Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa
File:                     3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa (raw, json)
Hash identifier:          XzHVtYwkq0N1wVnZmmRiyqpzHD6iTnDEd/0pd/xTM8w=
Subject key identifier:   09:98:78:CA:3E:87:11:DA:07:CC:BA:FD:22:CF:0D:09:F4:18:35:69
Certificate issuer:       /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
Certificate serial:       3A9341C962DC30863758B75D6B1048B721603B55
Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa
Signing time:             Wed 23 Jul 2025 16:05:00 +0000
ROA not before:           Wed 23 Jul 2025 16:00:00 +0000
ROA not after:            Wed 22 Jul 2026 16:05:00 +0000
asID:                     27748
IP address blocks:        186.148.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:93:41:c9:62:dc:30:86:37:58:b7:5d:6b:10:48:b7:21:60:3b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
        Validity
            Not Before: Jul 23 16:00:00 2025 GMT
            Not After : Jul 22 16:05:00 2026 GMT
        Subject: CN=099878CA3E8711DA07CCBAFD22CF0D09F4183569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:a7:03:27:2a:d8:d2:13:25:70:b8:5c:67:
                    c3:6d:97:e1:59:63:34:6f:73:ed:5d:fc:73:ca:df:
                    da:4d:77:d9:6a:77:07:c7:b5:83:79:c4:05:25:64:
                    66:96:fe:72:8a:b8:10:cb:f6:dd:39:dc:68:f4:84:
                    33:39:72:62:b9:4d:af:0f:71:7b:49:81:18:a9:31:
                    de:4f:52:34:55:1f:85:99:c8:6e:de:30:f6:7f:f5:
                    7a:a0:0b:26:24:06:aa:85:23:ff:99:ea:ab:e3:43:
                    de:10:bc:4b:fd:24:34:a9:ea:18:ec:ed:48:93:33:
                    31:83:e0:49:55:3b:fa:82:b6:ea:ee:84:84:af:bb:
                    eb:1f:97:b1:14:b0:5b:d4:02:db:d3:93:31:d9:f8:
                    d0:e8:53:d6:d8:3f:64:87:55:c8:da:b1:e1:25:55:
                    af:81:f1:b7:da:e6:bd:f3:e9:44:82:90:74:95:88:
                    bd:a1:75:61:19:6b:6d:24:91:29:20:e7:26:83:d0:
                    66:68:27:8f:78:de:10:16:d6:f1:b8:bd:9d:ec:ea:
                    b6:16:e2:fe:cc:e4:d9:23:36:5a:d2:c3:70:a8:b0:
                    6e:24:0e:34:2b:82:38:85:bc:f2:0d:c3:8b:7a:8a:
                    ee:5e:21:65:2f:35:c3:9e:2e:74:1b:db:f3:99:a9:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:78:CA:3E:87:11:DA:07:CC:BA:FD:22:CF:0D:09:F4:18:35:69
            X509v3 Authority Key Identifier:
                keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232312e302f32342d3234203d3e203237373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:00:b0:dd:a9:b3:8b:03:ea:20:3c:52:7d:c5:3a:89:0c:
         14:07:f6:ea:91:e5:4d:66:9a:ef:3f:8d:a8:7d:6b:95:77:02:
         53:0c:57:0b:9a:63:93:b9:11:2d:07:ae:7a:f5:a6:a0:02:82:
         d0:67:38:6d:29:67:c8:d1:51:9c:83:c8:4c:48:fb:c0:00:5f:
         39:80:be:48:86:ff:76:01:b1:3d:0b:f2:94:9e:b8:1d:be:56:
         9b:28:ea:61:d6:e8:33:e7:ca:0c:d0:1a:0a:54:ca:b2:ef:ee:
         f0:d5:23:7e:a4:14:cc:5a:c5:3f:c5:b2:41:0e:8d:ce:80:55:
         c3:b1:5d:22:aa:75:eb:d7:ff:e0:85:16:e9:8d:80:69:41:60:
         c8:da:07:4b:63:c7:a9:24:f2:8f:07:f1:bd:96:77:2b:db:27:
         25:a1:7d:f3:74:e4:41:89:ff:7f:84:fd:ea:6e:b5:8f:9a:b5:
         cf:b0:e2:97:e5:8d:14:51:82:28:ff:20:4d:16:d0:a2:9b:39:
         f7:c8:1a:3a:b9:96:57:65:85:17:39:39:10:4b:e6:cc:41:1a:
         b8:28:d8:46:18:b6:b7:b0:4e:97:21:77:2d:ef:78:a9:6c:9c:
         67:e8:c8:a6:b9:65:15:e6:46:26:e5:46:ef:71:ce:77:74:90:
         f5:d4:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:26:30 2025 by rpki-client