Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3234203d3e203133343839.roa
File:                     3138362e34332e302e302f31372d3234203d3e203133343839.roa (raw, json)
Hash identifier:          3eq31hWHkYdn/hd9rclHdH4IxXoYQFMTcTyIpPKxW2Q=
Subject key identifier:   22:2E:8C:1C:EE:B5:92:AA:1A:87:CB:14:A3:E8:2F:E5:FB:BC:58:CF
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       44CCD834AB2A2DAF96346FD44B5C90148298F542
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 21:35:01 +0000
ROA not before:           Thu 19 Mar 2026 21:30:01 +0000
ROA not after:            Thu 18 Mar 2027 21:35:01 +0000
asID:                     13489
IP address blocks:        186.43.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cc:d8:34:ab:2a:2d:af:96:34:6f:d4:4b:5c:90:14:82:98:f5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 21:30:01 2026 GMT
            Not After : Mar 18 21:35:01 2027 GMT
        Subject: CN=222E8C1CEEB592AA1A87CB14A3E82FE5FBBC58CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:7d:06:ff:90:04:22:91:a2:f2:fd:89:6e:
                    9d:9b:a7:36:d0:3e:55:13:32:06:f1:9e:91:45:44:
                    f3:e2:da:63:ee:0a:df:9e:f8:32:a4:25:b0:47:e1:
                    d8:3d:41:5d:55:a2:31:5e:5e:c7:af:10:bf:91:7f:
                    1d:81:2d:0c:c6:d3:fd:6d:01:d5:d4:ff:55:dd:c7:
                    83:b0:9b:94:65:88:88:84:ef:2b:99:36:09:c7:96:
                    da:59:44:4f:2f:9b:4a:55:d8:40:fe:07:60:61:5d:
                    f1:6d:8b:77:d1:a7:20:a0:68:cf:3f:6d:e7:01:b6:
                    89:22:4e:1f:3a:40:55:76:44:da:eb:bc:19:4f:6f:
                    02:42:a2:6d:32:88:1a:b7:5a:38:15:c0:f3:fa:2a:
                    27:52:e9:67:ec:86:da:34:db:cb:5e:bc:2e:8c:3c:
                    1a:6e:ef:6d:f5:4d:b8:88:d2:4e:61:52:d4:3b:0b:
                    a5:d3:6b:74:67:e2:a9:98:21:7f:e1:da:2f:1f:d7:
                    84:c8:71:3a:83:4f:a3:45:1a:c6:81:7c:a5:89:86:
                    d2:55:8c:c7:14:e5:bd:12:de:44:d9:ee:f3:49:a3:
                    a6:86:c1:a9:83:81:b3:ba:a5:be:de:3f:b9:20:25:
                    09:13:0d:f5:ea:1e:8f:dc:45:b8:6c:61:50:ac:28:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:8C:1C:EE:B5:92:AA:1A:87:CB:14:A3:E8:2F:E5:FB:BC:58:CF
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         78:48:48:30:3f:ef:f4:03:c3:97:3f:89:6a:13:51:1d:56:48:
         c1:02:e3:82:37:27:c3:1f:d8:89:b7:b5:ae:1b:88:26:80:b5:
         ec:2e:0f:d5:24:24:84:20:18:36:f4:a7:cd:d0:83:d1:2e:9f:
         1e:32:ab:0e:9e:ee:93:3a:ee:38:d9:e1:cb:65:06:c8:dc:81:
         5c:1b:b6:13:22:e0:15:fb:18:6a:6c:4b:1b:98:2e:1c:ea:79:
         1e:b7:6d:c2:fb:67:b7:ae:ab:65:be:a6:05:7f:c1:12:b8:73:
         8b:12:4b:10:ff:77:c5:8c:52:bf:24:5c:e9:48:c8:2b:37:27:
         f9:23:30:61:ca:8c:b3:a9:bd:85:df:a3:31:1d:a7:b7:ca:9d:
         01:0d:d2:6a:9f:9b:84:84:30:50:0f:b3:5b:06:13:00:b2:d7:
         c9:39:5a:6b:3e:51:3a:05:6e:89:03:f6:54:7f:7f:17:1f:21:
         3d:6e:60:69:9b:97:b8:cc:ea:a7:6c:c7:73:2a:38:2b:2f:b7:
         5a:e5:f4:31:e1:ce:e1:4a:38:99:0b:49:5b:3b:12:74:9f:27:
         47:9b:10:92:55:8b:fe:79:21:e8:5a:3f:64:63:d2:06:e4:bf:
         32:de:88:a8:01:72:1a:bd:7b:7d:5d:10:63:6c:25:46:ee:aa:
         3d:aa:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:54 2026 by rpki-client