Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230302e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3230302e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          Ti7s2mb/UTj0eQhLSuTXPIjbEmtdaCsZ2vvgouYvj6A=
Subject key identifier:   F6:6C:A7:02:05:1D:0F:4A:B4:0A:70:88:3F:88:90:E5:F5:72:06:C7
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       308E593A1567300B9467482AEE8B47EEE8360835
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230302e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:08 +0000
ROA not before:           Wed 17 Sep 2025 17:42:08 +0000
ROA not after:            Wed 16 Sep 2026 17:47:08 +0000
asID:                     22927
IP address blocks:        186.141.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8e:59:3a:15:67:30:0b:94:67:48:2a:ee:8b:47:ee:e8:36:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:08 2025 GMT
            Not After : Sep 16 17:47:08 2026 GMT
        Subject: CN=F66CA702051D0F4AB40A70883F8890E5F57206C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:48:ee:f2:49:85:40:45:ed:73:f9:20:17:
                    a9:e2:73:55:66:bb:f3:da:4a:44:c2:ae:d7:3c:5f:
                    85:52:45:f0:f4:d5:0a:68:46:2f:b5:ee:b7:d9:17:
                    1a:d4:88:81:06:94:9b:2d:35:1a:af:ec:b5:15:b2:
                    f8:23:9f:db:75:13:0d:63:e8:f7:04:43:43:20:71:
                    22:b9:34:1a:60:43:f9:45:ba:ac:08:a6:8b:df:4c:
                    83:53:ba:61:f3:08:e1:09:c2:f0:d3:c7:d3:39:96:
                    7b:73:fc:24:1e:33:17:1f:ba:0e:28:3f:84:82:2c:
                    ae:a0:18:37:a5:f6:b5:6a:cc:8a:56:68:4c:f6:b5:
                    ef:2f:05:e1:a0:3e:f0:d7:23:76:11:62:c3:c8:5e:
                    12:eb:c1:31:c9:9f:d8:71:c3:4e:86:f1:69:4e:56:
                    7c:d6:e6:b8:02:4c:4e:88:17:0e:b9:c0:2f:52:46:
                    bc:26:99:a9:ce:7e:8d:fa:18:d1:40:1f:e5:05:73:
                    74:f7:b9:83:7b:11:9d:07:bb:d9:61:6b:1e:79:84:
                    14:2c:61:a9:13:85:11:e6:2e:56:77:58:3c:9e:c6:
                    2d:9b:bf:da:d3:9a:e1:d2:32:1c:9d:0e:e7:91:18:
                    04:93:09:ae:0b:9e:67:91:38:c5:46:a6:43:27:b6:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:A7:02:05:1D:0F:4A:B4:0A:70:88:3F:88:90:E5:F5:72:06:C7
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230302e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:ba:c7:0b:2f:c6:4e:a9:bd:5c:c9:ba:32:5b:f5:28:33:
         31:11:b8:20:93:d2:c8:37:fe:6d:fa:21:df:0e:45:60:71:64:
         20:d3:21:9e:a3:c0:a8:92:94:96:98:9e:16:ef:58:81:35:5a:
         98:65:df:9d:b8:d8:9f:6b:f8:5e:6f:da:89:31:79:a9:43:85:
         89:c4:5e:6d:7e:1d:89:ad:89:3f:c1:63:63:51:67:73:5d:82:
         86:9e:1a:87:3b:46:51:63:5f:82:f7:6f:88:d7:43:eb:33:4d:
         7d:87:b0:89:97:be:f6:91:04:ab:03:9d:44:be:88:73:47:0c:
         a1:89:97:ce:0d:64:83:f2:2b:38:0c:f4:70:ff:4f:b7:a8:63:
         a3:8c:b6:04:c3:09:64:9b:fe:78:c8:a1:1d:ac:4b:d6:67:76:
         84:ed:87:90:82:ec:26:bf:83:e3:e7:8b:9a:0b:dc:59:1a:c7:
         ff:a4:c5:84:1f:d4:77:8a:34:28:e1:2b:6f:76:57:3c:f7:9c:
         47:40:a0:9e:06:59:39:06:88:8d:dc:42:00:8e:02:12:4a:06:
         48:9a:8b:13:a0:13:54:fc:04:db:81:30:5f:9d:a1:73:e6:0e:
         be:72:1e:5e:66:43:f3:56:7a:64:3d:26:34:9f:b0:dc:b5:fe:
         ca:b1:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:32 2025 by rpki-client