Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230322e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3230322e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          AiqS9TFXPbnIQztr7gkn7igQk0WG3U/1IKFiLphvfMI=
Subject key identifier:   F9:97:5F:32:22:80:60:AF:18:86:6B:95:2E:6D:E9:FD:75:3D:1A:5A
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       469A922572B5DFA23F5C69F573CCB8691186ED83
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230322e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:06 +0000
ROA not before:           Wed 17 Sep 2025 17:42:06 +0000
ROA not after:            Wed 16 Sep 2026 17:47:06 +0000
asID:                     22927
IP address blocks:        186.141.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9a:92:25:72:b5:df:a2:3f:5c:69:f5:73:cc:b8:69:11:86:ed:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:06 2025 GMT
            Not After : Sep 16 17:47:06 2026 GMT
        Subject: CN=F9975F32228060AF18866B952E6DE9FD753D1A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:3f:cd:7a:71:9c:4c:e9:a0:18:50:2a:d0:
                    9a:68:d3:1c:81:dd:08:91:0f:e7:f6:65:65:e3:9e:
                    4d:84:90:21:5a:e9:fd:82:1b:48:ab:0b:6b:34:03:
                    87:93:1a:a3:05:e9:2c:16:bd:05:58:27:ab:1a:90:
                    09:8c:6c:72:d9:51:b1:8e:e4:63:bc:8c:0d:89:01:
                    ed:54:7e:0e:fb:ad:74:a9:5d:10:c3:3f:5d:61:f2:
                    d1:dc:f8:5c:ad:13:4b:00:58:01:bf:16:1f:e5:3d:
                    ad:39:8c:79:0d:9b:f7:42:85:31:18:84:05:1b:7d:
                    7c:ec:d3:af:a3:09:43:1e:6c:d6:05:c4:95:27:ac:
                    e5:38:99:e4:fe:ba:a4:d2:7d:bf:33:11:a6:9f:fa:
                    c4:ec:9c:4e:db:fe:12:0b:56:9d:fe:ee:d0:c1:69:
                    1a:ec:28:37:08:10:04:b9:02:1e:dc:d2:25:5e:86:
                    01:9e:8c:26:64:48:38:d8:bf:88:ef:ec:0e:01:af:
                    43:88:51:c8:60:7d:d5:98:1a:06:fd:4a:8b:34:57:
                    cd:d8:11:c2:3d:0b:61:41:6b:4d:ae:62:66:c0:6a:
                    6f:26:6e:5b:08:2c:73:5f:e1:93:2b:12:02:01:f1:
                    68:a2:81:32:e6:2f:5b:f1:3c:18:21:3d:5e:16:3e:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:5F:32:22:80:60:AF:18:86:6B:95:2E:6D:E9:FD:75:3D:1A:5A
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230322e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:e7:90:fa:78:0b:cc:19:53:f9:d6:bb:d5:8c:58:f2:a7:
         7c:67:62:fa:4a:13:e2:a4:7b:0c:d3:26:ac:6e:2c:0c:f0:eb:
         01:76:76:06:97:fd:64:40:12:1a:c9:b9:e4:e4:aa:a0:b5:87:
         52:53:84:6b:26:65:36:01:95:eb:11:73:62:6c:22:08:df:3b:
         f0:0b:2a:32:0d:cc:9e:76:fa:2d:8b:c0:c8:02:2e:7d:aa:6c:
         79:99:b8:d1:83:90:d8:fc:c4:5f:44:78:b6:70:17:f0:07:a3:
         11:50:dc:ab:6f:b2:23:0b:ae:ba:4e:b7:d9:c4:b7:65:33:30:
         c6:1b:23:e0:fa:9b:08:b9:9e:7e:32:50:b2:6c:47:e1:57:85:
         34:df:fc:62:30:8a:78:ae:06:70:75:71:bb:7c:ec:4b:30:08:
         b1:c8:7d:7c:89:8d:d7:46:f2:c7:2a:cd:0e:d9:f8:13:5c:5e:
         2e:43:54:7e:ff:39:ad:bf:4c:fb:a2:30:8c:1c:f8:45:8a:54:
         d8:3d:cf:9c:e7:43:f1:ac:5d:64:98:ca:a5:df:7e:34:0e:b0:
         be:54:8e:01:95:32:c1:99:a9:88:e8:3b:9d:9e:38:f2:39:80:
         b8:3e:37:37:df:66:43:b2:ff:20:91:17:ee:ea:27:15:6e:a1:
         5c:11:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:36 2025 by rpki-client