Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3234203d3e203133343839.roa
File:                     3138362e3135392e36342e302f31392d3234203d3e203133343839.roa (raw, json)
Hash identifier:          ilGtiPLHIhTCC3HBcpaAiiu8DzDcj2WDjuXWMF11ZY0=
Subject key identifier:   D7:BE:2E:DF:AD:F6:9F:41:CD:3B:3E:A4:7F:E3:F0:8E:1C:75:35:BA
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       22157109528DC9C002CD01ABC2876B3DB64BD5B3
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 21:35:00 +0000
ROA not before:           Thu 19 Mar 2026 21:30:00 +0000
ROA not after:            Thu 18 Mar 2027 21:35:00 +0000
asID:                     13489
IP address blocks:        186.159.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:15:71:09:52:8d:c9:c0:02:cd:01:ab:c2:87:6b:3d:b6:4b:d5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 21:30:00 2026 GMT
            Not After : Mar 18 21:35:00 2027 GMT
        Subject: CN=D7BE2EDFADF69F41CD3B3EA47FE3F08E1C7535BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:5d:4f:c5:4c:85:3c:d9:c4:e5:ef:04:a5:
                    f3:23:8c:b2:fc:f9:95:3f:3e:34:a1:c8:bd:6d:15:
                    77:6e:02:6f:a5:28:64:bb:7c:93:6a:c1:fd:8a:cc:
                    f0:3b:38:32:ae:8e:f8:b5:f7:c3:3a:36:ad:7e:23:
                    53:2d:23:0c:27:28:5f:f1:0e:aa:8e:ef:9d:e7:1c:
                    dc:f8:84:7d:d2:6e:a8:40:46:a1:4a:f2:60:a8:9f:
                    4b:58:09:7b:69:bb:6d:c8:f4:d1:c6:98:81:84:b7:
                    02:73:ad:40:0b:66:c2:3c:48:ad:66:cb:50:0f:f6:
                    1a:57:0d:55:97:47:11:03:74:55:e5:89:14:91:9c:
                    5a:50:30:01:4d:89:f5:20:44:07:9f:e9:4a:e0:42:
                    ab:34:14:e3:34:41:21:28:91:59:9b:45:65:f3:c1:
                    b8:02:1a:59:fe:8f:9b:fa:81:a3:b7:68:16:87:d4:
                    be:bf:f1:34:48:02:35:1c:66:45:b0:6f:e0:a9:e6:
                    1a:eb:fb:60:87:9b:83:43:13:53:76:72:31:b4:9a:
                    c5:2c:cd:00:12:3c:16:1b:11:c6:21:ea:46:63:ec:
                    4b:f7:f5:a7:36:79:ae:06:04:12:b7:20:76:f7:cd:
                    77:0c:27:fd:6f:c9:1b:13:c0:c6:08:fc:3f:15:72:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BE:2E:DF:AD:F6:9F:41:CD:3B:3E:A4:7F:E3:F0:8E:1C:75:35:BA
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:4e:7c:45:77:4f:52:33:05:60:f1:05:92:9b:6d:05:20:
         a9:00:5b:27:84:c9:bd:e5:40:9a:2a:9b:6c:d2:7f:1f:47:d3:
         00:93:31:d2:22:01:d6:35:01:8c:06:fd:d1:74:02:12:57:fb:
         23:36:a5:be:f3:f3:9d:2e:38:8f:e8:2e:d9:a6:d8:be:24:b1:
         d8:22:b2:37:51:87:6b:44:bd:ac:f7:10:5b:7a:a1:c9:fc:51:
         b2:d5:94:86:f0:bb:ca:54:7f:f9:fc:4c:a0:8b:f6:59:c9:9d:
         78:ef:33:00:45:a6:99:3e:f6:77:5c:aa:ce:a6:0b:de:2e:86:
         68:73:9c:43:28:f1:e2:85:5c:bf:1b:da:42:d0:ea:d1:53:ad:
         6c:5f:18:3c:57:f2:eb:14:f0:bb:4e:83:27:5d:ef:e0:f5:7b:
         2e:43:af:cc:e1:49:b0:46:a0:da:20:3e:93:19:ad:ed:5b:9a:
         66:6d:93:60:e5:db:88:a9:6f:4b:7d:85:0d:de:66:21:58:66:
         17:0a:cc:2a:f9:d8:1c:4e:e4:b8:ab:77:19:19:dd:92:a7:dd:
         51:33:e5:01:46:9f:c2:57:7e:ca:e3:32:8d:8b:83:ca:4b:86:
         b3:b7:76:11:f3:90:a4:7a:b7:eb:b6:0b:f1:e6:61:31:2a:e3:
         3e:ad:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:12 2026 by rpki-client