Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3132382e302f31372d3137203d3e203532323238.roa
File:                     3138362e31352e3132382e302f31372d3137203d3e203532323238.roa (raw, json)
Hash identifier:          pAhgMlXCp6Xsm3+ze8UCnoH/8UFm9AEQCSd905RS81U=
Subject key identifier:   72:15:5D:68:36:BC:E2:41:E3:3A:BE:A8:8C:AE:D2:7D:DF:E3:4A:46
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       6F022C5DC93A571BCE1FE4875E7784C2731F668D
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3132382e302f31372d3137203d3e203532323238.roa
Signing time:             Mon 23 Feb 2026 14:20:00 +0000
ROA not before:           Mon 23 Feb 2026 14:15:00 +0000
ROA not after:            Mon 22 Feb 2027 14:20:00 +0000
asID:                     52228
IP address blocks:        186.15.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:2c:5d:c9:3a:57:1b:ce:1f:e4:87:5e:77:84:c2:73:1f:66:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb 23 14:15:00 2026 GMT
            Not After : Feb 22 14:20:00 2027 GMT
        Subject: CN=72155D6836BCE241E33ABEA88CAED27DDFE34A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:77:8c:c4:11:93:35:ab:03:fa:41:81:da:
                    91:98:20:43:79:91:8d:ae:a5:6d:5d:75:f8:00:aa:
                    33:8a:95:c0:b9:2a:86:ac:f7:f4:a9:d1:23:aa:d1:
                    a4:29:cb:e9:c7:a6:aa:5a:4a:52:15:85:14:36:db:
                    ae:11:36:c2:4d:08:cb:34:49:50:c0:e7:59:1d:9f:
                    65:ba:28:45:2a:32:64:84:2c:9f:f0:f5:9a:4a:47:
                    0c:16:68:9c:e0:3c:23:ca:01:4c:6a:09:d1:fb:2d:
                    13:e5:25:e7:b2:ba:05:8c:a4:53:2d:bf:ff:01:53:
                    aa:12:b5:41:6a:d8:a3:73:73:b0:eb:6f:6b:ee:80:
                    87:39:5e:75:43:35:50:df:0c:d1:ec:a9:88:6a:e1:
                    f6:0a:c9:f0:49:41:4c:dd:4d:3b:9c:2c:81:83:b1:
                    63:05:95:75:07:86:f2:ca:c6:68:9d:ee:72:38:55:
                    5a:11:ea:41:d0:50:e9:60:c0:b2:24:51:15:76:bc:
                    a7:1b:cd:28:85:f5:b3:26:e6:6a:08:a9:d0:cc:3a:
                    df:72:d2:ab:9d:5f:e4:6a:0c:76:11:54:9d:9b:4d:
                    e3:78:1a:9d:15:9c:9c:b1:0d:c6:fa:2a:11:e8:37:
                    74:68:1b:cc:94:fe:4e:36:75:b2:7a:29:5d:b0:fd:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:5D:68:36:BC:E2:41:E3:3A:BE:A8:8C:AE:D2:7D:DF:E3:4A:46
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3132382e302f31372d3137203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:48:b7:f8:13:c9:34:d4:ba:b2:78:76:8e:9e:f0:4e:5a:60:
         af:ae:3a:8f:42:d3:1b:d2:da:00:d5:25:f2:0c:ed:34:6e:4d:
         ad:b9:bb:13:f8:f5:79:95:32:59:a7:04:58:68:7d:8b:f7:c8:
         fe:e9:14:b4:d4:ee:14:d4:18:b5:ef:6d:6b:1b:9c:1c:db:86:
         42:fb:5b:3b:17:f9:1e:04:e2:ba:29:93:55:b4:1b:06:37:41:
         05:ef:8c:b7:40:b3:1c:fe:6d:99:13:ef:26:08:16:19:fe:53:
         2f:0f:9a:04:e0:36:e4:11:58:d7:79:4e:cf:c0:cf:70:9f:fc:
         86:57:02:62:37:69:61:e3:c8:ad:16:c9:b8:ed:77:e6:da:5a:
         7e:9d:4d:37:8c:15:ff:dd:dd:b6:1d:35:14:60:34:c0:f2:db:
         e7:9a:81:89:12:03:c0:c7:b0:13:0d:a7:e4:21:40:8d:db:21:
         71:89:07:13:2d:60:bc:49:b7:6d:c9:76:4b:ee:d6:f6:fe:e4:
         d4:33:67:48:fc:51:98:e9:84:33:bd:03:35:9e:18:64:c7:43:
         cc:e5:fc:0c:f5:ab:6b:c1:7d:e4:18:4c:27:fb:b5:b2:17:f1:
         da:ec:df:66:16:86:a5:36:2a:81:7b:95:04:29:a2:1e:61:69:
         02:a8:f4:83
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbwIsXck6VxvOH+SHXneEwnMfZo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNjAyMjMxNDE1MDBaFw0yNzAyMjIxNDIwMDBaMDMxMTAvBgNV
BAMTKDcyMTU1RDY4MzZCQ0UyNDFFMzNBQkVBODhDQUVEMjdEREZFMzRBNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMneMxBGTNasD+kGB2pGYIEN5
kY2upW1ddfgAqjOKlcC5Koas9/Sp0SOq0aQpy+nHpqpaSlIVhRQ2264RNsJNCMs0
SVDA51kdn2W6KEUqMmSELJ/w9ZpKRwwWaJzgPCPKAUxqCdH7LRPlJeeyugWMpFMt
v/8BU6oStUFq2KNzc7Drb2vugIc5XnVDNVDfDNHsqYhq4fYKyfBJQUzdTTucLIGD
sWMFlXUHhvLKxmid7nI4VVoR6kHQUOlgwLIkURV2vKcbzSiF9bMm5moIqdDMOt9y
0qudX+RqDHYRVJ2bTeN4Gp0VnJyxDcb6KhHoN3RoG8yU/k42dbJ6KV2w/Q1tAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUchVdaDa84kHjOr6ojK7Sfd/jSkYwHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTJlMzEzMjM4MmUz
MDJmMzEzNzJkMzEzNzIwM2QzZTIwMzUzMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7oPgDAN
BgkqhkiG9w0BAQsFAAOCAQEAJUi3+BPJNNS6snh2jp7wTlpgr646j0LTG9LaANUl
8gztNG5Nrbm7E/j1eZUyWacEWGh9i/fI/ukUtNTuFNQYte9taxucHNuGQvtbOxf5
HgTiuimTVbQbBjdBBe+Mt0CzHP5tmRPvJggWGf5TLw+aBOA25BFY13lOz8DPcJ/8
hlcCYjdpYePIrRbJuO135tpafp1NN4wV/93dth01FGA0wPLb55qBiRIDwMewEw2n
5CFAjdshcYkHEy1gvEm3bcl2S+7W9v7k1DNnSPxRmOmEM70DNZ4YZMdDzOX8DPWr
a8F95BhMJ/u1shfx2uzfZhaGpTYqgXuVBCmiHmFpAqj0gw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:50:31 2026 by rpki-client