Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3134342e302f32302d3234203d3e203236343236.roa
File:                     3138362e352e3134342e302f32302d3234203d3e203236343236.roa (raw, json)
Hash identifier:          uAPpoqYbUjLa34kO+7y6KDSXxR7xCptNJPMCUJXbFH4=
Subject key identifier:   BF:75:7F:02:A3:B8:DD:84:D6:CC:80:2A:13:F3:12:D8:5B:43:81:6F
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       266E9A479E318C2F8044D7E737C065E079D17B9A
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3134342e302f32302d3234203d3e203236343236.roa
Signing time:             Wed 13 Aug 2025 14:35:38 +0000
ROA not before:           Wed 13 Aug 2025 14:30:38 +0000
ROA not after:            Wed 12 Aug 2026 14:35:38 +0000
asID:                     26426
IP address blocks:        186.5.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:9a:47:9e:31:8c:2f:80:44:d7:e7:37:c0:65:e0:79:d1:7b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:38 2025 GMT
            Not After : Aug 12 14:35:38 2026 GMT
        Subject: CN=BF757F02A3B8DD84D6CC802A13F312D85B43816F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:1e:ef:07:da:3f:67:d6:b1:5c:2b:96:ae:
                    f5:1d:e0:11:55:bf:0e:39:b2:64:78:72:ab:d1:73:
                    fc:8c:67:86:39:0e:58:bc:2a:b2:78:28:5e:d7:99:
                    78:b6:3e:7a:46:bd:b8:cf:87:70:ce:e1:ba:a2:05:
                    91:f4:5a:c1:78:04:10:d0:09:44:e1:3f:f8:c0:ca:
                    ab:26:e9:5d:53:bc:3b:5f:77:8d:d0:93:4b:5c:96:
                    54:38:b7:86:71:59:15:bd:50:4a:77:73:d0:62:11:
                    aa:e5:de:1d:62:83:3b:28:a2:d7:55:58:1c:b0:25:
                    02:ac:e3:93:48:5a:24:6d:ae:5f:5d:b4:af:17:96:
                    72:d1:0c:9b:ec:14:06:96:8f:af:51:23:54:87:e0:
                    fe:54:3a:e6:69:de:8d:95:94:c4:39:1e:06:f6:62:
                    6a:b7:2e:53:c4:6f:a0:e8:31:9f:85:56:c4:60:ad:
                    78:eb:7a:52:5a:d8:94:95:b6:b5:1f:2d:b8:ea:60:
                    7b:00:fc:e9:72:1c:4d:db:90:20:0b:e9:93:90:09:
                    93:f9:b7:79:dc:65:34:c2:37:39:45:64:eb:01:f2:
                    69:c6:25:06:5b:20:fe:85:80:7a:66:fc:de:6b:f5:
                    c5:10:a8:b7:15:be:e4:fe:18:d5:0a:32:09:1b:7b:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:7F:02:A3:B8:DD:84:D6:CC:80:2A:13:F3:12:D8:5B:43:81:6F
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3134342e302f32302d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:41:4d:19:df:fd:69:00:77:51:f8:10:6d:99:3d:73:40:f9:
         f6:f4:4d:9a:e7:e8:07:ff:8c:f3:6d:51:65:50:6f:b0:68:84:
         74:ac:4c:88:c0:c6:fe:d3:89:2d:ca:9d:0d:33:fd:a2:df:65:
         98:e8:80:2e:0f:3e:84:4b:28:6a:3c:e5:a5:73:4c:cc:9b:4b:
         70:49:ab:af:8c:8b:b2:77:56:e4:92:10:fa:81:b7:eb:f1:f6:
         24:bf:1d:51:47:24:4e:ec:1d:a5:4f:ac:06:5e:12:4a:4d:b9:
         e9:94:ea:51:fe:5d:aa:95:1f:18:a7:37:a5:bf:24:99:42:3f:
         34:c0:1f:bd:f8:33:47:af:fd:2d:d0:56:a8:26:32:a1:4a:82:
         0d:57:c1:e2:bd:2f:88:4d:88:7a:56:98:50:d4:68:98:34:2f:
         8f:4f:ba:9a:d4:f2:82:89:ab:da:6c:47:3e:24:27:81:2c:37:
         ef:49:2c:60:bd:0c:e8:16:90:63:22:44:8a:6e:81:d7:1e:6f:
         66:31:62:b1:74:6e:8b:52:86:e6:d0:65:33:b5:3c:64:1d:09:
         17:a0:28:f6:32:9c:0c:ec:4b:0e:7a:71:58:97:18:37:31:3e:
         68:a1:9f:6d:1a:24:34:77:c6:3b:a6:d8:e0:46:6f:3c:e5:84:
         cc:58:8b:17
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJm6aR54xjC+ARNfnN8Bl4HnRe5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNTA4MTMxNDMwMzhaFw0yNjA4MTIxNDM1MzhaMDMxMTAvBgNV
BAMTKEJGNzU3RjAyQTNCOEREODRENkNDODAyQTEzRjMxMkQ4NUI0MzgxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutB7vB9o/Z9axXCuWrvUd4BFV
vw45smR4cqvRc/yMZ4Y5Dli8KrJ4KF7XmXi2PnpGvbjPh3DO4bqiBZH0WsF4BBDQ
CUThP/jAyqsm6V1TvDtfd43Qk0tcllQ4t4ZxWRW9UEp3c9BiEarl3h1igzsootdV
WBywJQKs45NIWiRtrl9dtK8XlnLRDJvsFAaWj69RI1SH4P5UOuZp3o2VlMQ5Hgb2
Ymq3LlPEb6DoMZ+FVsRgrXjrelJa2JSVtrUfLbjqYHsA/OlyHE3bkCAL6ZOQCZP5
t3ncZTTCNzlFZOsB8mnGJQZbIP6FgHpm/N5r9cUQqLcVvuT+GNUKMgkbe1I5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUv3V/AqO43YTWzIAqE/MS2FtDgW8wHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMxMzgzNjJlMzUyZTMxMzQzNDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYzNDMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS6BZAwDQYJ
KoZIhvcNAQELBQADggEBABZBTRnf/WkAd1H4EG2ZPXNA+fb0TZrn6Af/jPNtUWVQ
b7BohHSsTIjAxv7TiS3KnQ0z/aLfZZjogC4PPoRLKGo85aVzTMybS3BJq6+Mi7J3
VuSSEPqBt+vx9iS/HVFHJE7sHaVPrAZeEkpNuemU6lH+XaqVHxinN6W/JJlCPzTA
H734M0ev/S3QVqgmMqFKgg1XweK9L4hNiHpWmFDUaJg0L49PuprU8oKJq9psRz4k
J4EsN+9JLGC9DOgWkGMiRIpugdceb2YxYrF0botShubQZTO1PGQdCRegKPYynAzs
Sw56cViXGDcxPmihn20aJDR3xjum2OBGbzzlhMxYixc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:37:54 2025 by rpki-client