92:b2:97:18:d0:
                    2c:7c:fd:ce:29:e8:ec:6e:ae:93:44:f1:a6:c9:ed:
                    95:92:bf:cd:8b:71:6a:a9:4b:bb:92:b6:78:41:fd:
                    66:b6:a8:17:93:f7:f4:f1:39:df:90:5c:e1:4a:c5:
                    90:02:d0:40:4b:94:78:db:71:0a:21:4d:09:a4:a0:
                    52:40:3d:1d:f7:8b:2b:47:d8:54:a4:03:b9:af:fc:
                    f9:38:8f:fb:93:bc:c1:98:a3:bc:79:32:65:d8:74:
                    d5:66:d6:6b:8a:6f:dc:15:49:eb:16:08:a8:af:d7:
                    96:eb:bc:d6:cf:f5:65:53:f5:3e:d2:b1:2c:18:65:
                    2c:e4:1a:fe:fe:c9:03:8b:76:f0:bb:36:c0:07:6d:
                    ce:4c:d7:62:32:9c:2d:96:a4:ed:0e:53:18:57:12:
                    d0:af:dc:de:3f:f7:f0:fc:a2:e6:2a:ad:b9:c0:36:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:10:68:8B:58:F7:40:F2:B7:5F:CF:09:C0:18:08:7C:DD:8F:96:BC
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.180.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         11:74:dc:59:8c:8a:21:c3:07:b4:df:89:2d:66:00:41:80:16:
         52:4a:cb:3b:7b:07:e2:80:7c:86:53:82:19:56:c1:4c:c6:c2:
         51:3f:36:52:ec:a3:ab:8d:6a:8b:8e:6d:89:6a:a1:27:f8:29:
         5c:7e:c9:b7:1d:d0:a3:c5:30:98:d2:85:33:c2:4d:31:62:28:
         78:4c:27:ef:93:f8:a5:1d:f4:a5:b3:2b:c8:32:45:b5:37:7d:
         ef:57:9e:a8:13:0b:8c:d0:b4:1b:10:4a:1f:a0:73:88:99:ef:
         c3:8b:f1:3a:c2:13:fc:d0:5f:85:8e:a3:9c:47:fa:7b:e4:f9:
         60:76:3b:06:29:07:cb:6f:92:6a:88:43:dc:59:21:96:a2:fa:
         a3:68:ea:a2:2c:d6:ce:c6:ff:63:39:2d:d9:73:78:80:79:3c:
         f4:9b:53:b9:09:07:a2:e2:03:f9:75:43:95:a9:0b:07:13:46:
         92:db:73:a6:09:cb:7c:89:02:44:78:0c:02:ed:49:94:44:61:
         56:4d:88:b2:b1:c8:5f:4d:2e:6f:2b:ce:1e:f9:da:7c:71:59:
         26:16:c4:7b:b2:6d:cc:83:cd:c8:e5:c3:58:4f:e0:2b:a7:35:
         b0:33:fc:e8:37:52:95:ae:7a:bf:df:9c:94:5d:89:ed:96:1e:
         b5:41:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:37 2026 by rpki-client