Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3138362e36352e36342e302f32312d3234203d3e203532333831.roa
File:                     3138362e36352e36342e302f32312d3234203d3e203532333831.roa (raw, json)
Hash identifier:          rTZkGWRSdJyHcsPZy8Tkgr5ID9th3yryZXRAxZLYUbs=
Subject key identifier:   A1:0D:C9:86:56:C1:21:4F:69:05:7A:34:8B:CF:37:C3:A5:6D:0F:5E
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       2D1DE7B945B891CDE997271C6357F8BB954EDC0F
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3138362e36352e36342e302f32312d3234203d3e203532333831.roa
Signing time:             Thu 26 Feb 2026 13:32:00 +0000
ROA not before:           Thu 26 Feb 2026 13:27:00 +0000
ROA not after:            Thu 25 Feb 2027 13:32:00 +0000
asID:                     52381
IP address blocks:        186.65.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:e7:b9:45:b8:91:cd:e9:97:27:1c:63:57:f8:bb:95:4e:dc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Feb 26 13:27:00 2026 GMT
            Not After : Feb 25 13:32:00 2027 GMT
        Subject: CN=A10DC98656C1214F69057A348BCF37C3A56D0F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d8:76:f0:0f:6f:bc:b2:7d:04:bb:ec:e2:18:
                    48:cf:e9:e2:12:2c:c6:21:f3:16:64:01:50:d4:ca:
                    24:4a:69:96:12:dc:d3:d5:a8:19:f7:a1:ce:d6:47:
                    55:f9:4b:c9:d8:f4:60:d9:ee:10:a5:b0:a4:55:23:
                    cf:be:f6:2e:3f:6e:b1:36:47:b5:cf:d4:2c:70:43:
                    c5:ee:06:1b:13:7d:19:e7:f7:dc:5a:44:26:14:f7:
                    8b:35:b8:bc:ba:63:e1:3d:34:0c:bc:e1:f5:58:1f:
                    45:fb:35:91:92:87:e6:de:85:63:68:be:cc:76:69:
                    ca:e2:a3:a3:70:41:b8:14:51:10:d3:2c:11:95:a5:
                    9e:3c:88:03:b4:cd:2b:40:c6:4b:57:26:37:bf:ef:
                    96:37:3b:56:4c:68:8b:0f:f8:4e:48:d0:26:d0:45:
                    c9:56:a5:d6:9d:b0:38:ce:57:d3:45:7f:af:99:dc:
                    a5:52:07:f1:92:03:33:03:8f:ac:95:b5:cd:b7:85:
                    66:93:54:ab:a3:1f:d2:e5:b9:10:37:83:8f:a4:99:
                    59:a2:60:63:01:84:89:f2:5d:8c:e1:e8:40:d9:7f:
                    88:b7:87:52:22:24:40:c8:6f:98:0b:ef:b3:7b:cf:
                    bb:4a:c2:86:fb:9e:c7:bd:da:be:60:e5:c7:a3:e9:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0D:C9:86:56:C1:21:4F:69:05:7A:34:8B:CF:37:C3:A5:6D:0F:5E
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3138362e36352e36342e302f32312d3234203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:0b:44:14:76:56:9b:76:71:9d:d8:ca:16:fc:09:fa:71:
         e5:13:d7:ff:e9:21:58:64:8c:f2:43:4c:17:3a:db:b7:51:7b:
         fa:58:c4:d4:44:78:52:86:1d:8b:53:69:11:d9:e7:9f:2d:36:
         b1:f4:60:ac:a7:dc:d8:64:19:f0:a1:3f:4f:e9:98:67:50:8c:
         2d:ae:e9:cf:11:13:27:7c:17:28:d6:c0:c7:f4:92:75:83:57:
         b1:ec:04:b8:58:b8:35:5c:0f:87:5e:66:53:ca:60:5e:12:4d:
         94:f6:33:74:97:15:32:aa:f5:d7:2b:66:44:b8:8f:9b:42:ae:
         26:ba:49:8d:b6:6e:bf:a7:83:4f:a8:59:d2:a5:77:6d:b9:bd:
         b9:23:49:5f:58:cb:b2:ef:3f:ac:8c:ee:45:b9:7a:5a:ff:ab:
         ce:63:6a:70:ff:cb:73:4e:d4:05:64:c3:e0:a3:ee:22:e0:18:
         71:4d:37:ea:82:59:1a:1a:a4:75:4e:04:2a:2f:5b:86:df:6c:
         2c:e5:98:52:5a:06:46:b6:a2:97:db:01:ab:5a:67:2d:0e:d7:
         b6:45:2f:ed:2a:d4:81:a2:84:e7:22:4c:b8:c0:5f:09:13:bb:
         ff:ad:d5:39:2d:bc:01:d6:44:b2:dd:fb:9a:ee:87:dd:ab:c4:
         36:34:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:05:05 2026 by rpki-client