Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/3138362e302e3135382e302f32342d3234203d3e20323733313631.roa
File:                     3138362e302e3135382e302f32342d3234203d3e20323733313631.roa (raw, json)
Hash identifier:          T8+VzYTpbdZX1Zbz98eFnrx3q8DZmjc8SnoYjE/95+0=
Subject key identifier:   35:1F:84:8E:C0:45:36:44:CA:F3:8F:37:64:C2:44:85:5F:E6:1A:E4
Certificate issuer:       /CN=4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06
Certificate serial:       307825966C6EE2E4ED5CD868227D1537ECA46335
Authority key identifier: 4A:E2:A3:6E:08:FA:04:0C:A3:A7:78:3B:41:FE:F8:67:CE:FF:CC:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/3138362e302e3135382e302f32342d3234203d3e20323733313631.roa
Signing time:             Thu 23 Jul 2026 13:35:00 +0000
ROA not before:           Thu 23 Jul 2026 13:30:00 +0000
ROA not after:            Thu 22 Jul 2027 13:35:00 +0000
asID:                     273161
IP address blocks:        186.0.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:78:25:96:6c:6e:e2:e4:ed:5c:d8:68:22:7d:15:37:ec:a4:63:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06
        Validity
            Not Before: Jul 23 13:30:00 2026 GMT
            Not After : Jul 22 13:35:00 2027 GMT
        Subject: CN=351F848EC0453644CAF38F3764C244855FE61AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:a7:8e:5f:69:ae:a3:e7:72:ee:3a:ee:0a:
                    c7:2f:61:ee:6f:70:7d:f7:4f:7a:1b:5b:d8:07:04:
                    74:49:49:74:1a:09:58:43:e6:c4:29:7f:96:ae:f6:
                    38:da:20:76:21:13:d3:ae:aa:9d:e4:cd:76:9c:ca:
                    ec:24:45:b1:e4:d1:d9:59:af:70:09:02:8a:9f:7e:
                    2f:78:02:8c:d1:95:e3:d1:03:ac:a5:ac:3c:85:05:
                    71:76:f6:92:73:40:26:4d:c5:8a:34:fc:8a:ff:f7:
                    6e:ef:d9:44:38:c7:a1:b1:73:98:dc:58:50:b3:34:
                    72:39:1c:74:ec:b2:13:af:81:cc:bb:04:ac:7b:8f:
                    bc:7d:88:8b:6f:9e:b0:15:ee:ea:37:b8:d1:d8:f3:
                    2a:3b:26:c2:06:a2:19:51:0c:0e:a4:52:c7:5d:cd:
                    90:a5:1d:f4:6d:25:a6:c1:ba:0e:9b:b0:32:7e:fd:
                    c0:88:7a:a7:b8:d2:8a:91:eb:15:c5:7d:0b:43:ca:
                    77:ea:08:08:2b:a5:5f:30:fe:dd:31:be:70:29:23:
                    2f:01:96:e5:a7:d9:29:46:92:29:31:32:11:19:95:
                    f6:e1:f5:ee:ea:fe:f5:a9:8a:d5:8a:44:8a:91:17:
                    c8:47:45:f4:2c:12:91:79:e9:7d:9e:dc:05:ad:2a:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1F:84:8E:C0:45:36:44:CA:F3:8F:37:64:C2:44:85:5F:E6:1A:E4
            X509v3 Authority Key Identifier:
                keyid:4A:E2:A3:6E:08:FA:04:0C:A3:A7:78:3B:41:FE:F8:67:CE:FF:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/3138362e302e3135382e302f32342d3234203d3e20323733313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:89:7c:6d:71:39:ca:be:06:7e:64:f3:b1:47:73:10:35:2e:
         49:85:c2:64:04:16:c2:1a:8a:e9:49:89:b6:d2:bb:e8:ce:13:
         7e:c7:3b:79:6e:29:8e:3b:1f:45:46:0f:bd:49:cd:51:cd:ea:
         83:a6:f3:79:87:1c:29:ab:e8:69:f2:52:3a:75:ad:73:7b:38:
         1c:f3:e2:76:e5:3b:69:da:27:2b:a1:ac:ef:0e:36:ac:09:34:
         5c:12:9b:3c:90:d4:40:3f:95:fc:39:fd:4c:1d:21:6e:cf:32:
         f7:8f:d8:d6:be:06:25:8d:ef:38:57:1b:de:a9:82:c3:ac:c9:
         24:77:f2:6f:3d:de:0c:4a:4e:17:22:5f:f1:0d:95:59:60:b9:
         a8:57:d7:82:61:8e:6c:51:60:4d:28:f8:6c:1b:20:04:d7:94:
         ff:89:d9:c7:14:4e:8f:4e:f5:69:28:91:fd:08:89:ce:a2:ba:
         09:cc:ea:a8:bb:38:7b:a6:d1:70:1a:fc:33:0c:88:c8:f4:df:
         a5:e7:23:2e:19:fc:b9:d6:f7:7a:6e:ea:df:c5:4d:22:c6:a4:
         02:95:17:43:c6:84:32:95:ab:8f:d4:50:d5:ec:0e:b3:dd:33:
         65:de:83:8f:d2:cb:b7:23:fc:39:28:00:98:44:1d:29:43:a9:
         a1:ec:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:35 2026 by rpki-client