Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133342e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3133342e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          PP4Syd8HIjrb6ea5J5GeWjy3c1iDesrm0+SB/aFjASI=
Subject key identifier:   C9:EC:19:08:F6:82:8F:9F:68:44:F3:3D:F9:CC:B6:D6:F8:BF:6E:E8
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       0D80B997C0022811EC22DBA3CACDB4A11321D76F
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133342e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 07 Oct 2026 19:39:05 +0000
ROA not before:           Wed 07 Oct 2026 19:34:05 +0000
ROA not after:            Wed 06 Oct 2027 19:39:05 +0000
asID:                     22927
IP address blocks:        186.143.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 05:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:80:b9:97:c0:02:28:11:ec:22:db:a3:ca:cd:b4:a1:13:21:d7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct  7 19:34:05 2026 GMT
            Not After : Oct  6 19:39:05 2027 GMT
        Subject: CN=C9EC1908F6828F9F6844F33DF9CCB6D6F8BF6EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:a0:0d:2c:01:cb:4c:0a:96:e4:da:5a:4f:
                    60:38:e6:c7:30:33:f2:71:37:16:13:ae:dd:6a:34:
                    0e:c6:7e:ae:a3:ba:95:54:05:36:5e:32:fc:26:fa:
                    fc:5b:86:a9:d5:e0:40:49:1b:c9:44:25:67:77:cf:
                    67:9b:d3:d1:03:77:87:0e:f1:23:9c:c7:57:ff:17:
                    f1:59:1f:b6:7b:2d:cc:4a:67:c9:e5:1a:f6:ea:cd:
                    ba:74:3a:ae:76:69:56:18:9f:ff:f2:a7:95:97:8c:
                    87:66:e0:17:e9:8e:99:47:d4:e2:09:22:67:07:87:
                    33:59:7e:8e:29:8e:cc:e1:47:33:ba:e1:52:dc:4a:
                    82:14:ea:64:d9:36:65:91:17:34:43:24:fa:e0:58:
                    fa:3c:a3:0d:c5:2a:d4:5f:e3:86:49:d5:d1:d0:b6:
                    fc:18:d7:31:9c:44:91:19:91:ed:49:4b:b2:d4:6e:
                    35:5c:e8:dd:b5:d2:14:7c:c6:4e:1c:ee:bf:41:96:
                    57:59:0f:2a:48:41:a2:78:92:3b:1e:c8:28:8c:4e:
                    1e:0f:5c:b5:77:21:36:bd:4f:43:1b:c7:9d:40:29:
                    f3:56:84:57:ba:3d:75:0f:ec:e6:f9:95:dd:af:0b:
                    98:36:0f:a2:9d:f6:0a:6a:51:9e:21:9f:0c:eb:90:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EC:19:08:F6:82:8F:9F:68:44:F3:3D:F9:CC:B6:D6:F8:BF:6E:E8
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133342e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:77:fc:28:cb:38:37:de:a9:a2:6d:ec:c8:3e:f1:ad:9c:
         9a:1a:df:c3:ce:21:19:87:93:cb:a0:82:49:7d:28:79:79:32:
         51:f7:37:cc:5a:c9:4e:47:2e:ff:96:3d:03:47:53:28:05:5f:
         1b:7a:7b:10:69:d1:61:4a:91:e7:57:91:16:d1:13:88:c5:75:
         22:36:0d:a1:17:2f:57:cb:40:d2:03:66:20:fd:bb:ee:b9:03:
         65:de:47:af:08:ee:9a:0b:cc:f2:13:8b:76:05:a7:65:cc:6b:
         a9:5c:46:d6:75:32:21:4b:07:a6:7e:53:46:a2:8f:e1:59:f5:
         44:2e:8d:66:38:9e:8f:18:f6:27:d8:79:1b:52:a2:60:cb:8d:
         ef:6b:37:72:eb:98:d1:06:68:54:37:31:3a:82:ee:e2:3e:e5:
         78:03:26:2f:45:f0:68:4d:5b:49:c0:6e:91:3d:a8:9c:43:23:
         62:c5:59:e9:c6:eb:bb:87:e1:c6:19:1e:e3:0d:28:ef:4d:71:
         ec:7b:ac:56:d5:d4:1d:b2:8f:e7:87:8c:82:c9:53:58:81:ca:
         38:e4:34:2f:38:1e:1f:3b:76:d5:5c:29:7a:f9:61:57:a5:68:
         2a:47:23:99:6b:f5:75:99:f0:32:67:69:cd:55:55:16:59:bc:
         a9:ba:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:32:14 2026 by rpki-client