Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e302e302e302f31372d3234203d3e203133343839.roa
File:                     3138362e302e302e302f31372d3234203d3e203133343839.roa (raw, json)
Hash identifier:          M9AvRdLTyn21eErWMGZbvtTrfpRkaeBS/SiMKFrTdcE=
Subject key identifier:   EE:B2:DC:86:B0:5E:F3:2D:7E:C8:F8:D4:48:F4:29:1C:97:0F:7B:E7
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       535FA6C602C15B14C048A8CC244B123150A638E1
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e302e302e302f31372d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:01 +0000
ROA not before:           Thu 19 Mar 2026 20:30:01 +0000
ROA not after:            Thu 18 Mar 2027 20:35:01 +0000
asID:                     13489
IP address blocks:        186.0.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5f:a6:c6:02:c1:5b:14:c0:48:a8:cc:24:4b:12:31:50:a6:38:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:01 2026 GMT
            Not After : Mar 18 20:35:01 2027 GMT
        Subject: CN=EEB2DC86B05EF32D7EC8F8D448F4291C970F7BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:ba:3f:a8:8e:05:1e:b7:63:e0:53:31:51:
                    84:29:fa:e3:c3:e5:86:a7:05:5a:49:b5:b0:84:3e:
                    4d:73:5a:5c:f9:74:ad:ab:ef:bc:b2:62:71:98:d4:
                    ae:27:87:f5:9f:ad:bf:a3:d6:c5:a4:21:bb:52:8b:
                    29:2f:e9:73:2e:09:21:21:40:ba:93:76:16:d7:fc:
                    d5:31:94:db:b2:0b:c8:fb:53:a2:9d:cb:80:7a:a7:
                    eb:ac:31:8e:76:d7:57:40:fd:ae:51:ec:fa:ff:84:
                    ce:8b:07:3c:0e:db:8d:7b:11:29:0e:1d:cb:fd:14:
                    b9:3d:13:b0:7b:9f:92:6a:e1:16:9d:a8:62:0c:b0:
                    e9:f9:20:98:d5:03:b1:cd:78:12:48:93:9a:f3:14:
                    29:0a:d7:97:de:32:a4:c3:54:13:0e:48:8c:59:a9:
                    cc:c9:7d:ae:13:5b:22:2c:2e:0a:7c:7a:93:44:9c:
                    7f:86:79:f0:e4:6f:f8:0b:22:3f:6f:fb:c3:69:33:
                    21:b4:00:8f:85:04:81:c1:e0:97:df:22:02:ad:5f:
                    68:cb:4a:8d:20:94:4f:84:07:b2:a8:2d:a6:7b:78:
                    3e:0a:f6:6d:0e:09:f0:f2:11:73:32:75:55:3d:c8:
                    f2:42:fd:0f:81:30:27:a5:34:3a:1a:84:7b:c8:73:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B2:DC:86:B0:5E:F3:2D:7E:C8:F8:D4:48:F4:29:1C:97:0F:7B:E7
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e302e302e302f31372d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:40:ea:d6:d9:23:aa:4f:8c:a8:0a:33:a8:b0:f2:2c:63:
         11:62:1b:46:a7:af:85:b0:d5:e1:73:f9:bd:3a:7d:9b:f0:a5:
         76:7d:4a:37:c2:83:0a:ff:08:9b:1d:28:3f:bf:bf:ad:2b:bd:
         ed:4f:30:24:0e:a4:9f:52:0b:a0:08:df:8f:90:ce:d9:d5:e9:
         2c:02:39:04:35:6b:8f:56:fc:57:9d:c3:a3:b5:d5:87:29:76:
         7a:4e:77:56:39:71:fd:6a:00:22:75:63:e1:3e:67:65:40:0e:
         50:28:e4:79:26:ed:77:db:63:93:b5:d9:15:d1:97:98:fe:a4:
         06:e8:c2:74:5f:36:7d:07:a1:3c:04:7f:0c:5a:f2:3f:ee:ab:
         e3:3c:f6:2e:6e:2d:56:ee:50:93:0b:79:2f:2d:86:ed:cb:34:
         36:e4:43:8b:11:a9:aa:ac:5d:8d:92:98:e2:47:03:15:27:4f:
         f8:de:e1:40:2b:50:1d:55:94:94:11:82:25:d9:c9:31:0c:cd:
         4d:b2:ed:9c:56:be:7f:91:f5:1c:f9:73:52:27:de:13:46:0c:
         8f:eb:2a:95:29:72:c9:ac:65:52:67:73:08:d7:cb:19:b3:54:
         21:12:43:7c:61:4e:ca:83:70:13:f9:29:58:ec:d7:6e:6e:6f:
         f2:b8:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:49:00 2026 by rpki-client