Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138362e3132312e3133362e302f32312d3231203d3e20323632313931.roa
File:                     3138362e3132312e3133362e302f32312d3231203d3e20323632313931.roa (raw, json)
Hash identifier:          2MBAYfx6F1/+yC95HjHiZN/0Sd3snfI4Ms0iYYz+cWo=
Subject key identifier:   1B:E5:46:37:01:73:B4:FB:EE:1A:D4:95:41:65:BC:A6:37:C9:70:8A
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       5443B28B2C40C63951EC3AF970F7044A8DECA4D7
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138362e3132312e3133362e302f32312d3231203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:05 +0000
ROA not before:           Fri 30 Jan 2026 06:36:05 +0000
ROA not after:            Fri 29 Jan 2027 06:41:05 +0000
asID:                     262191
IP address blocks:        186.121.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:43:b2:8b:2c:40:c6:39:51:ec:3a:f9:70:f7:04:4a:8d:ec:a4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:05 2026 GMT
            Not After : Jan 29 06:41:05 2027 GMT
        Subject: CN=1BE546370173B4FBEE1AD4954165BCA637C9708A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:17:8d:5b:0d:03:5b:ad:fa:b0:9b:9e:a0:
                    42:eb:fc:f6:07:65:9d:5e:ee:7f:e5:25:bf:22:8a:
                    cb:6d:ae:31:02:11:97:25:ce:ac:97:12:6e:42:3f:
                    b0:bf:a9:51:70:d2:fb:13:d5:e9:ec:94:44:57:c7:
                    25:a6:84:b1:83:90:cc:8b:1d:65:c5:0b:76:11:83:
                    05:3e:8f:6e:47:b9:b9:55:58:e6:b3:b7:53:06:17:
                    62:6c:e9:1d:83:25:33:6e:1f:eb:b7:37:9d:bb:50:
                    cf:1a:69:5e:ad:d7:33:6f:c5:3e:f2:22:e0:1c:9d:
                    9e:89:21:85:e0:35:73:ca:a6:45:af:e5:88:94:63:
                    5c:13:46:65:5e:56:6d:ae:1b:82:fb:9f:39:69:38:
                    69:a7:f8:71:92:22:e7:9c:f0:3d:b2:48:4a:81:a8:
                    c1:5d:80:7b:1a:fb:44:12:14:ca:1a:19:1d:2c:fe:
                    dd:f3:a3:8a:5e:c1:52:e6:8b:90:6a:0d:17:1c:9a:
                    e4:dc:67:08:c4:00:25:f6:46:67:16:33:1f:78:00:
                    67:4f:9e:49:8a:b0:d6:5e:51:85:ad:b7:f7:9c:e6:
                    f2:82:c6:48:50:7e:23:b0:14:98:da:3a:4c:d5:87:
                    c0:1c:7d:44:64:14:88:86:a3:56:ae:cf:33:30:5c:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:46:37:01:73:B4:FB:EE:1A:D4:95:41:65:BC:A6:37:C9:70:8A
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138362e3132312e3133362e302f32312d3231203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:fe:ee:37:75:8e:72:9f:4d:60:96:6b:9b:5e:12:58:c6:d9:
         aa:75:72:0d:3b:e0:03:4e:6b:e9:99:ec:e6:9a:b1:89:71:1b:
         b7:ab:7a:05:6d:2d:b1:d2:29:b2:bb:9d:40:c2:e1:72:bb:7e:
         b3:c1:d8:39:bc:ae:35:d8:99:4a:0a:cf:49:18:df:95:df:56:
         ec:02:6c:40:d7:f7:55:34:0d:e5:0f:5b:d3:02:0f:3f:df:0f:
         00:17:dc:7c:6d:04:72:87:96:be:e9:13:17:ff:32:5d:67:fc:
         17:93:b4:c0:46:9d:ad:ba:98:14:54:e0:57:44:07:40:41:92:
         59:1b:35:3c:2b:11:7f:88:07:5e:10:86:3b:82:fc:de:a3:6c:
         0e:2e:aa:3d:3c:12:ac:a9:e1:c2:4a:db:ee:47:e2:16:04:15:
         ff:2d:6a:59:1e:23:76:9f:ae:a4:4a:ac:cb:31:59:8d:76:4e:
         64:20:01:7d:2c:ef:4e:a9:6a:92:11:f0:c5:cb:a9:42:4a:a9:
         91:be:d5:a1:fa:8f:89:24:ff:04:86:92:80:2b:a1:6c:95:d9:
         14:1f:55:91:00:b9:3e:c1:7b:71:55:08:a2:e9:56:4f:00:35:
         b3:18:72:9a:e6:89:2d:ce:b1:c5:f4:12:c8:5f:49:35:f5:24:
         ea:e0:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:33 2026 by rpki-client