Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3133382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          dIdvoA+iKCcl6341xhjcBSnSHZ1/qeJnLJMnANLfMzM=
Subject key identifier:   54:FA:F0:62:D3:D2:21:20:EC:B6:50:49:2B:D2:D5:C2:D6:B9:2E:7F
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       0DED797651414EFD68AC7E2F9442E9193B0A426F
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133382e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 07 Oct 2026 19:39:04 +0000
ROA not before:           Wed 07 Oct 2026 19:34:04 +0000
ROA not after:            Wed 06 Oct 2027 19:39:04 +0000
asID:                     22927
IP address blocks:        186.143.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 00:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:79:76:51:41:4e:fd:68:ac:7e:2f:94:42:e9:19:3b:0a:42:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct  7 19:34:04 2026 GMT
            Not After : Oct  6 19:39:04 2027 GMT
        Subject: CN=54FAF062D3D22120ECB650492BD2D5C2D6B92E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:b5:d2:63:f1:21:21:70:bc:f3:fc:2f:36:
                    07:53:a0:0e:ac:00:ae:fc:88:ec:74:67:38:55:05:
                    85:cd:de:b4:ea:ff:08:f4:a4:33:38:ae:7d:3c:2d:
                    58:21:18:cf:ad:7a:42:41:b7:28:0a:96:c4:b3:13:
                    e0:92:73:bb:de:fa:02:11:07:83:fa:8e:26:75:e5:
                    fe:ee:8d:0d:47:11:da:0e:30:40:8d:52:40:c2:00:
                    de:7c:14:30:9b:9b:a9:56:35:2f:b1:c6:79:1e:45:
                    db:0d:0d:2b:81:7d:73:00:c1:4f:1f:3d:b6:f6:d1:
                    20:4b:07:0a:98:77:bc:f0:2a:4b:ed:12:69:ec:82:
                    6b:56:72:7f:11:56:14:1c:8a:37:5d:82:d0:ec:3b:
                    c5:a9:c0:34:26:d3:3f:ad:b7:35:80:22:87:e7:17:
                    34:2b:61:a6:cd:52:de:aa:b9:6f:ab:c1:b0:df:d0:
                    bb:9c:80:b6:0a:47:16:c5:a0:af:c8:9f:e2:84:ae:
                    09:10:d4:cf:7b:20:aa:76:0f:c4:15:ad:8a:ba:d7:
                    15:f1:9b:20:09:59:f3:44:a0:55:57:4d:fa:1d:3e:
                    3c:d2:8c:3c:8c:8e:7b:1f:59:ec:44:2a:10:3e:54:
                    06:f7:a7:dd:28:0a:ca:8e:52:88:fa:c1:da:9a:af:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FA:F0:62:D3:D2:21:20:EC:B6:50:49:2B:D2:D5:C2:D6:B9:2E:7F
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:03:4a:00:29:94:8e:78:6d:30:69:66:41:46:1f:52:90:f5:
         0b:1a:1a:49:ab:9b:92:bc:f6:4f:89:75:4c:a5:d0:6c:b3:50:
         a1:59:6c:9e:c8:c3:c0:71:73:29:fc:42:4e:c9:21:6e:2f:31:
         a3:a1:8c:b6:78:9f:c3:f3:0c:d1:78:dc:fc:ec:e6:10:99:6c:
         d8:c2:5c:53:11:07:cf:fc:a4:6b:a3:9c:81:3c:84:41:2e:1e:
         5d:64:c4:31:80:cb:e9:20:36:61:20:13:df:06:d5:8e:d7:cb:
         f0:a5:8a:bb:6f:48:b6:47:bc:c9:3b:2f:28:95:71:c7:ed:d2:
         30:22:41:88:26:04:32:01:3f:15:40:15:2f:6d:e7:23:26:01:
         71:5f:e3:5c:6e:ef:45:61:27:c7:b5:be:66:4f:c9:97:d0:ea:
         35:20:ce:b1:de:14:ae:6b:68:bf:d7:3c:5f:ea:4a:ad:52:91:
         5d:62:1a:fb:ba:69:eb:70:79:0b:9a:d0:51:44:93:e4:e6:f0:
         19:52:4e:9a:0e:2f:ef:69:66:92:c0:03:93:ce:5d:57:16:41:
         62:6d:f6:19:00:81:db:b0:18:48:2e:5e:8b:b1:a7:46:b5:92:
         3c:cc:4b:ac:03:0e:ae:80:65:c9:87:d0:40:dc:5c:82:dc:0a:
         33:8b:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:05:18 2026 by rpki-client