Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3138362e302e3136302e302f32302d3239203d3e203532323535.roa
File:                     3138362e302e3136302e302f32302d3239203d3e203532323535.roa (raw, json)
Hash identifier:          h5r1KwVCa8qHyZKeyz5w5CoqgclrCDHaHUErWJWqu2I=
Subject key identifier:   37:6B:98:D5:34:03:B4:45:30:3B:F2:0E:71:90:BB:4A:C1:3D:E4:4A
Certificate issuer:       /CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
Certificate serial:       46AF2B11894FF8143E2E8DD1DE2839A3FC38BD6E
Authority key identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3138362e302e3136302e302f32302d3239203d3e203532323535.roa
Signing time:             Thu 07 May 2026 19:41:35 +0000
ROA not before:           Thu 07 May 2026 19:36:35 +0000
ROA not after:            Thu 06 May 2027 19:41:35 +0000
asID:                     52255
IP address blocks:        186.0.160.0/20 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:af:2b:11:89:4f:f8:14:3e:2e:8d:d1:de:28:39:a3:fc:38:bd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
        Validity
            Not Before: May  7 19:36:35 2026 GMT
            Not After : May  6 19:41:35 2027 GMT
        Subject: CN=376B98D53403B445303BF20E7190BB4AC13DE44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:9b:a3:ed:f6:3c:04:b8:87:f8:93:c3:23:
                    58:3b:f1:35:04:03:76:26:c5:15:e1:e3:1c:93:54:
                    d1:ea:58:e4:20:04:df:91:c3:39:91:34:5a:62:ff:
                    6b:46:ae:2b:1e:7e:e5:14:fe:ba:ed:0b:70:22:89:
                    bb:e6:f5:f5:18:ed:0d:96:6a:99:50:50:40:ce:92:
                    84:ee:46:84:1c:c5:5d:da:8c:51:ec:54:fd:c8:a2:
                    a4:43:51:68:83:91:5d:2c:11:6b:1e:4b:23:17:99:
                    e4:78:72:d1:1a:2d:0b:a6:f1:5e:ef:f6:3b:6f:df:
                    5b:f5:58:9c:74:bc:e3:ae:f3:c4:e9:80:6f:4c:c4:
                    d2:ea:c9:ad:4c:d7:30:e5:82:fb:fb:a6:eb:9a:cb:
                    4f:2c:71:f9:46:95:94:5c:5c:54:36:7a:1d:20:56:
                    a1:b6:66:8d:64:8e:b7:6d:1c:34:d4:25:37:65:b2:
                    cb:b9:21:36:a5:1b:98:0b:c5:8c:bb:3c:22:da:1b:
                    93:1e:01:3b:14:7b:76:5a:c3:13:65:27:d7:3a:ed:
                    15:ab:62:79:87:23:9a:4f:9d:4d:e5:33:d9:52:4d:
                    66:1d:93:2b:4f:9d:56:1f:c0:d9:ae:1d:36:43:8a:
                    54:e8:86:a9:11:67:a2:d3:50:8b:89:7d:38:6d:71:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:98:D5:34:03:B4:45:30:3B:F2:0E:71:90:BB:4A:C1:3D:E4:4A
            X509v3 Authority Key Identifier:
                keyid:07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3138362e302e3136302e302f32302d3239203d3e203532323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:8a:6b:28:96:35:30:1f:a6:5c:fb:01:16:50:1e:e5:2e:ed:
