Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133362e302f32312d3234203d3e203236343236.roa
File:                     3138362e352e3133362e302f32312d3234203d3e203236343236.roa (raw, json)
Hash identifier:          aq1tdy8+/ObR20KyrWyjhwW4yjxXOx5NUmG5PZHPy4c=
Subject key identifier:   E9:51:FA:EC:41:C2:AC:E3:22:C4:42:53:7A:9D:98:C7:BB:A5:3D:34
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       5DCD9498368DCC0B7063787257398513D01341DD
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133362e302f32312d3234203d3e203236343236.roa
Signing time:             Wed 13 Aug 2025 14:35:37 +0000
ROA not before:           Wed 13 Aug 2025 14:30:37 +0000
ROA not after:            Wed 12 Aug 2026 14:35:37 +0000
asID:                     26426
IP address blocks:        186.5.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cd:94:98:36:8d:cc:0b:70:63:78:72:57:39:85:13:d0:13:41:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:37 2025 GMT
            Not After : Aug 12 14:35:37 2026 GMT
        Subject: CN=E951FAEC41C2ACE322C442537A9D98C7BBA53D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:19:a4:dd:37:99:d1:af:83:c2:5f:ae:2d:
                    c2:77:2f:f4:21:b6:6b:68:48:14:dd:61:a9:a3:3d:
                    01:4f:ce:90:50:d1:1d:72:85:2e:5c:c8:1e:e8:d5:
                    33:2a:b8:3c:41:11:89:f1:4a:77:8d:0f:d5:1a:22:
                    a2:6e:e0:7a:88:b6:62:1e:15:41:79:73:dc:64:96:
                    37:07:e2:9b:7c:f7:d2:2e:b8:1f:bc:66:e2:f6:c8:
                    31:97:d7:f8:07:e1:c8:a5:96:98:8b:16:df:75:e5:
                    a1:d9:2e:03:ae:f4:13:69:11:c4:21:3d:9e:c3:e7:
                    de:9d:45:5c:a4:37:5e:52:ce:3c:a9:28:2b:e0:47:
                    0c:99:8f:a2:56:d6:35:4f:7e:5f:a7:09:6a:17:46:
                    7b:26:a9:f6:d5:ca:e9:32:25:aa:8d:c8:59:ee:65:
                    11:66:0f:49:bd:aa:42:47:f8:a4:77:92:33:02:04:
                    88:ac:12:9a:ee:d7:59:70:0d:c7:22:5c:54:54:52:
                    71:5c:dd:1c:73:d9:72:f5:7d:93:c7:2e:37:7a:e9:
                    64:e9:31:9a:e9:0e:5c:01:ee:0e:6a:ba:a0:b6:3d:
                    9a:15:2f:df:9f:2e:f4:34:11:1e:af:01:dc:4d:56:
                    8c:90:96:3b:7a:d5:f8:00:26:cd:92:a8:1a:c5:f4:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:FA:EC:41:C2:AC:E3:22:C4:42:53:7A:9D:98:C7:BB:A5:3D:34
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3133362e302f32312d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:d1:71:13:4b:4b:1e:51:e1:a1:e1:18:d4:1f:4f:c2:a2:ce:
         d6:64:37:a2:47:a2:a0:cf:7e:14:ee:09:d8:02:a7:cd:3e:f6:
         21:98:6a:f8:7a:d4:8c:3a:14:e9:45:d3:7b:a6:cc:63:c1:cf:
         b9:99:42:22:b4:cb:eb:fa:99:9c:a1:03:01:6a:66:f1:ad:f1:
         4c:7f:c5:cc:ca:4b:e1:fb:0d:ec:82:52:ba:dc:08:f8:fd:e0:
         34:66:87:c8:8f:25:c7:08:d9:b4:52:5b:69:4a:00:44:09:04:
         95:61:17:48:e8:35:56:f0:0f:1d:03:e1:e0:62:2b:cc:a5:2d:
         58:b1:94:e1:bc:74:9f:d0:4b:f0:99:80:e8:aa:a2:95:7f:dd:
         94:31:9d:6b:12:13:b5:17:8d:84:c7:d8:51:fc:bb:97:39:3b:
         18:d5:a2:53:7c:fa:37:d4:a4:7e:5f:62:da:2e:51:fa:06:de:
         30:d2:8a:c9:eb:9e:84:dc:c3:92:7f:d7:11:20:18:de:f6:c7:
         74:90:f0:dd:0a:c6:a7:f2:29:42:6d:c8:f7:95:aa:e7:98:4c:
         8c:34:8e:8f:e1:91:88:e6:06:fa:43:65:97:52:f7:61:13:39:
         91:b4:68:c9:b7:7e:cc:59:d2:da:f0:15:b1:98:63:8b:a5:70:
         e4:0b:15:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:12 2025 by rpki-client