Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          nazgABjx5X9+hhs8fO+bBrvcKiYbXNkwFiw6avdyVII=
Subject key identifier:   FD:49:C9:13:1F:EA:7A:87:85:52:81:C0:70:47:30:3B:BC:B9:E6:1A
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7207D620C85F40C21198FB13DDE22FB8B50380CD
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:08 +0000
ROA not before:           Wed 17 Sep 2025 17:42:08 +0000
ROA not after:            Wed 16 Sep 2026 17:47:08 +0000
asID:                     22927
IP address blocks:        186.141.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:07:d6:20:c8:5f:40:c2:11:98:fb:13:dd:e2:2f:b8:b5:03:80:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:08 2025 GMT
            Not After : Sep 16 17:47:08 2026 GMT
        Subject: CN=FD49C9131FEA7A87855281C07047303BBCB9E61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:3d:24:25:ad:5d:3f:4c:87:7c:98:aa:45:
                    cd:99:ee:26:df:8c:1d:ab:ab:38:45:05:a7:02:40:
                    50:43:e5:e9:62:2a:e7:3c:cb:fa:a1:10:df:1d:0b:
                    0b:c0:a9:f6:e4:66:1e:eb:0f:67:f9:7f:73:01:e7:
                    f0:24:51:ec:e7:0e:40:b2:75:e7:3b:3f:d2:51:a3:
                    78:40:a9:63:02:ea:95:7d:5e:25:96:98:71:ab:47:
                    2f:06:54:f1:db:9c:f8:d5:8f:d4:23:3e:1b:93:21:
                    de:cd:96:19:cb:d9:d2:24:0f:9c:36:15:eb:9c:ee:
                    da:54:ca:e1:6c:cf:04:c6:3a:1e:70:65:01:39:42:
                    ba:09:73:86:87:e0:e9:29:ad:38:5c:8a:4c:08:82:
                    28:78:bf:b6:02:8e:e5:65:44:e7:0c:7d:8a:59:d7:
                    ee:b0:b6:e2:bb:35:f9:cf:c5:08:72:b0:c6:7c:6b:
                    be:80:c4:5a:7d:8f:1c:7b:08:7d:a0:9d:69:d6:df:
                    c3:60:bb:02:4c:e2:4d:c7:12:b0:b7:0b:42:0c:04:
                    80:a6:3a:09:06:f4:ac:75:46:5d:47:c5:6d:a6:80:
                    7e:3f:b5:46:41:f1:fc:6b:34:9f:31:f6:86:3a:33:
                    4c:cf:a2:e7:00:97:b7:ca:d5:6e:c1:37:16:76:72:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:C9:13:1F:EA:7A:87:85:52:81:C0:70:47:30:3B:BC:B9:E6:1A
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:51:d9:bb:e5:32:1f:dd:18:27:83:46:bd:d2:75:7b:c7:
         8f:ce:89:e7:e1:66:62:86:72:20:86:70:8d:55:a7:e6:90:f0:
         e8:cd:07:0c:97:56:20:3f:c4:e1:de:3d:9d:60:38:92:92:23:
         51:e0:1b:5f:8c:48:2a:15:2e:63:03:f9:68:23:fa:f1:05:24:
         65:44:b6:ef:c3:39:d6:fc:6f:60:09:c8:40:1d:83:ef:87:25:
         ce:99:65:76:e7:d1:ec:1e:80:76:87:a3:94:61:b1:c4:ce:8b:
         fb:e2:b3:e1:a4:cd:00:b1:e6:63:fe:5b:50:6a:1c:b9:3c:ea:
         4f:7d:da:ec:69:bd:7a:05:68:46:2d:1a:d7:15:d8:61:c5:f6:
         d1:b6:c5:db:e2:73:3a:35:17:1a:fd:f0:5a:22:ca:7a:f0:9c:
         4f:b3:ed:63:fa:1f:9b:67:b0:a9:57:64:91:4d:f2:46:79:08:
         59:77:8e:6d:e3:f6:8b:18:2a:be:04:86:39:43:db:09:b1:d5:
         52:3b:e1:73:b2:64:23:cc:d5:da:de:9a:d9:de:17:c4:cd:43:
         85:27:5c:df:13:e7:2c:61:5c:32:0a:bd:a0:98:b1:eb:67:7f:
         ed:ac:ae:3c:01:a6:64:14:7b:8c:b8:b5:01:a6:29:3f:f0:f3:
         b9:30:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:34 2025 by rpki-client