Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          eQ05DTSsAR5L+7fjvroF4QBPVpC+PUv62ptVn3gV7KA=
Subject key identifier:   66:B7:BC:EE:41:19:CC:C6:65:17:A3:73:D9:89:05:3E:8A:41:63:97
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       3D8D8E4E076C5B095F02C5D6BA8DD9DB411DDD69
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:06 +0000
ROA not before:           Wed 17 Sep 2025 17:42:06 +0000
ROA not after:            Wed 16 Sep 2026 17:47:06 +0000
asID:                     22927
IP address blocks:        186.141.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8d:8e:4e:07:6c:5b:09:5f:02:c5:d6:ba:8d:d9:db:41:1d:dd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:06 2025 GMT
            Not After : Sep 16 17:47:06 2026 GMT
        Subject: CN=66B7BCEE4119CCC66517A373D989053E8A416397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:62:69:46:79:fa:c3:32:e7:bb:04:07:e9:
                    00:0d:d8:99:68:0d:97:21:02:4a:0d:f3:2a:ae:bd:
                    53:34:db:a6:5d:32:c1:e4:ad:2a:a8:c5:19:67:a3:
                    c3:c0:ca:0b:40:45:12:93:9a:84:eb:05:68:9e:4d:
                    35:d8:af:e4:03:e8:83:a3:a9:22:fc:97:63:06:86:
                    cd:cb:4d:43:99:19:cb:65:2c:42:3b:b5:19:08:6a:
                    28:80:1b:88:7c:8a:ef:1f:1d:6b:21:62:e6:ed:c3:
                    54:ef:49:a4:9f:31:de:31:63:e8:04:96:af:ab:75:
                    29:5d:db:57:8a:03:5a:71:df:f7:ca:11:7a:a8:de:
                    83:28:fa:c0:11:96:78:39:aa:5c:09:7d:f4:2d:9b:
                    d9:0d:82:34:96:a9:56:3d:ba:58:19:00:48:7a:49:
                    2b:a7:43:98:3a:1f:8d:72:a7:a7:da:b6:6a:64:9f:
                    99:98:21:80:cf:12:1d:da:8a:22:a1:00:57:26:4a:
                    0c:36:72:ae:21:d7:6c:3a:51:7f:a8:c2:92:73:be:
                    2b:f9:02:51:11:6f:dc:67:3d:12:a6:35:9f:54:a8:
                    23:a1:7e:28:62:74:a9:8d:4b:2b:85:f8:98:19:ff:
                    d9:db:63:99:00:b6:02:7e:0b:c0:fa:e6:e3:61:1f:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:BC:EE:41:19:CC:C6:65:17:A3:73:D9:89:05:3E:8A:41:63:97
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:68:46:e6:31:cb:53:96:7c:fd:ee:80:f5:68:18:01:24:
         7b:d9:62:5d:9c:8c:94:55:f2:04:fd:20:4a:41:c8:2a:c8:85:
         ef:fc:5c:3e:89:7c:64:31:b3:ac:4d:61:8a:15:78:01:0a:f4:
         25:e5:81:d7:b4:56:38:cf:e5:52:b8:41:c2:ca:5b:25:ed:ef:
         eb:64:96:80:66:50:67:85:5e:c0:1c:3b:28:f7:c4:eb:84:cf:
         13:f4:fa:17:0a:f4:ac:ed:75:a3:c8:2c:81:fd:9c:0d:4e:5b:
         fb:8c:23:b4:d3:8d:6a:bd:b5:35:97:45:73:a8:4c:1e:02:54:
         25:c1:9a:71:c8:97:0b:c3:e6:74:e7:05:73:2f:b9:27:1a:b0:
         4b:0c:79:b7:13:1c:08:ef:74:b9:a3:c1:c7:4e:10:c1:26:e3:
         6a:9a:d7:4b:8c:f0:2a:ca:67:f8:2a:61:3e:09:9a:2a:61:e0:
         c3:b5:71:39:c5:54:75:20:2e:9c:3b:95:e9:70:9e:36:41:95:
         57:42:bf:e2:43:e0:5b:1e:5f:3c:7e:ee:83:d4:ff:37:fc:29:
         c5:ca:21:90:b0:4b:db:16:bc:0b:cb:e5:2d:c7:ee:4d:20:c5:
         7e:32:61:b0:14:a0:10:79:87:8c:8e:02:7d:37:ea:e0:33:b0:
         3d:09:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:34 2025 by rpki-client