Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136332e302f32342d3234203d3e20323730303331.roa
File:                     3138362e3139342e3136332e302f32342d3234203d3e20323730303331.roa (raw, json)
Hash identifier:          Gy1Ukt3Gcs+Rt+Im8mmUCbVT/TrDEBArFtEFOgdl/14=
Subject key identifier:   C1:70:35:70:58:C0:63:31:62:EE:BF:84:13:D9:AD:6D:D8:1C:0E:B0
Certificate issuer:       /CN=0E87CA1A33782833150C7C0561C3E8EC5CBEAB37
Certificate serial:       40837A3A22854A0C4C213D0542454BF16E74FD01
Authority key identifier: 0E:87:CA:1A:33:78:28:33:15:0C:7C:05:61:C3:E8:EC:5C:BE:AB:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136332e302f32342d3234203d3e20323730303331.roa
Signing time:             Fri 21 Aug 2026 20:40:01 +0000
ROA not before:           Fri 21 Aug 2026 20:35:01 +0000
ROA not after:            Fri 20 Aug 2027 20:40:01 +0000
asID:                     270031
IP address blocks:        186.194.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:7a:3a:22:85:4a:0c:4c:21:3d:05:42:45:4b:f1:6e:74:fd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E87CA1A33782833150C7C0561C3E8EC5CBEAB37
        Validity
            Not Before: Aug 21 20:35:01 2026 GMT
            Not After : Aug 20 20:40:01 2027 GMT
        Subject: CN=C170357058C0633162EEBF8413D9AD6DD81C0EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:40:f8:47:b7:cc:6c:e5:aa:0d:cc:22:25:
                    2e:53:81:12:84:ba:f7:d7:6c:6d:66:f5:12:fc:45:
                    ae:bb:1a:32:0b:d6:b0:f8:05:3d:a2:2b:fa:ca:a6:
                    9f:e2:a2:0b:3f:c9:a2:93:0e:88:c9:6f:6a:5f:dd:
                    4a:74:8a:1a:ec:7f:24:7a:3a:5b:ce:ef:da:46:d3:
                    3b:09:58:4c:cd:23:aa:d6:56:00:91:ad:69:0b:de:
                    f3:53:86:e3:78:28:e7:9a:2d:1d:d0:fd:0d:81:87:
                    22:90:96:59:28:53:63:e7:63:78:ca:c8:64:a4:5e:
                    92:8c:2a:2c:ab:02:67:8f:af:6d:a1:f5:be:48:26:
                    6e:df:f4:10:12:e5:3e:8a:bb:2b:7f:12:a4:3b:41:
                    4d:5e:fa:e8:da:de:35:02:7f:fc:a3:a3:b1:12:bf:
                    b8:aa:b4:41:79:db:fd:85:67:03:3f:fd:5a:8d:4e:
                    4c:34:dd:16:e8:2e:a0:cc:a7:a9:56:bb:78:38:b5:
                    7a:da:79:13:1b:69:9f:6d:42:27:d1:7f:cd:6b:f7:
                    ee:17:02:b4:76:8f:c0:e6:d3:07:3e:32:3d:2b:3d:
                    a8:2e:ef:95:95:01:5a:0b:2f:19:e6:e8:07:f9:42:
                    fe:88:b2:33:e6:e0:69:10:01:69:17:08:0c:8b:11:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:35:70:58:C0:63:31:62:EE:BF:84:13:D9:AD:6D:D8:1C:0E:B0
            X509v3 Authority Key Identifier:
                keyid:0E:87:CA:1A:33:78:28:33:15:0C:7C:05:61:C3:E8:EC:5C:BE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136332e302f32342d3234203d3e20323730303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:c1:f8:c8:31:3d:d4:c1:b8:79:db:e6:8b:dd:e0:c5:c9:
