Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31372d3137203d3e203532323238.roa
File:                     3138362e3135392e3132382e302f31372d3137203d3e203532323238.roa (raw, json)
Hash identifier:          Pw+63uBne2zYAUoYs8eIHQkdDR8yO5U6QLTWNb78BGE=
Subject key identifier:   20:15:61:87:D9:B9:9D:CC:B1:5A:6E:8F:26:EF:09:4F:C7:20:85:AE
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       79A883ED762C8C31FA66866971B5047C3DF5D757
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31372d3137203d3e203532323238.roa
Signing time:             Mon 23 Feb 2026 14:20:00 +0000
ROA not before:           Mon 23 Feb 2026 14:15:00 +0000
ROA not after:            Mon 22 Feb 2027 14:20:00 +0000
asID:                     52228
IP address blocks:        186.159.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a8:83:ed:76:2c:8c:31:fa:66:86:69:71:b5:04:7c:3d:f5:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb 23 14:15:00 2026 GMT
            Not After : Feb 22 14:20:00 2027 GMT
        Subject: CN=20156187D9B99DCCB15A6E8F26EF094FC72085AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:2e:17:6c:6c:cd:73:ae:bb:ef:ad:45:c6:
                    f6:1e:d0:08:5e:69:0c:e6:11:9d:9b:c3:6d:1f:5a:
                    55:4f:fd:a6:41:36:3b:0d:d2:90:40:cb:15:51:76:
                    c9:ea:15:0f:b0:d4:1b:7f:2a:af:db:92:f4:b4:0c:
                    38:56:40:3f:67:34:67:94:f0:33:52:26:12:06:01:
                    3a:67:14:9b:aa:f5:1e:8b:f8:af:78:2e:0e:86:dc:
                    fa:27:69:07:0c:42:56:b8:cf:17:90:df:d1:24:8b:
                    4b:49:29:15:6f:84:3d:ee:ed:87:21:04:1d:20:b7:
                    9a:35:61:d2:73:d8:c9:30:7f:c2:b0:f5:5e:3d:08:
                    78:8a:67:b7:72:27:07:3a:10:54:1c:6c:15:7b:cd:
                    1b:a4:63:d4:a1:12:ce:25:02:af:80:a3:0a:78:d4:
                    26:74:b1:e4:84:be:25:8c:15:1f:6f:d8:48:46:99:
                    b4:54:bb:09:29:f2:7c:d2:d4:e9:e5:bc:f0:90:0d:
                    74:a6:99:3d:9b:a8:26:24:0f:19:a7:33:54:be:dd:
                    8e:45:c6:38:27:13:50:6e:e7:00:11:62:da:ec:bf:
                    81:64:4e:c0:81:54:e9:1b:8c:6e:b7:d7:43:1c:89:
                    b0:6a:4a:62:56:42:4e:0f:c1:fd:d4:34:a2:b1:6b:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:15:61:87:D9:B9:9D:CC:B1:5A:6E:8F:26:EF:09:4F:C7:20:85:AE
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31372d3137203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:da:b2:f9:c2:1f:69:a2:8e:9d:b0:35:b8:45:e2:b3:67:
         04:d9:13:c0:4a:9f:d6:29:84:20:17:6f:65:86:9b:58:93:5d:
         59:f1:18:65:00:6e:cc:e0:f8:bf:61:6f:86:da:be:48:6f:20:
         f0:06:42:9a:35:da:ca:69:e3:1f:2f:ea:d6:d1:45:f0:86:8f:
         b2:ae:db:21:88:c6:bd:da:8b:98:74:f5:b0:ae:36:a6:6d:55:
         1f:4a:49:f7:de:53:13:8a:e2:88:56:00:f4:4a:55:99:e5:3d:
         f6:97:1c:35:0f:33:33:a8:b3:ef:ca:2b:cc:c2:cc:ae:16:95:
         ce:cc:59:f3:2d:20:ad:ca:d2:d7:56:eb:06:46:6a:a5:0a:88:
         fb:28:37:d8:99:b7:cc:d0:d3:60:fa:e9:13:60:3b:22:d5:59:
         46:ea:85:c7:95:c0:fc:cb:e6:36:6c:c1:5c:f5:b9:8e:d5:9e:
         8e:15:fe:ba:94:ec:ed:89:39:0e:91:6f:b3:35:6a:a1:5e:00:
         ed:dc:3e:e9:10:d9:ae:34:ce:be:3d:4f:e4:8b:e4:47:e4:80:
         0e:c7:bc:54:75:c7:8a:8f:ee:19:32:67:00:04:b4:c4:85:c0:
         6a:cf:5a:cf:91:a9:f0:08:80:bc:63:40:22:b0:da:3e:89:95:
         e2:21:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:49:43 2026 by rpki-client