         e0:ec:6c:32:85:cc:41:24:c5:c4:33:49:73:43:8d:13:97:d4:
         b9:04:dc:db:52:bf:e6:96:22:a2:51:ea:b2:b0:04:88:6f:0d:
         21:ee:e7:b9:fa:75:e2:2f:fd:de:e8:fa:de:1f:43:d0:fd:39:
         5d:42:e5:bb:34:9b:45:cc:ed:63:e2:3b:0b:9b:e5:c6:7a:53:
         5e:5b:2e:95:eb:18:c5:3e:c0:9f:30:c0:41:2b:74:dc:cf:69:
         a7:91:d9:d1:20:36:e5:1c:40:0b:43:21:cb:e8:d5:af:62:80:
         20:31:62:f4:e4:33:84:04:6b:7b:d3:01:a1:18:79:9c:65:53:
         c9:4b:8b:5c:95:9f:7d:81:05:44:6a:ce:0e:02:7c:68:7d:a9:
         a9:c1:67:9c:36:eb:57:57:8d:33:a8:31:f1:34:13:8b:1d:58:
         d0:10:d7:b1:70:80:ef:56:40:2c:07:17:58:ba:36:74:84:0a:
         07:bc:0a:de:20:8a:20:2e:fa:ca:f3:ea:e9:6c:18:ea:49:51:
         58:26:04:c1:5b:1b:d4:b5:6c:b6:17:c3:23:26:4b:40:c7:5e:
         e9:6e:d7:a1:9e:b4:07:e8:fb:0a:66:dd:0c:19:8c:4d:23:8e:
         1a:c7:31:31
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURq8rEYlP+BQ+Lo3R3ig5o/w4vW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdBMzkyQjJBODE5MTNEMjdGMDRCMTZFMzNEQTc5OEVB
NUU0QjhBMzAeFw0yNjA1MDcxOTM2MzVaFw0yNzA1MDYxOTQxMzVaMDMxMTAvBgNV
BAMTKDM3NkI5OEQ1MzQwM0I0NDUzMDNCRjIwRTcxOTBCQjRBQzEzREU0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTJuj7fY8BLiH+JPDI1g78TUE
A3YmxRXh4xyTVNHqWOQgBN+RwzmRNFpi/2tGrisefuUU/rrtC3Aiibvm9fUY7Q2W
aplQUEDOkoTuRoQcxV3ajFHsVP3IoqRDUWiDkV0sEWseSyMXmeR4ctEaLQum8V7v
9jtv31v1WJx0vOOu88TpgG9MxNLqya1M1zDlgvv7puuay08scflGlZRcXFQ2eh0g
VqG2Zo1kjrdtHDTUJTdlssu5ITalG5gLxYy7PCLaG5MeATsUe3ZawxNlJ9c67RWr
YnmHI5pPnU3lM9lSTWYdkytPnVYfwNmuHTZDilTohqkRZ6LTUIuJfThtcVGBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUN2uY1TQDtEUwO/IOcZC7SsE95EowHwYDVR0j
BBgwFoAUB6OSsqgZE9J/BLFuM9p5jqXkuKMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUUzRkFGOEI0ODE0OTg3OEZBNzJDNkM4Qjg1QTMxN0RE
MERBNjk2NjYwODM0REVBNTk3MjU0MjAwNTA2OTgzLzAvMDdBMzkyQjJBODE5MTNE
MjdGMDRCMTZFMzNEQTc5OEVBNUU0QjhBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wN0EzOTJCMkE4MTkxM0QyN0Yw
NEIxNkUzM0RBNzk4RUE1RTRCOEEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFFM0ZBRjhCNDgxNDk4NzhGQTcyQzZDOEI4NUEzMTdERDBEQTY5NjY2
MDgzNERFQTU5NzI1NDIwMDUwNjk4My8wLzMxMzgzNjJlMzAyZTMxMzYzMDJlMzAy
ZjMyMzAyZDMyMzkyMDNkM2UyMDM1MzIzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS6AKAwDQYJ
KoZIhvcNAQELBQADggEBAJSKayiWNTAfplz7ARZQHuUu7eDsbDKFzEEkxcQzSXND
jROX1LkE3NtSv+aWIqJR6rKwBIhvDSHu57n6deIv/d7o+t4fQ9D9OV1C5bs0m0XM
7WPiOwub5cZ6U15bLpXrGMU+wJ8wwEErdNzPaaeR2dEgNuUcQAtDIcvo1a9igCAx
YvTkM4QEa3vTAaEYeZxlU8lLi1yVn32BBURqzg4CfGh9qanBZ5w261dXjTOoMfE0
E4sdWNAQ17FwgO9WQCwHF1i6NnSECge8Ct4giiAu+srz6ulsGOpJUVgmBMFbG9S1
bLYXwyMmS0DHXulu16GetAfo+wpm3QwZjE0jjhrHMTE=
-----END CERTIFICATE-----
Generated at Wed May 13 19:25:45 2026 by rpki-client