Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3134342e302f32312d3231203d3e203237363531.roa
File:                     3138362e392e3134342e302f32312d3231203d3e203237363531.roa (raw, json)
Hash identifier:          QvaLh9Fbwzj8H+bI9kf6nW5EpEdxGCWSFWRL8hH7MYk=
Subject key identifier:   B3:49:8D:76:52:A0:1F:67:6F:12:D2:F3:2B:61:44:A0:3C:0D:BB:47
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       219A30F415FBE2AE482B3B97EFD34F082838F981
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3134342e302f32312d3231203d3e203237363531.roa
Signing time:             Fri 12 Jun 2026 19:47:33 +0000
ROA not before:           Fri 12 Jun 2026 19:42:33 +0000
ROA not after:            Fri 11 Jun 2027 19:47:33 +0000
asID:                     27651
IP address blocks:        186.9.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9a:30:f4:15:fb:e2:ae:48:2b:3b:97:ef:d3:4f:08:28:38:f9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Jun 12 19:42:33 2026 GMT
            Not After : Jun 11 19:47:33 2027 GMT
        Subject: CN=B3498D7652A01F676F12D2F32B6144A03C0DBB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:40:a6:fe:fa:bb:18:e4:b7:14:db:f3:bd:
                    77:f5:18:69:7d:c7:93:63:85:98:48:fe:04:85:d0:
                    26:57:70:d9:8d:ce:c4:37:78:8a:58:50:60:aa:e0:
                    e3:b3:ce:ad:fc:d2:5d:21:f8:30:5d:6b:77:d0:d7:
                    62:58:05:a2:68:79:19:37:8b:2e:e5:e3:74:a4:c2:
                    78:2c:38:4d:00:2c:02:6b:3c:c0:26:b8:83:23:fc:
                    fe:57:de:ce:e7:6e:00:c8:27:ed:82:2f:ea:5a:c7:
                    e0:43:b0:b5:a0:bc:ca:89:d0:00:15:19:2e:97:d2:
                    3c:10:b2:22:e9:5a:ca:28:a4:23:97:e4:4c:72:64:
                    29:a0:63:07:41:bc:13:52:c3:f5:de:14:86:d8:77:
                    b4:cc:e5:e8:e5:1f:94:72:7e:cf:93:95:41:2d:d6:
                    9b:8d:7c:0c:53:90:50:77:7e:06:76:f9:b7:00:77:
                    09:f9:dd:e7:d6:7f:31:c3:b8:0a:da:2f:38:75:f5:
                    48:5c:b2:3e:9e:cd:2d:ae:87:e5:b6:be:cf:6b:f3:
                    0c:51:3b:04:28:d5:34:50:d4:fb:96:5c:ec:db:d3:
                    32:be:38:6d:77:6e:78:d1:59:57:d5:63:36:71:ce:
                    5f:b0:09:4d:89:79:0c:14:38:41:60:f5:3f:5e:f9:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:49:8D:76:52:A0:1F:67:6F:12:D2:F3:2B:61:44:A0:3C:0D:BB:47
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3134342e302f32312d3231203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.9.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:86:73:98:f5:75:df:d6:d7:20:07:77:1f:71:b0:59:33:
         0a:f6:d6:f7:c0:9e:f8:c3:5f:b2:31:11:e9:3b:3e:82:e8:d9:
         12:7d:68:06:b6:4c:88:13:9f:74:3c:37:da:2e:c2:7c:b6:ec:
         56:f0:ca:ac:9e:02:e1:ee:cd:b7:d3:78:36:d0:2e:74:bc:54:
         fa:87:fd:e8:4f:17:ff:3d:96:c2:2f:df:97:71:77:cf:a3:4f:
         cd:01:76:cc:75:a6:91:3a:9f:b3:0c:72:31:d5:f6:77:c4:2b:
         01:ff:1f:f4:bf:24:cd:86:cd:d5:a3:8e:92:91:5e:98:82:ca:
         13:32:d9:d9:8c:aa:a4:f0:da:b0:d6:bd:d7:dc:e6:65:26:87:
         12:36:fd:4f:3f:ba:e9:1d:b8:8e:62:35:f3:f9:ec:85:57:79:
         1e:6c:8b:80:96:9f:ac:9c:f3:0b:e3:fc:3f:9e:c8:98:0c:58:
         d8:57:11:93:ef:cb:7a:92:a0:2b:b4:a4:53:18:5c:8e:9b:62:
         0f:b8:d9:05:a4:9e:51:85:d1:c5:34:1e:41:03:0d:ea:33:b1:
         63:02:ec:da:e4:62:9a:a5:7d:7a:4d:9d:a2:62:19:29:69:30:
         78:e4:b5:35:06:1a:92:12:4f:e5:f7:39:ac:d0:50:ff:dc:02:
         0a:82:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:11:27 2026 by rpki-client