Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa
File:                     3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa (raw, json)
Hash identifier:          xiWQBX2JlnQm6CvyKMdi/vuCeUsP0mU95ZwDsm4HauQ=
Subject key identifier:   99:28:81:1F:C3:F9:0E:98:C6:77:54:70:BC:11:82:55:1A:1C:A9:8B
Certificate issuer:       /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
Certificate serial:       48EC3A94C924A87082D20BAB55796935FCD534D2
Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa
Signing time:             Tue 22 Jul 2025 15:00:00 +0000
ROA not before:           Tue 22 Jul 2025 14:55:00 +0000
ROA not after:            Tue 21 Jul 2026 15:00:00 +0000
asID:                     262164
IP address blocks:        186.148.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ec:3a:94:c9:24:a8:70:82:d2:0b:ab:55:79:69:35:fc:d5:34:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
        Validity
            Not Before: Jul 22 14:55:00 2025 GMT
            Not After : Jul 21 15:00:00 2026 GMT
        Subject: CN=9928811FC3F90E98C6775470BC1182551A1CA98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:a2:7e:81:b3:1e:f1:1e:4b:c4:2a:58:75:
                    f5:e9:f1:4f:b6:8b:a8:fa:d6:cf:35:f3:fd:31:2d:
                    d7:6b:52:6e:c5:19:1a:60:d6:d4:19:26:39:08:da:
                    8c:1a:68:5d:df:46:51:7a:a4:9b:27:4d:c2:d6:27:
                    a0:90:aa:7c:2e:9f:d1:55:b8:38:cb:1a:75:97:fc:
                    ec:98:bf:b0:7c:62:80:ba:73:fd:cf:82:51:d0:8d:
                    2d:91:e5:28:e1:d9:e7:7c:19:d7:29:77:e2:3e:35:
                    15:91:f3:b4:35:bb:14:1d:11:c4:d3:50:47:10:21:
                    95:96:de:04:ab:67:61:cd:5c:8c:21:5d:2d:e3:41:
                    eb:c1:73:e1:3d:f2:08:99:d4:83:bc:51:47:03:e3:
                    10:8d:5e:ca:32:61:b5:10:30:b1:5c:29:b1:45:cf:
                    bf:39:03:d5:f8:e1:ab:3f:e4:4c:2e:8c:5d:39:2c:
                    bc:df:ae:f4:cd:c4:8b:23:cd:cf:e8:6c:af:58:8e:
                    97:a8:1e:76:eb:97:4b:6c:76:37:de:31:28:7a:df:
                    04:bf:36:41:dd:e8:85:12:b6:22:49:73:ec:f7:e9:
                    81:1b:5f:44:f2:d8:af:17:7c:c7:da:fa:e6:41:3d:
                    55:e2:ce:3b:29:8f:a0:d4:1d:f7:8a:71:47:1d:ac:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:81:1F:C3:F9:0E:98:C6:77:54:70:BC:11:82:55:1A:1C:A9:8B
            X509v3 Authority Key Identifier:
                keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3231362e302f32322d3234203d3e20323632313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:72:42:4d:d0:dc:f9:85:81:12:c6:88:f2:9c:13:26:5e:
         81:96:0b:35:4e:33:86:6b:ff:a7:26:50:13:7b:ed:cf:9b:48:
         af:2e:67:05:7a:84:87:3f:88:b8:d6:3f:67:7d:6a:b0:0e:76:
         26:f0:e5:15:2f:90:35:a6:e5:3d:50:97:8c:a3:52:04:a2:f9:
         0b:7b:07:89:76:52:53:ae:a5:36:9e:c1:6a:a3:b5:3f:34:02:
         f0:15:c5:03:55:9f:1e:1d:f1:6e:1c:48:c3:1b:5a:59:0f:22:
         91:bf:23:3e:31:81:54:bd:f4:01:a0:e2:36:29:0c:5f:a9:f2:
         1c:a9:a9:f4:ba:9c:ce:4f:d1:89:c6:a5:75:d2:49:38:1e:ca:
         8a:b0:e5:d6:6f:ad:14:37:53:e9:95:3e:66:85:11:c4:62:61:
         74:57:ea:5a:77:bb:b4:1c:5a:73:47:fd:ed:d6:d8:2b:38:92:
         fa:49:1f:8c:b0:11:a1:2c:58:ce:ee:6c:8c:b9:77:0d:f1:46:
         db:3b:8b:cd:4c:3f:39:cb:f8:ba:f2:60:b6:f2:a5:0e:8c:ec:
         cf:5b:e5:b5:8f:4e:51:4d:35:22:27:26:2d:31:18:16:a6:bf:
         7e:a7:4a:ff:d6:59:72:91:84:32:97:56:0f:b9:59:65:5a:95:
         32:cb:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:21:12 2025 by rpki-client