Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e20323632323036.roa
File:                     3138362e3137362e302e302f31362d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          zSd+d8P564Tm1bvPO73qCriOegGKs+Gk5//eFyl0tZ0=
Subject key identifier:   F9:AB:46:25:A7:5A:D6:8E:69:09:03:5C:DF:09:CF:16:2D:FD:7C:9D
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       38C316AF0156BF64FA5B8B1AFC2845B5C69538F9
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e20323632323036.roa
Signing time:             Wed 11 Mar 2026 21:33:36 +0000
ROA not before:           Wed 11 Mar 2026 21:28:36 +0000
ROA not after:            Wed 10 Mar 2027 21:33:36 +0000
asID:                     262206
IP address blocks:        186.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c3:16:af:01:56:bf:64:fa:5b:8b:1a:fc:28:45:b5:c6:95:38:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar 11 21:28:36 2026 GMT
            Not After : Mar 10 21:33:36 2027 GMT
        Subject: CN=F9AB4625A75AD68E6909035CDF09CF162DFD7C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:94:2f:6d:e1:97:6b:eb:6b:f8:62:dc:55:
                    66:b1:8c:83:8c:da:8c:cf:a2:17:b1:cb:b9:e2:4e:
                    ce:7b:ae:6e:90:c1:ff:4d:6b:47:47:fe:f6:1b:fb:
                    43:92:c6:7b:85:72:76:6e:8a:f8:9d:fb:fa:48:18:
                    31:3c:aa:52:ec:3c:0d:b9:2e:7b:df:fc:b2:d3:85:
                    73:4a:53:14:34:cc:af:2f:04:57:6f:65:94:01:10:
                    21:15:b1:7a:b4:f6:54:f8:d0:01:5c:3e:e7:58:37:
                    68:c2:86:0e:ed:2f:75:51:e2:19:26:8c:e6:77:c1:
                    d1:84:27:10:bb:9a:c4:8b:ce:d7:e0:68:3b:aa:a2:
                    c9:aa:52:6c:04:eb:d3:7f:22:53:69:0a:15:ac:13:
                    e5:0a:f0:cc:db:7a:4f:ab:0a:64:d7:a2:2d:72:a0:
                    0f:22:b6:86:8f:aa:27:61:aa:89:0a:b5:14:49:a9:
                    0f:c1:42:56:3b:c6:af:b9:b5:de:c7:05:aa:4e:41:
                    80:36:c6:91:7f:2c:a2:68:b3:e6:1a:ee:6c:4d:23:
                    20:ef:e5:ed:10:18:9e:86:8f:c0:fb:8e:8e:3e:2b:
                    0f:99:79:35:cb:83:e2:d7:f2:ff:be:3a:74:ed:a6:
                    23:e7:1e:55:aa:43:21:90:ac:9e:82:9f:14:0a:8a:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:46:25:A7:5A:D6:8E:69:09:03:5C:DF:09:CF:16:2D:FD:7C:9D
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31362d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:d6:ff:28:20:e1:e7:d5:b4:85:0f:32:fd:8a:3e:81:69:
         28:8b:07:bb:f6:26:1b:f2:c9:2d:9f:b7:1a:15:90:a3:98:4a:
         f6:b5:f9:40:93:55:ac:e8:70:6a:20:3c:22:4e:6b:93:6c:71:
         33:36:e2:ec:23:ce:15:bf:89:e1:de:8d:e1:20:f9:aa:6a:2c:
         65:70:08:ad:03:38:a7:42:45:e5:4d:92:49:2e:24:25:82:05:
         89:ea:2e:02:eb:d6:2e:f0:e8:3f:85:65:27:6c:75:2a:9b:34:
         bc:91:a8:d6:78:26:ea:6e:8f:f4:85:cf:8d:4a:1d:ec:20:a3:
         e3:6b:e1:8c:b9:ea:21:fc:b9:42:9b:a0:e9:e2:e4:6b:fa:cb:
         37:15:2e:92:c7:71:7c:b9:fe:fa:41:fb:f4:c6:d8:3e:3a:10:
         6b:f2:c1:6f:8e:68:eb:2c:9b:8a:59:be:24:45:05:c8:c0:81:
         c3:70:72:12:e7:7c:d2:12:4e:0e:d4:bd:bd:63:b4:cc:dc:f8:
         79:e2:d1:3e:09:bd:88:76:b9:e0:1a:a3:34:ec:ba:58:b0:13:
         fe:52:50:31:f1:6c:45:63:90:8c:70:54:20:eb:d3:43:3e:41:
         ab:8e:fd:cc:2c:28:97:8b:79:ec:94:e8:61:85:be:ae:be:1b:
         9f:2d:8b:5f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUOMMWrwFWv2T6W4sa/ChFtcaVOPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNjAzMTEyMTI4MzZaFw0yNzAzMTAyMTMzMzZaMDMxMTAvBgNV
BAMTKEY5QUI0NjI1QTc1QUQ2OEU2OTA5MDM1Q0RGMDlDRjE2MkRGRDdDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsxpQvbeGXa+tr+GLcVWaxjIOM
2ozPohexy7niTs57rm6Qwf9Na0dH/vYb+0OSxnuFcnZuivid+/pIGDE8qlLsPA25
Lnvf/LLThXNKUxQ0zK8vBFdvZZQBECEVsXq09lT40AFcPudYN2jChg7tL3VR4hkm
jOZ3wdGEJxC7msSLztfgaDuqosmqUmwE69N/IlNpChWsE+UK8Mzbek+rCmTXoi1y
oA8itoaPqidhqokKtRRJqQ/BQlY7xq+5td7HBapOQYA2xpF/LKJos+Ya7mxNIyDv
5e0QGJ6Gj8D7jo4+Kw+ZeTXLg+LX8v++OnTtpiPnHlWqQyGQrJ6CnxQKigP7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU+atGJada1o5pCQNc3wnPFi39fJ0wHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzEzNzM2MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzYzMjMyMzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALqwMA0G
CSqGSIb3DQEBCwUAA4IBAQBy2db/KCDh59W0hQ8y/Yo+gWkoiwe79iYb8sktn7ca
FZCjmEr2tflAk1Ws6HBqIDwiTmuTbHEzNuLsI84Vv4nh3o3hIPmqaixlcAitAzin
QkXlTZJJLiQlggWJ6i4C69Yu8Og/hWUnbHUqmzS8kajWeCbqbo/0hc+NSh3sIKPj
a+GMueoh/LlCm6Dp4uRr+ss3FS6Sx3F8uf76Qfv0xtg+OhBr8sFvjmjrLJuKWb4k
RQXIwIHDcHIS53zSEk4O1L29Y7TM3Ph54tE+Cb2IdrngGqM07LpYsBP+UlAx8WxF
Y5CMcFQg69NDPkGrjv3MLCiXi3nslOhhhb6uvhufLYtf
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:20:33 2026 by rpki-client