Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa
File:                     3138362e352e3132382e302f32322d3232203d3e203233353230.roa (raw, json)
Hash identifier:          2kNSQcN9q3802BKbe4luCrhQLTf+HP+utSuHolSllvw=
Subject key identifier:   C3:37:27:AD:89:C3:E3:66:4E:F2:EF:8C:7F:EC:2E:CF:F6:02:2F:F3
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       1E33EFC352B4C4F9DF3D6B67141AECB26F47266B
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa
Signing time:             Wed 13 Aug 2025 14:35:39 +0000
ROA not before:           Wed 13 Aug 2025 14:30:39 +0000
ROA not after:            Wed 12 Aug 2026 14:35:39 +0000
asID:                     23520
IP address blocks:        186.5.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:33:ef:c3:52:b4:c4:f9:df:3d:6b:67:14:1a:ec:b2:6f:47:26:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:39 2025 GMT
            Not After : Aug 12 14:35:39 2026 GMT
        Subject: CN=C33727AD89C3E3664EF2EF8C7FEC2ECFF6022FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:75:bf:bc:10:94:76:d0:39:6b:8f:95:cc:
                    c1:a2:dd:f3:e8:88:93:d9:14:5a:8c:6f:4e:66:01:
                    c3:9c:bc:73:e1:a0:34:ac:77:98:52:11:08:7d:11:
                    fa:3b:a7:96:6f:69:72:1d:b6:31:a8:20:25:b1:89:
                    2b:56:bf:8c:dc:6e:25:4d:a7:e2:25:54:99:55:f9:
                    8f:38:fa:b3:64:f3:f1:85:a1:f9:6d:0d:3d:91:ca:
                    1b:29:68:c2:b9:2e:42:00:e4:8a:6e:de:2a:cb:9c:
                    22:f5:bc:7c:93:cd:e9:13:bf:6b:99:bc:9d:d7:d8:
                    a2:43:da:66:0f:35:d5:d3:78:7a:a2:d3:df:a6:93:
                    e3:2e:06:c3:61:40:06:d4:e0:22:68:bd:43:59:60:
                    2b:1e:b2:46:a9:bf:f7:af:52:dc:6d:16:b0:fb:30:
                    98:81:d7:f1:c3:18:ef:f0:8e:13:01:07:42:98:68:
                    94:ba:ab:f7:0f:6c:d7:47:36:58:21:1f:64:fa:5e:
                    ae:bc:ad:77:ef:0d:c2:f0:fa:5d:99:63:d9:85:ab:
                    2b:65:57:66:71:8a:cc:3d:6f:8d:84:8c:1d:d2:91:
                    44:b4:c0:00:ce:ab:bf:77:36:81:7e:c4:8a:27:7e:
                    8c:07:f1:a4:70:e2:85:81:6a:63:53:aa:69:bb:1d:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:27:AD:89:C3:E3:66:4E:F2:EF:8C:7F:EC:2E:CF:F6:02:2F:F3
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:64:3c:9a:32:db:26:bf:76:17:5b:42:0b:3e:76:88:0c:70:
         3f:9e:03:83:79:fb:60:11:82:d9:40:34:e0:7d:8a:85:46:1f:
         26:ff:40:d7:b6:fa:e8:d7:9f:7b:07:dd:07:fa:75:2c:89:94:
         38:0d:0a:fd:63:fc:32:f0:9d:53:eb:7b:db:6c:a7:b9:71:ad:
         34:1d:7b:4c:85:35:8b:2b:59:28:59:1b:6e:75:4b:c5:b6:8c:
         8d:2e:47:88:6e:88:11:da:46:96:84:0b:e2:0e:0d:90:ba:a6:
         26:c3:f7:a4:ee:4b:75:04:c6:e0:0d:8c:48:c8:15:22:cf:57:
         b4:ba:65:b8:0c:43:1c:d3:e3:43:17:45:7f:e7:ca:9f:af:15:
         99:98:62:a9:a5:d4:96:c7:cf:80:e6:4f:c1:1c:17:6b:06:86:
         c0:18:f0:43:2b:63:9b:64:0e:a8:c5:b7:73:f6:7c:5c:15:22:
         0e:e4:93:5a:a9:b9:63:f0:9a:e5:b4:0a:2c:1d:61:cc:d1:e9:
         ae:a7:5e:dd:5c:13:42:a9:6c:2c:d7:fb:28:bf:46:6b:6b:11:
         64:8b:ec:6a:29:c0:33:c8:d2:c1:85:d9:30:65:1d:3b:ef:41:
         af:b7:bb:76:e9:66:2c:30:d8:e9:80:3c:27:fe:0d:99:a9:72:
         d0:dc:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:13 2025 by rpki-client