         58:63:ac:94:28:ee:7b:93:59:98:63:1e:90:c0:79:e8:eb:b0:
         70:d1:32:17:73:e3:7f:40:96:80:65:82:b3:53:3e:7f:60:cc:
         b9:4a:a9:df:19:bb:b3:d6:62:85:62:42:f0:60:90:b2:64:c6:
         93:36:b6:54:95:6c:b7:17:45:2d:90:bc:bc:2b:c3:7c:6d:59:
         ec:44:25:04:a1:2a:e0:63:d0:f6:41:61:be:79:86:b9:b1:d4:
         a6:11:e2:8a:1b:3b:67:f6:96:fd:25:11:03:46:7f:f4:d9:e0:
         68:a9:83:40:32:2b:75:8d:2e:b1:58:70:09:22:72:bc:c0:15:
         5b:cd:c0:d0:4c:bc:de:94:bd:ec:ac:16:4a:ae:5d:e8:cf:35:
         42:b5:9f:52:fb:ea:e2:a7:59:bd:38:d4:9e:44:e3:03:c9:08:
         40:fe:43:13:af:b4:62:49:46:bc:2d:f5:5a:45:93:26:84:ea:
         ca:e1:a8:07:b2:53:47:0f:33:6f:2e:0b:16:ec:41:8c:b4:61:
         7d:98:ec:fe:4d:ed:df:15:3d:51:a8:fe:c8:e2:ea:1e:45:54:
         a4:d7:26:80:08:c7:32:fa:54:b1:79:48:d5:d4:2e:95:7e:f2:
         2f:fc:4b:a5
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQIN6OiKFSgxMIT0FQkVL8W50/QEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU4N0NBMUEzMzc4MjgzMzE1MEM3QzA1NjFDM0U4RUM1
Q0JFQUIzNzAeFw0yNjA4MjEyMDM1MDFaFw0yNzA4MjAyMDQwMDFaMDMxMTAvBgNV
BAMTKEMxNzAzNTcwNThDMDYzMzE2MkVFQkY4NDEzRDlBRDZERDgxQzBFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbYED4R7fMbOWqDcwiJS5TgRKE
uvfXbG1m9RL8Ra67GjIL1rD4BT2iK/rKpp/iogs/yaKTDojJb2pf3Up0ihrsfyR6
OlvO79pG0zsJWEzNI6rWVgCRrWkL3vNThuN4KOeaLR3Q/Q2BhyKQllkoU2PnY3jK
yGSkXpKMKiyrAmePr22h9b5IJm7f9BAS5T6Kuyt/EqQ7QU1e+uja3jUCf/yjo7ES
v7iqtEF52/2FZwM//VqNTkw03RboLqDMp6lWu3g4tXraeRMbaZ9tQifRf81r9+4X
ArR2j8Dm0wc+Mj0rPagu75WVAVoLLxnm6Af5Qv6IsjPm4GkQAWkXCAyLEYBFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUwXA1cFjAYzFi7r+EE9mtbdgcDrAwHwYDVR0j
BBgwFoAUDofKGjN4KDMVDHwFYcPo7Fy+qzcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Q0M2NUFDQ0IzOTExRDA4OTFGRTNGRUMyRUU4MTlBQjZF
NUFGMEYzNzFCMjY4QkUzQzc3NTVDQjYxMTUzMTk2LzAvMEU4N0NBMUEzMzc4Mjgz
MzE1MEM3QzA1NjFDM0U4RUM1Q0JFQUIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTg3Q0ExQTMzNzgyODMzMTUw
QzdDMDU2MUMzRThFQzVDQkVBQjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkNDNjVBQ0NCMzkxMUQwODkxRkUzRkVDMkVFODE5QUI2RTVBRjBGMzcx
QjI2OEJFM0M3NzU1Q0I2MTE1MzE5Ni8wLzMxMzgzNjJlMzEzOTM0MmUzMTM2MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6
wqMwDQYJKoZIhvcNAQELBQADggEBAFXKwfjIMT3Uwbh52+aL3eDFyVhjrJQo7nuT
WZhjHpDAeejrsHDRMhdz439AloBlgrNTPn9gzLlKqd8Zu7PWYoViQvBgkLJkxpM2
tlSVbLcXRS2QvLwrw3xtWexEJQShKuBj0PZBYb55hrmx1KYR4oobO2f2lv0lEQNG
f/TZ4Gipg0AyK3WNLrFYcAkicrzAFVvNwNBMvN6UveysFkquXejPNUK1n1L76uKn
Wb041J5E4wPJCED+QxOvtGJJRrwt9VpFkyaE6srhqAeyU0cPM28uCxbsQYy0YX2Y
7P5N7d8VPVGo/sji6h5FVKTXJoAIxzL6VLF5SNXULpV+8i/8S6U=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:20:17 2026 by rpki-client