Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa
File:                     3138362e352e3132382e302f32322d3232203d3e203233353230.roa (raw, json)
Hash identifier:          NQho2rw87vApkFoXsq0bf5MhyOVfJdgw4ELFVcDvkdQ=
Subject key identifier:   5F:9A:61:E8:76:AC:C0:09:7B:40:6E:46:7E:A2:20:7F:0E:8B:64:DF
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       503785861DAF04C3F96807DF7DC487A8B0C9DF9F
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa
Signing time:             Wed 15 Jul 2026 14:55:05 +0000
ROA not before:           Wed 15 Jul 2026 14:50:05 +0000
ROA not after:            Wed 14 Jul 2027 14:55:05 +0000
asID:                     23520
IP address blocks:        186.5.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:37:85:86:1d:af:04:c3:f9:68:07:df:7d:c4:87:a8:b0:c9:df:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Jul 15 14:50:05 2026 GMT
            Not After : Jul 14 14:55:05 2027 GMT
        Subject: CN=5F9A61E876ACC0097B406E467EA2207F0E8B64DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:63:99:23:51:9f:bc:cb:7a:69:6a:ee:47:
                    aa:e1:07:97:f3:7c:34:66:2a:93:05:ad:6c:73:5b:
                    3f:da:85:bb:1e:c8:11:0e:7f:bb:87:e1:38:f5:f1:
                    97:9b:be:d9:d1:af:f7:6a:fc:0e:ab:02:c8:95:cf:
                    5c:67:c4:bb:cd:bf:ef:ad:a0:4f:29:9b:bc:6e:25:
                    f0:b7:e5:e0:39:62:42:b8:9f:21:56:27:3f:2a:02:
                    9e:e6:e6:d5:80:62:a3:7a:ed:d7:d2:a2:af:d8:b8:
                    9f:d4:6f:14:8b:5f:00:4f:09:0a:4e:2f:9d:7b:d5:
                    5d:5c:1f:13:67:dc:ad:7d:2e:b4:a0:62:aa:72:a1:
                    74:60:1c:13:d1:b8:0a:33:f2:bc:e5:42:7d:d5:5d:
                    f5:19:09:40:3e:0c:bf:b5:75:5c:ae:9b:12:44:71:
                    0f:71:58:9a:74:3e:5e:1a:e0:19:9f:86:09:95:ec:
                    80:64:38:3b:47:ee:b1:0e:ff:f2:da:96:5f:dc:ff:
                    af:70:74:83:ff:42:d6:93:7e:00:32:88:f7:78:bb:
                    8a:8c:e1:a0:36:3c:ec:1c:51:27:42:b2:68:3c:4b:
                    8f:23:b6:7e:53:97:64:e2:24:e8:02:40:58:fa:84:
                    e7:52:41:85:e6:b7:1d:67:42:cf:76:8b:41:71:bc:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:61:E8:76:AC:C0:09:7B:40:6E:46:7E:A2:20:7F:0E:8B:64:DF
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:de:dc:1a:f4:11:cb:6a:87:87:f8:8a:7e:fb:f6:bd:90:3f:
         01:e5:65:3d:ab:2d:c1:6a:9e:7d:15:2c:fc:36:87:18:2b:f5:
         07:98:7e:48:05:9c:14:1c:49:ce:81:46:00:cb:75:34:9b:36:
         6f:15:70:be:79:87:9b:be:41:47:f0:87:9e:36:ba:22:8d:02:
         87:84:3f:87:41:13:af:f2:95:0d:5c:70:dd:7d:49:14:47:eb:
         c6:df:1e:fe:d8:7e:90:e0:b8:66:4e:41:3e:b7:1b:80:a7:ce:
         d7:91:8a:d1:97:ed:e8:02:73:43:e3:72:88:0b:f8:c4:79:1e:
         e8:2b:58:44:0d:eb:8e:e3:f5:84:b9:bb:49:e7:bb:33:3e:cc:
         9d:da:b8:12:e9:b7:19:19:16:c7:bd:0a:54:ef:75:3e:2e:67:
         fd:22:96:7e:ed:8b:44:e8:4f:16:e1:a9:56:c9:0e:c0:a0:67:
         e7:76:58:3d:ef:9e:1b:2e:9d:76:e3:f1:16:cc:7e:fe:55:39:
         79:c4:74:8e:c7:ce:66:08:6d:77:ea:d9:52:50:2a:78:12:59:
         a7:e7:af:4b:46:e6:1c:8f:27:3a:4c:e8:d6:af:85:78:a3:46:
         8f:94:b7:0c:91:38:ce:15:43:ae:c4:fe:80:9f:5d:64:5c:0f:
         f9:11:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:29:44 2026 by rpki-client