Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3132382e302f32312d3234203d3e2033383136.roa
File:                     3138362e3138332e3132382e302f32312d3234203d3e2033383136.roa (raw, json)
Hash identifier:          gJ5ZC6Cv1A9KjQsVnq60U7OA/XiibaXVvKvRVMjeq+w=
Subject key identifier:   DD:5C:E5:DD:A0:56:37:08:2E:DC:83:6F:4E:7E:EB:00:EC:70:E7:06
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       0B8C05692E4D5940F41A2EC396D94DD3CE6BC3C2
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3132382e302f32312d3234203d3e2033383136.roa
Signing time:             Thu 30 Apr 2026 18:40:27 +0000
ROA not before:           Thu 30 Apr 2026 18:35:27 +0000
ROA not after:            Thu 29 Apr 2027 18:40:27 +0000
asID:                     3816
IP address blocks:        186.183.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8c:05:69:2e:4d:59:40:f4:1a:2e:c3:96:d9:4d:d3:ce:6b:c3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Apr 30 18:35:27 2026 GMT
            Not After : Apr 29 18:40:27 2027 GMT
        Subject: CN=DD5CE5DDA05637082EDC836F4E7EEB00EC70E706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:4a:37:5a:c4:50:8d:e1:73:28:c6:f1:25:
                    6d:70:39:a5:39:59:94:9c:45:cd:da:d9:73:d9:76:
                    9a:1a:bf:58:c5:79:f5:9f:a8:88:19:3e:d0:89:ab:
                    b9:7c:09:43:08:bd:2f:ea:af:c1:cc:12:ba:9d:89:
                    09:47:b4:6b:46:e5:dd:8d:4c:b3:85:be:f3:5d:51:
                    33:b2:24:73:07:dc:12:4f:d3:70:2e:9d:08:a9:55:
                    39:5c:96:ce:bd:a0:f1:32:76:a3:c1:09:e3:96:66:
                    f0:ff:ba:4e:cb:96:74:97:4e:10:51:7a:39:f8:02:
                    fe:ab:81:94:49:79:6a:70:ca:36:25:09:ae:da:7a:
                    82:73:9f:7e:e7:d3:0d:90:53:40:db:ea:b0:cd:e3:
                    e8:a1:a7:12:11:30:53:8a:b8:2a:fd:ff:d9:c5:07:
                    10:db:d1:29:ee:34:e9:12:15:95:6e:d0:fa:ea:0a:
                    de:83:2c:a1:cf:ce:f2:32:d3:5c:32:ba:86:f1:0a:
                    fe:f1:5e:07:40:6b:1f:3f:90:02:6e:8f:16:d0:66:
                    a0:78:b1:42:55:f3:c1:8f:e6:e1:d6:8c:79:0c:12:
                    35:bc:a4:33:61:fe:6d:e0:b3:f9:e3:cc:03:4d:8a:
                    5e:18:62:52:e6:aa:90:3e:b2:ca:4e:4c:62:12:15:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5C:E5:DD:A0:56:37:08:2E:DC:83:6F:4E:7E:EB:00:EC:70:E7:06
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3132382e302f32312d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:42:f2:d8:a0:75:ac:5a:92:45:d5:1e:15:00:15:d7:c2:
         ce:0b:8f:74:20:ab:78:a8:66:7c:56:cb:51:b6:0d:1c:c1:7e:
         da:99:90:c0:00:79:3f:04:9d:58:57:19:e7:51:03:70:76:df:
         28:9a:75:12:94:ad:b8:ac:a2:bd:32:d5:f4:72:17:60:e9:f2:
         ad:1a:41:42:e6:a8:c0:ea:c9:8b:74:ff:f8:e4:f8:79:cc:82:
         b4:9e:49:eb:e1:63:87:72:23:0e:51:e1:fc:40:4d:c0:9c:f6:
         c7:34:1a:2e:b0:64:16:11:f7:03:2c:9b:e0:f8:75:9d:da:3e:
         50:91:cb:b4:b9:de:82:6c:2a:25:4a:68:09:b5:fd:21:55:d9:
         e5:6d:fa:57:ad:65:e2:16:cd:4d:6a:cb:83:cf:29:1f:60:41:
         8d:7a:b2:65:b8:4d:b1:d0:9e:d0:94:40:f4:dd:42:45:84:28:
         db:34:24:e7:0d:ee:61:cf:1e:9f:c3:0c:c3:ff:a9:b7:a4:9c:
         b0:67:b6:94:43:08:49:56:1a:31:5a:c5:cc:5a:4a:5e:0b:87:
         95:f5:ee:14:d5:14:96:29:e4:f4:7f:6e:fa:bf:1c:44:5c:61:
         fd:72:09:e4:8a:14:98:8c:fb:8b:a8:1e:b5:41:78:84:2b:43:
         76:d3:97:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC4wFaS5NWUD0Gi7DltlN085rw8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNjA0MzAxODM1MjdaFw0yNzA0MjkxODQwMjdaMDMxMTAvBgNV
BAMTKERENUNFNUREQTA1NjM3MDgyRURDODM2RjRFN0VFQjAwRUM3MEU3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpE0o3WsRQjeFzKMbxJW1wOaU5
WZScRc3a2XPZdpoav1jFefWfqIgZPtCJq7l8CUMIvS/qr8HMErqdiQlHtGtG5d2N
TLOFvvNdUTOyJHMH3BJP03AunQipVTlcls69oPEydqPBCeOWZvD/uk7LlnSXThBR
ejn4Av6rgZRJeWpwyjYlCa7aeoJzn37n0w2QU0Db6rDN4+ihpxIRMFOKuCr9/9nF
BxDb0SnuNOkSFZVu0PrqCt6DLKHPzvIy01wyuobxCv7xXgdAax8/kAJujxbQZqB4
sUJV88GP5uHWjHkMEjW8pDNh/m3gs/njzANNil4YYlLmqpA+sspOTGISFVAxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3Vzl3aBWNwgu3INvTn7rAOxw5wYwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzNjJlMzEzODMzMmUzMTMyMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7q3gDAN
BgkqhkiG9w0BAQsFAAOCAQEAGqRC8tigdaxakkXVHhUAFdfCzguPdCCreKhmfFbL
UbYNHMF+2pmQwAB5PwSdWFcZ51EDcHbfKJp1EpStuKyivTLV9HIXYOnyrRpBQuao
wOrJi3T/+OT4ecyCtJ5J6+Fjh3IjDlHh/EBNwJz2xzQaLrBkFhH3Ayyb4Ph1ndo+
UJHLtLnegmwqJUpoCbX9IVXZ5W36V61l4hbNTWrLg88pH2BBjXqyZbhNsdCe0JRA
9N1CRYQo2zQk5w3uYc8en8MMw/+pt6ScsGe2lEMISVYaMVrFzFpKXguHlfXuFNUU
link9H9u+r8cRFxh/XIJ5IoUmIz7i6getUF4hCtDdtOXvg==
-----END CERTIFICATE-----
Generated at Wed May 13 17:54:04 2026 by rpki-client