Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          Cl/ncDCE4LXg0I4Ml0w9BjLX/2xGcd0yujEcNquCaGg=
Subject key identifier:   CE:D8:75:D0:41:3D:C6:72:14:06:17:56:13:3D:A3:43:06:85:75:C5
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       073F6C6180F9B506FE4B50EF0CD5F3FBC7F4FF61
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:06 +0000
ROA not before:           Wed 17 Sep 2025 17:42:06 +0000
ROA not after:            Wed 16 Sep 2026 17:47:06 +0000
asID:                     22927
IP address blocks:        186.141.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:6c:61:80:f9:b5:06:fe:4b:50:ef:0c:d5:f3:fb:c7:f4:ff:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:06 2025 GMT
            Not After : Sep 16 17:47:06 2026 GMT
        Subject: CN=CED875D0413DC67214061756133DA343068575C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:78:b0:ce:90:96:c3:31:b0:a4:49:72:ae:
                    61:19:99:f7:e2:d2:43:fe:b1:9d:c0:bb:b3:1a:f2:
                    c1:0d:3d:e8:eb:c2:ca:0f:65:01:6c:ce:c1:ab:e9:
                    ab:4b:53:c9:e0:ef:5a:d2:9b:24:58:53:63:3f:d7:
                    9b:d0:ff:80:04:8e:97:e9:e8:df:b7:16:2e:19:3e:
                    1d:90:55:03:c5:1a:6a:d4:0b:8d:f0:ae:8f:7f:d8:
                    38:ff:96:f4:af:9c:c5:20:2f:3a:69:1e:b4:92:4c:
                    39:3e:dd:49:e0:c0:ca:39:08:bb:55:73:58:7f:7e:
                    d2:22:85:fd:55:7a:59:7e:72:2b:a2:92:33:eb:04:
                    c6:20:8d:11:09:fd:9c:16:c4:c0:bd:7f:bf:18:02:
                    3e:81:6e:d3:a9:6d:07:0f:95:91:dd:8c:50:5c:8a:
                    d2:d9:84:b9:2c:55:24:5e:9a:a9:53:fa:b4:b3:5a:
                    3c:bc:19:47:2c:5b:22:83:5d:8d:67:dc:56:fd:89:
                    c0:57:de:69:b7:68:27:c5:ef:34:fa:d6:48:95:1d:
                    2e:53:eb:ea:32:b2:fa:d0:12:8d:9a:16:a3:34:8e:
                    b6:c7:74:d0:d3:91:66:3a:b3:10:a2:9b:a2:28:f7:
                    5e:59:b0:d9:8a:e3:d2:ba:6f:47:2a:c2:d8:8e:93:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:75:D0:41:3D:C6:72:14:06:17:56:13:3D:A3:43:06:85:75:C5
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:97:9d:37:5f:fb:0b:64:1b:e0:ad:3f:f2:87:ee:f1:4f:
         13:cd:6b:8e:53:f6:b1:d9:b6:a4:a0:dd:6d:05:09:64:88:97:
         56:0c:58:c6:0b:0d:e0:3e:2f:e1:95:e9:fe:fc:6d:2d:8f:2e:
         14:3d:a4:51:b8:12:df:b3:47:4e:b3:40:99:cb:9f:62:04:d9:
         9a:c2:01:92:27:e6:a6:1c:15:7c:22:b7:81:83:e1:2e:35:59:
         ac:14:7e:a7:cf:2b:ef:80:ec:b8:63:6b:4a:cd:ad:56:99:c9:
         dd:08:09:18:20:5e:ec:20:03:6f:27:33:8f:63:66:2e:ee:4f:
         78:20:d5:6a:63:94:f0:dc:4b:08:f6:8b:17:d0:5c:40:a0:08:
         26:b9:97:ff:1a:a0:5c:8b:b3:5c:dd:90:54:67:c6:ef:a4:a8:
         24:9e:48:ae:9d:e7:dc:4f:1c:15:c0:ca:f6:48:80:5e:cb:84:
         f4:c4:07:be:89:d3:57:d4:d0:10:a1:04:56:21:3b:11:cc:46:
         b7:2a:bd:4c:39:34:ea:e5:38:c6:6d:70:ff:b1:ef:75:66:06:
         1e:1d:90:e6:08:41:cc:47:50:e2:21:82:2f:86:64:4b:ee:62:
         48:7f:95:10:1a:77:3f:29:f0:94:49:03:22:14:1c:6d:d3:42:
         2e:7a:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:36 2025 by rpki-client