Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133302e302f32332d3234203d3e203236343236.roa
File:                     3138362e352e3133302e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          fasbtZRYbNekwez/H69jcww6bTHMVaVGC/3TQLo/DYw=
Subject key identifier:   4D:59:49:4A:3B:23:7B:32:B7:9B:85:26:28:91:C8:82:54:85:3C:62
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       77A276C1487BB7487868806BCA249A496AB8E6CB
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133302e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 13 Aug 2025 14:35:33 +0000
ROA not before:           Wed 13 Aug 2025 14:30:33 +0000
ROA not after:            Wed 12 Aug 2026 14:35:33 +0000
asID:                     26426
IP address blocks:        186.5.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:76:c1:48:7b:b7:48:78:68:80:6b:ca:24:9a:49:6a:b8:e6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:33 2025 GMT
            Not After : Aug 12 14:35:33 2026 GMT
        Subject: CN=4D59494A3B237B32B79B85262891C88254853C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:fa:e9:09:3a:b3:b5:3c:aa:6c:f2:a4:02:
                    af:1a:a8:7e:a8:dd:0f:0c:6f:57:a3:a4:d1:e9:7b:
                    6c:9d:63:00:dd:0a:42:9a:71:04:a4:a5:03:d9:a0:
                    69:0e:06:e5:e3:1f:45:80:32:fd:11:84:4d:a1:5b:
                    6e:b7:19:94:1b:fc:81:58:1f:0a:71:91:5a:4b:d6:
                    e4:ae:c1:fd:1f:91:94:1e:9a:1b:2c:d7:74:36:af:
                    50:95:25:3e:4d:f0:6d:fc:2e:ed:9e:96:1a:4a:3f:
                    4f:f3:bb:ec:56:43:8b:b8:0e:21:36:b8:2a:30:bb:
                    a5:b5:30:c9:6f:02:c6:f4:28:d6:db:a7:c1:aa:10:
                    ad:98:31:b9:d0:a3:7e:78:a8:b3:39:2d:b2:a6:65:
                    85:12:be:df:5a:97:66:67:f9:35:1a:4f:87:41:f7:
                    20:8e:fd:ca:ef:16:c6:e1:89:b0:c5:b9:15:d2:69:
                    69:f3:1f:d4:5c:e7:f9:ec:52:bf:ec:a6:c8:77:21:
                    6c:f0:6a:0b:15:44:e5:e4:1a:54:79:10:01:26:b3:
                    8c:e5:f9:6e:90:48:7e:95:72:a4:1b:52:0b:13:18:
                    4d:b9:03:68:86:92:5a:39:4a:64:a3:71:fe:5f:11:
                    fa:ad:65:9b:c0:20:c2:ac:52:db:72:c3:fb:2a:b4:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:49:4A:3B:23:7B:32:B7:9B:85:26:28:91:C8:82:54:85:3C:62
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133302e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:db:6e:41:65:15:23:15:f0:1d:3d:1b:f5:4a:5f:97:f3:d1:
         40:34:1b:34:4c:db:61:76:22:40:65:c4:0d:6d:1e:c8:45:bd:
         4e:fb:c2:3f:fb:96:87:6a:53:8a:65:5a:93:23:20:41:28:9f:
         ad:f2:29:57:e0:db:6f:be:5d:4a:15:9b:e6:10:40:58:0c:14:
         1d:a7:f5:1f:e2:38:65:15:d5:77:46:09:c1:19:43:a5:6f:13:
         37:d5:4f:29:a0:de:2d:4c:07:4c:9c:c4:74:45:e0:bf:44:0f:
         73:67:35:08:66:19:63:c6:48:92:8f:33:b9:c0:bd:35:15:c4:
         38:68:6f:1c:20:d1:0c:c1:39:df:55:9c:34:e3:2d:95:cd:e7:
         29:db:40:11:2c:ac:6f:8d:cf:28:5c:40:ca:3b:51:98:e9:4e:
         18:52:da:36:99:50:93:f9:8c:25:f0:28:b9:ff:6a:05:42:c3:
         7f:99:55:9f:df:25:ed:54:9c:fb:2f:91:06:f2:67:04:40:e2:
         d3:7d:06:1c:ab:ea:a2:7f:a6:40:ba:66:79:7d:77:02:8e:1d:
         ba:80:89:a8:b6:f1:b2:2f:05:00:35:c8:cb:9d:6e:10:54:10:
         fb:64:fc:d5:77:41:3a:20:ed:ed:ff:36:a6:06:49:19:72:5c:
         a4:f0:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:22 2025 by rpki-client