Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e203230323939.roa
File:                     3138362e3137362e302e302f31362d3234203d3e203230323939.roa (raw, json)
Hash identifier:          CZMaNDOk8h6FyWZTn20GoQwSjAbobw3Y8hoBrLfPDMo=
Subject key identifier:   B3:FD:59:68:96:17:8A:1E:C2:8F:52:D6:01:B5:28:37:51:43:01:1F
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       275E994D2C64465D3CD549D938A78AC06823279E
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e203230323939.roa
Signing time:             Wed 11 Mar 2026 21:33:37 +0000
ROA not before:           Wed 11 Mar 2026 21:28:37 +0000
ROA not after:            Wed 10 Mar 2027 21:33:37 +0000
asID:                     20299
IP address blocks:        186.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5e:99:4d:2c:64:46:5d:3c:d5:49:d9:38:a7:8a:c0:68:23:27:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar 11 21:28:37 2026 GMT
            Not After : Mar 10 21:33:37 2027 GMT
        Subject: CN=B3FD596896178A1EC28F52D601B528375143011F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:b0:27:4e:58:4e:fc:dc:6b:52:2a:36:88:
                    1b:07:7b:d4:7f:14:a8:4a:fb:5d:f3:20:9d:61:81:
                    b3:c5:4e:5f:9c:3c:dc:ba:3b:f3:ae:5b:43:77:6e:
                    f8:54:a1:ae:8c:7f:74:85:00:d4:ce:f9:65:f3:32:
                    ed:e0:e6:07:56:bc:75:41:c1:88:ba:53:b1:65:a5:
                    62:d1:9a:b6:89:b5:e1:f4:29:b7:70:a7:38:83:97:
                    bc:92:ec:8b:9e:93:53:94:50:88:af:e5:20:88:63:
                    d6:20:15:00:b6:c1:66:02:38:68:0e:fb:36:2b:c1:
                    a4:d0:82:c6:96:d4:53:ee:4f:61:db:10:dc:b5:83:
                    16:d9:78:9c:13:d0:68:d0:42:02:e7:8e:1a:84:9a:
                    b6:57:ad:85:a9:6a:85:a8:ca:74:2f:ce:35:c0:91:
                    93:47:3c:a6:42:4a:61:e8:a0:3e:ba:f2:ad:cd:48:
                    25:d6:b3:56:b9:d8:0d:5c:c7:33:23:1d:b4:07:cc:
                    11:51:49:37:fa:d8:6c:38:f7:06:93:be:70:4e:e3:
                    5e:30:cb:3e:bd:66:ae:ff:7a:f2:76:f1:68:02:06:
                    c6:96:8f:cd:97:fa:4b:6d:0d:4c:1b:9c:bf:31:7f:
                    41:09:a8:c6:f2:50:6c:ff:dd:56:50:5b:ae:2d:30:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FD:59:68:96:17:8A:1E:C2:8F:52:D6:01:B5:28:37:51:43:01:1F
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:8a:81:56:ca:dc:f8:84:19:6f:b2:c2:63:9f:84:13:e6:
         5e:97:04:df:75:a6:1d:92:07:c8:95:5a:c7:c2:f5:c9:1f:95:
         aa:4f:ee:cc:2d:70:ac:c8:cc:3a:d8:c5:ce:e0:a1:35:7a:c6:
         67:8e:ce:e4:9f:47:27:ee:4d:a1:08:9a:d2:06:1c:b8:58:5d:
         7b:de:f1:06:33:2a:c3:73:a4:c1:a2:a3:e2:b9:d0:25:f1:33:
         26:b4:f3:51:3c:ca:5a:1d:0c:2e:cc:76:e3:cc:4a:72:85:ac:
         d1:5d:7e:2a:8b:fd:c5:cf:d3:38:61:d2:29:e9:95:cc:46:06:
         e3:ab:00:e5:f8:70:71:8d:d7:73:c5:cd:eb:78:3b:e5:41:cb:
         4b:75:6e:c5:a0:ad:87:68:e7:0d:1e:f2:4f:05:41:a8:00:7b:
         65:f9:f6:8a:97:1a:83:db:38:fd:3e:19:47:77:c5:38:84:ca:
         f5:6d:24:af:b2:f4:ee:7d:7a:a5:ac:00:d7:f9:cb:8e:62:7a:
         27:6e:b7:ee:35:86:d6:3e:b1:8a:e1:ae:25:1b:df:36:3b:bf:
         4d:81:aa:4d:53:a4:c0:45:41:d1:f9:c8:26:7b:9d:a4:19:c6:
         3a:2c:34:c0:bd:cc:aa:21:7f:e3:db:d2:d1:11:32:5e:d1:f0:
         1e:8b:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:34 2026 by rpki-client