Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
File:                     3138362e302e3135322e302f32322d3234203d3e2033353439.roa (raw, json)
Hash identifier:          XYEJuqHBP5I3H3vnyxVhqnKXipLh7lpLPXrkvTMQwkI=
Subject key identifier:   D9:02:6C:3C:90:93:E5:70:C9:81:59:3C:8C:88:00:28:3F:31:6F:25
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       79A6899E43772D5A523BBA172AD4835DE6D08B87
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
Signing time:             Mon 29 Sep 2025 18:49:12 +0000
ROA not before:           Mon 29 Sep 2025 18:44:12 +0000
ROA not after:            Mon 28 Sep 2026 18:49:12 +0000
asID:                     3549
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 16:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a6:89:9e:43:77:2d:5a:52:3b:ba:17:2a:d4:83:5d:e6:d0:8b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Sep 29 18:44:12 2025 GMT
            Not After : Sep 28 18:49:12 2026 GMT
        Subject: CN=D9026C3C9093E570C981593C8C8800283F316F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:64:10:93:e0:75:75:8e:e0:f7:ac:dc:d2:
                    5c:8c:a7:ba:e6:91:ec:05:48:dc:e8:2d:2d:0f:36:
                    ab:16:1a:bb:55:25:77:d4:e3:2c:8e:8e:f7:52:20:
                    65:32:47:29:35:24:a9:58:34:c5:64:06:f2:e9:a6:
                    3b:0b:be:32:ee:bc:02:27:53:14:cf:81:52:af:b7:
                    73:16:82:29:cd:1f:58:71:18:3b:56:b0:32:7a:f3:
                    eb:55:18:87:16:ae:b1:6f:4f:c0:af:cd:0c:c7:c5:
                    49:bb:1b:f7:ba:b3:0e:bb:6e:a2:8f:d7:3d:3e:29:
                    43:ec:52:bd:b3:e7:ee:4f:1f:49:da:ee:f8:e2:7d:
                    46:f9:e7:02:1e:6d:0a:18:8a:13:e0:38:d6:d7:a9:
                    63:bd:23:c0:02:f9:9f:e4:48:11:8e:1d:7e:0b:15:
                    7a:75:f8:96:cd:e1:c5:26:bf:c4:20:a7:6f:96:22:
                    d7:a8:f8:c1:be:a6:78:97:ad:5e:6e:15:31:66:14:
                    49:e4:c5:12:75:2d:8d:05:24:9d:54:4b:e0:22:09:
                    fc:14:89:80:ad:83:3f:e9:3e:3e:77:7b:4a:a3:95:
                    ee:b4:b0:5b:ff:a7:f9:69:7b:a6:de:57:71:32:d1:
                    36:99:24:ad:7c:c6:05:09:68:51:4a:fb:72:eb:43:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:02:6C:3C:90:93:E5:70:C9:81:59:3C:8C:88:00:28:3F:31:6F:25
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:05:b6:4d:48:49:5e:6e:d4:ea:f9:47:82:2b:71:c1:36:a3:
         03:e9:9e:97:75:53:94:83:19:3a:21:57:73:dc:7d:2d:d4:d4:
         66:e8:f8:29:64:5e:9b:d6:ba:b0:ab:84:1b:3d:3a:6a:bf:ba:
         07:15:30:62:1a:9a:96:24:98:a1:84:a0:4a:7c:09:be:11:a1:
         15:79:c4:80:b9:48:4b:5e:36:47:59:5f:53:ea:aa:c0:13:77:
         71:38:5d:f1:2c:8a:e5:81:bb:cc:ed:40:86:90:bb:b4:f8:83:
         0a:be:da:33:12:f6:d1:c0:ec:f3:b6:c2:3e:c6:ab:d8:27:73:
         1d:8f:fe:35:ca:3a:3e:3b:c2:30:24:c8:a8:e8:fa:44:89:91:
         6c:3c:ae:0d:b0:b5:7b:7f:00:f3:55:f0:82:78:7e:cb:d5:a6:
         22:ae:9c:43:86:73:16:9d:cd:b8:62:c3:87:22:2d:a5:f6:fe:
         28:2e:bf:91:ff:87:9c:fa:f5:08:ec:66:25:7f:9e:5a:07:3c:
         e9:e9:53:11:ff:9c:e9:bb:84:2e:e0:17:8f:b9:b0:96:8f:d1:
         75:66:e9:9f:cb:3c:c5:0e:17:3f:8b:3a:1d:1b:bd:82:36:9f:
         a0:2a:0d:fa:56:52:6a:3b:56:9c:91:44:98:2a:11:5a:3a:c6:
         f4:6b:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:30 2025 by rpki-client