Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133362e302f32312d3234203d3e203532323632.roa
File:                     3138362e322e3133362e302f32312d3234203d3e203532323632.roa (raw, json)
Hash identifier:          SbuxUIrPF961u4n4Bqk3TGWs8dH31wM1uveF3kHIfOQ=
Subject key identifier:   92:85:0D:59:EC:50:B0:43:7E:D9:DF:5C:BA:19:B6:2D:17:C3:7A:A0
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       69965BBA7A018033309A227C535BE94113375B15
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133362e302f32312d3234203d3e203532323632.roa
Signing time:             Tue 06 Jan 2026 20:55:47 +0000
ROA not before:           Tue 06 Jan 2026 20:50:47 +0000
ROA not after:            Tue 05 Jan 2027 20:55:47 +0000
asID:                     52262
IP address blocks:        186.2.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 16:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:96:5b:ba:7a:01:80:33:30:9a:22:7c:53:5b:e9:41:13:37:5b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Jan  6 20:50:47 2026 GMT
            Not After : Jan  5 20:55:47 2027 GMT
        Subject: CN=92850D59EC50B0437ED9DF5CBA19B62D17C37AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:57:c4:ba:8f:0a:df:e2:43:ff:2f:31:2d:
                    2a:af:34:37:79:d5:17:61:2f:da:bf:86:89:4b:93:
                    06:86:ca:7d:e9:08:da:19:76:a7:52:f0:b5:50:71:
                    b0:8d:78:44:60:e2:82:87:bf:57:31:83:52:37:49:
                    2f:58:67:e0:db:ee:8a:f3:8d:c8:13:e9:da:ec:fb:
                    a5:9a:ea:00:72:fc:f5:b5:b6:b0:cf:fc:fd:26:af:
                    f6:f8:33:67:71:f3:2f:e6:bb:f5:20:7e:b4:e6:9c:
                    c9:9f:24:ef:9e:0d:f3:cb:70:fb:1f:e9:e4:4b:b9:
                    01:94:30:f9:ae:27:1b:b3:0f:c1:e5:2c:95:bf:0c:
                    05:78:b7:13:d7:cb:02:4b:ca:a7:ec:17:36:51:65:
                    d3:b4:78:c0:03:ea:64:4c:af:6d:85:6c:e8:5a:db:
                    d5:05:5c:4b:c2:4f:b5:95:30:9f:24:af:75:70:68:
                    ad:e4:f0:7d:4c:40:58:c2:6d:fd:68:77:c4:3a:d8:
                    34:e8:5a:ed:42:d6:98:13:cc:6d:82:2f:e4:99:40:
                    d0:08:57:9d:28:90:18:6a:c5:7f:ee:88:d1:86:0c:
                    cb:5c:c3:b2:eb:1c:42:87:29:ef:a1:8f:fe:a0:6a:
                    f0:57:be:7b:1b:b9:72:f9:46:9a:e8:b4:a5:2c:78:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:0D:59:EC:50:B0:43:7E:D9:DF:5C:BA:19:B6:2D:17:C3:7A:A0
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133362e302f32312d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:22:82:c4:40:b2:38:10:1b:f2:24:b9:25:74:82:b3:23:3e:
         a2:1e:f4:69:da:f5:fe:b1:4b:00:46:cb:3a:04:d6:99:37:96:
         7c:cd:27:c9:fe:99:58:b7:d0:d5:5a:8b:99:c3:d2:17:06:b4:
         35:3d:eb:8b:36:12:37:26:61:b6:7e:86:f9:32:b9:99:c5:b0:
         13:cb:96:c2:e2:90:44:48:ce:80:17:57:49:5e:bc:c4:0e:15:
         b6:d6:1c:c8:73:8e:3c:cb:75:47:e1:28:5f:53:99:1a:ad:8b:
         0d:44:18:48:84:6a:90:a0:c0:c0:27:fb:30:2b:e1:f0:3a:be:
         3b:26:61:b8:24:40:32:c4:56:3c:b1:5b:fb:a4:a1:ac:76:70:
         6d:69:f4:e8:9c:1a:fc:45:c5:b6:41:01:ca:99:4f:0e:e3:59:
         d7:b8:08:de:d0:f6:7b:f9:a3:f0:30:63:57:a7:8d:b3:bb:a4:
         ad:c9:da:b4:22:ef:eb:26:09:51:be:82:c5:d5:57:90:d2:db:
         cb:99:86:a6:3e:18:27:d1:5c:5d:9c:f3:af:40:bf:75:af:5d:
         9e:47:13:bb:1c:80:02:4a:38:a9:5d:17:40:a7:35:38:cc:f9:
         9a:83:bd:7a:32:3d:1d:3e:11:6a:6a:6a:73:ad:34:f1:ac:25:
         3e:48:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:38:22 2026 by rpki-client