Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          23JKvxUgGijHYCJ3ISilzmuF1PsKr0CjUvbYNX1QJzI=
Subject key identifier:   32:A7:66:0A:65:5D:09:05:80:B1:E3:AC:0F:87:9E:DD:64:FC:C4:CE
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       58F86BF0D56D5EE5AE40EE2D337E16B714AA66C7
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:07 +0000
ROA not before:           Wed 17 Sep 2025 17:42:07 +0000
ROA not after:            Wed 16 Sep 2026 17:47:07 +0000
asID:                     22927
IP address blocks:        186.141.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f8:6b:f0:d5:6d:5e:e5:ae:40:ee:2d:33:7e:16:b7:14:aa:66:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:07 2025 GMT
            Not After : Sep 16 17:47:07 2026 GMT
        Subject: CN=32A7660A655D090580B1E3AC0F879EDD64FCC4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:f6:82:c1:26:18:c1:2e:41:dc:65:5f:32:
                    b4:e6:4f:cf:d9:7b:1a:75:77:70:dc:e9:d4:62:92:
                    96:23:2a:6e:7c:86:29:74:3e:90:48:78:25:b0:94:
                    e0:24:d3:e4:8c:1d:5b:a4:ce:2e:3d:62:8a:a5:d9:
                    93:4d:0e:a4:37:72:4b:55:4c:d7:f6:8f:6a:7e:2b:
                    80:63:61:d9:e1:1e:f9:42:be:f4:7c:f5:ff:ac:64:
                    e7:f4:e6:07:ee:0a:76:1c:5e:f5:bd:79:93:af:7a:
                    a7:90:f1:b9:00:1a:ba:3e:04:3b:85:ab:0f:fd:f3:
                    49:2a:4f:74:50:2c:e5:dd:76:49:7e:68:fe:47:9b:
                    6a:8b:4b:93:3d:d8:94:7e:17:eb:14:f2:e1:41:95:
                    74:6c:79:4c:3f:06:8e:8b:70:17:21:b5:77:4a:68:
                    c0:7a:d9:5d:f9:f5:98:64:d0:29:92:6d:d1:1c:0a:
                    71:b8:99:24:64:9c:b3:27:7c:8d:ee:9f:8f:12:0b:
                    dd:68:41:48:b7:ef:36:62:ca:dd:65:d0:a9:3c:80:
                    12:ef:8d:1c:e2:2a:fa:d0:09:81:22:c4:50:fd:a8:
                    92:df:f4:d2:47:68:5e:0b:8c:48:b3:a3:ce:34:d2:
                    b4:97:5b:8d:d3:63:ef:6a:74:24:bb:2a:71:f3:ad:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:66:0A:65:5D:09:05:80:B1:E3:AC:0F:87:9E:DD:64:FC:C4:CE
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:1b:86:33:4f:7d:4c:b3:30:59:78:49:53:06:da:f9:e1:
         cd:34:91:b4:fc:a4:54:2f:ed:77:90:94:c9:06:8f:7f:c3:fc:
         90:09:1b:06:67:63:3f:e7:f6:96:91:32:ee:eb:53:ed:51:59:
         4d:76:05:d5:e2:e1:fa:b8:a1:e4:2e:4a:60:16:f0:a2:a7:8d:
         56:75:e2:34:ec:59:1d:a5:70:e9:a5:fd:e3:6b:20:cf:43:1c:
         67:6c:f9:1e:7c:53:a9:4c:4a:69:37:7e:4d:cd:74:9b:ee:a4:
         d9:73:f3:87:75:5c:20:e5:f1:63:5f:4d:38:96:0b:d8:b2:b4:
         78:02:15:70:4b:f8:20:d4:9b:71:f5:a2:bd:f5:71:75:30:82:
         9a:b4:ec:18:52:92:da:f9:1c:f1:e1:df:11:7a:f0:0f:63:58:
         c5:7a:55:1c:db:77:27:46:0e:29:04:87:ff:03:33:45:b6:6f:
         b9:3f:2a:97:b6:13:50:6e:37:25:44:8b:a4:66:1c:76:6b:a4:
         62:74:c8:ea:2d:0a:24:8f:60:95:e5:7b:68:f6:f1:8a:97:eb:
         6e:8a:52:94:9c:c4:16:e9:dd:2f:64:6b:d6:d0:31:70:9f:9c:
         af:ff:a0:ec:47:b4:68:e5:4b:2d:99:24:07:a2:54:5c:12:39:
         17:d0:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:36 2025 by rpki-client