Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133362e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3133362e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          MlEhdHnOT+GO0X1cU+w5j/Vi/bHNntxABLOLbbuxtLw=
Subject key identifier:   B4:45:4B:4A:B8:54:9F:7D:39:33:23:38:27:E9:E7:CA:BB:65:1D:57
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       42D6831CF7D6C09250225C543BFC701DEE2F924C
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133362e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 07 Oct 2026 19:39:06 +0000
ROA not before:           Wed 07 Oct 2026 19:34:06 +0000
ROA not after:            Wed 06 Oct 2027 19:39:06 +0000
asID:                     22927
IP address blocks:        186.143.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Nov 2026 22:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d6:83:1c:f7:d6:c0:92:50:22:5c:54:3b:fc:70:1d:ee:2f:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct  7 19:34:06 2026 GMT
            Not After : Oct  6 19:39:06 2027 GMT
        Subject: CN=B4454B4AB8549F7D3933233827E9E7CABB651D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:c7:b1:ed:88:d6:18:15:08:6c:e5:f5:e8:
                    fd:ec:88:c6:c3:2a:8c:fa:6f:02:27:bb:36:49:5c:
                    69:6f:4a:de:12:e6:b8:e2:9c:e5:8e:7c:3b:11:e6:
                    29:cf:a9:e4:e3:13:3a:54:cc:fa:db:1f:80:28:da:
                    98:ba:a7:b3:6d:e3:56:f0:1a:35:61:25:cd:c3:5d:
                    22:e5:b5:2c:1b:42:68:81:2a:6c:8a:3f:68:2c:be:
                    75:76:ea:2d:94:eb:0b:22:e3:4f:20:a3:65:5f:82:
                    4f:92:1d:71:01:51:c3:ff:e6:a9:2c:01:a1:09:ca:
                    3b:20:c3:b8:5f:45:4c:6d:73:6b:e0:58:6d:a2:39:
                    17:cf:3b:0f:6f:6e:93:31:23:99:26:11:09:0a:6b:
                    de:fb:ea:72:cb:8a:5d:18:76:dd:9a:a8:d7:ba:6d:
                    bb:b8:5a:2c:28:a6:5b:b8:63:5b:65:5e:02:74:e7:
                    4a:af:d1:b0:96:7e:3a:6f:d2:80:b0:52:c2:37:09:
                    4d:94:5e:0f:a0:eb:3a:57:85:c9:a3:e9:9e:84:7e:
                    a0:6f:47:26:1e:31:30:83:67:94:38:0f:2b:05:20:
                    18:1a:f7:ae:4e:3c:85:2d:b5:1c:53:89:67:b6:fc:
                    58:9c:64:66:22:a0:47:8f:5b:33:54:f7:5b:b0:41:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:4B:4A:B8:54:9F:7D:39:33:23:38:27:E9:E7:CA:BB:65:1D:57
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133362e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:e5:0d:d0:49:29:75:e4:84:4d:d9:d0:8d:c1:74:2c:0e:
         9d:0e:7c:b9:42:fa:ea:e0:95:64:09:04:4c:e3:02:60:44:3e:
         18:aa:36:63:cf:9c:34:ed:a4:72:04:59:a2:19:18:8b:e3:cb:
         31:20:98:7f:67:93:68:40:15:d7:a2:ff:6c:41:6c:fe:d2:f8:
         06:b0:e7:d0:ce:6a:c2:13:4b:58:99:33:e1:0e:49:ff:7a:46:
         e4:16:fb:69:13:16:89:c7:87:c2:88:1f:76:1b:90:a5:11:0b:
         6f:0b:64:22:b9:ac:aa:7e:2a:48:c7:c8:c2:84:f7:73:a4:90:
         f8:07:64:21:fc:85:05:b4:c0:5f:71:e0:65:38:47:53:bf:d3:
         44:da:d3:76:17:cd:2f:f6:75:10:11:ac:f8:d5:1d:00:c9:dc:
         8a:46:54:8d:d7:de:75:0a:56:20:bb:f6:ab:77:f8:c5:6c:74:
         f5:8d:19:28:85:e9:4f:26:d1:29:85:4a:82:2f:f6:68:d7:b3:
         cd:a1:f7:69:86:c6:1f:ca:bb:50:90:ac:07:0b:8a:8e:11:14:
         2a:5c:29:3e:0e:a8:33:88:fe:26:4d:93:4b:eb:e8:c9:f7:e9:
         a1:f1:5a:80:ac:cb:f7:f1:4a:87:16:db:ba:15:eb:e2:df:22:
         6a:d4:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:29:23 2026 by rpki-client