Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa
File:                     3138362e302e3135322e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          HLs4vs9EuGNu+9Zi6IW0euZVvm6Jg9q5ozELysTd/dM=
Subject key identifier:   8E:1B:5A:43:FF:C0:43:07:29:68:71:8A:13:94:A8:5A:6A:86:C3:05
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       01ACF5465E051EDC4E1D53A246182DA3E77AEE92
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa
Signing time:             Mon 29 Sep 2025 18:49:11 +0000
ROA not before:           Mon 29 Sep 2025 18:44:11 +0000
ROA not after:            Mon 28 Sep 2026 18:49:11 +0000
asID:                     3356
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 16:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:f5:46:5e:05:1e:dc:4e:1d:53:a2:46:18:2d:a3:e7:7a:ee:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Sep 29 18:44:11 2025 GMT
            Not After : Sep 28 18:49:11 2026 GMT
        Subject: CN=8E1B5A43FFC043072968718A1394A85A6A86C305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:9c:24:fe:fa:8c:b7:28:13:ed:f0:6d:b5:
                    45:04:54:86:ad:8f:c7:0b:92:b3:04:65:b5:84:89:
                    97:90:00:04:b2:10:7b:2c:c3:85:5e:7a:67:6d:de:
                    a4:58:8a:61:4f:08:c5:e1:53:92:4d:5a:55:30:69:
                    56:28:f3:7f:56:7c:3b:aa:41:ce:3c:00:7e:fb:c2:
                    8f:06:b3:1f:c2:d6:82:a0:6e:7d:a9:81:d1:79:ec:
                    9a:ee:b4:70:85:3f:9d:b6:97:1f:df:34:75:1b:0d:
                    cc:8c:74:7f:d2:49:64:19:31:7b:9b:6d:e7:46:3f:
                    d4:ea:5b:2e:59:e7:00:4e:62:f1:d2:c6:f3:0d:97:
                    85:7f:07:e3:a1:a8:56:cc:39:87:86:ba:1e:b2:b5:
                    a6:eb:3e:28:23:6c:7d:5d:e1:b2:b2:87:11:ba:97:
                    68:89:b3:e3:0e:55:32:17:45:96:bb:af:b3:4f:58:
                    18:35:f9:15:48:d6:91:fb:4c:70:41:b5:e6:cb:f7:
                    0c:0e:d3:a7:50:e3:5c:bc:63:8c:6e:41:9d:54:b3:
                    30:e3:bf:a6:73:a5:e0:ed:ed:32:9f:4d:ad:62:c4:
                    b7:fe:2b:e0:27:23:99:9e:a4:c8:3e:5a:5e:30:8b:
                    f6:b5:4e:bf:60:0e:3e:b9:17:bc:61:8d:95:01:9d:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:5A:43:FF:C0:43:07:29:68:71:8A:13:94:A8:5A:6A:86:C3:05
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:80:bd:b3:1c:8e:42:92:79:eb:3e:46:86:ac:8d:b1:c3:b2:
         6c:f4:0c:82:ad:3f:f4:26:4e:2c:5e:80:71:59:f5:1a:8e:5b:
         4b:f5:f1:8b:9e:44:a3:da:7e:42:48:d5:cc:d0:1e:97:7a:37:
         45:92:d1:cb:61:8d:4a:f6:68:0a:2d:5e:6c:1a:03:53:bb:f9:
         f3:2a:61:8a:f6:f1:cf:2b:69:7d:60:9c:81:c2:d5:d4:19:b1:
         09:5e:82:9a:ae:e9:22:20:64:a7:fd:ec:4e:6d:dd:b5:dc:bc:
         b0:9a:2f:4f:87:47:f0:9b:e1:e5:18:30:90:64:21:75:66:36:
         cf:8a:4c:02:e2:d7:f8:8f:27:67:af:68:32:33:ff:ae:03:e2:
         0c:9c:00:a8:64:76:a5:61:b1:53:51:b0:86:d1:b2:95:bc:29:
         b6:a1:6d:39:c3:25:d2:b4:aa:d1:e8:d1:b3:d6:c2:09:90:35:
         bd:a2:20:63:65:4d:cf:43:5c:1b:8c:50:11:61:4c:0a:89:29:
         12:49:f5:21:36:10:2d:70:7b:f8:1c:9b:f1:ba:af:f1:97:31:
         98:b7:14:14:df:10:9f:71:52:f1:c3:7d:15:46:27:00:8d:6d:
         12:a2:85:53:07:46:82:ce:a0:0f:f6:e7:07:0f:d1:92:6d:39:
         3a:49:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:49:08 2025 by rpki-client