Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa
File:                     3138362e3135392e36342e302f31392d3139203d3e203237363935.roa (raw, json)
Hash identifier:          PTmNQ0Pdx9XObZa++qeHfctX9TM/h62OS8gg7cTvMWM=
Subject key identifier:   94:66:8E:B0:37:3C:9A:8E:CC:41:75:B4:31:50:3C:5C:2E:9E:AF:3C
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       567509DBD50128FD7F4FE9236B99DAD7DC537078
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa
Signing time:             Mon 19 Oct 2026 20:42:02 +0000
ROA not before:           Mon 19 Oct 2026 20:37:02 +0000
ROA not after:            Mon 18 Oct 2027 20:42:02 +0000
asID:                     27695
IP address blocks:        186.159.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:75:09:db:d5:01:28:fd:7f:4f:e9:23:6b:99:da:d7:dc:53:70:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Oct 19 20:37:02 2026 GMT
            Not After : Oct 18 20:42:02 2027 GMT
        Subject: CN=94668EB0373C9A8ECC4175B431503C5C2E9EAF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:b8:3c:42:4f:23:e6:12:ad:32:2e:2c:21:
                    f5:22:76:ce:fc:0b:22:9d:dd:72:4d:c9:f1:12:39:
                    51:1d:0f:12:a6:3c:69:b9:56:b7:20:0d:cb:0d:df:
                    5a:90:a5:6d:fb:41:cf:f5:39:8a:67:05:4f:85:2a:
                    2d:a1:80:3c:14:f4:53:6f:45:68:de:82:b7:42:e2:
                    46:88:6a:e0:1b:61:08:b7:e1:3b:1c:bf:0b:85:12:
                    f4:a2:2e:8e:b1:59:ad:4a:57:94:8b:72:eb:e9:c6:
                    de:a6:3e:87:04:4b:58:d3:4b:03:7e:68:93:d7:bf:
                    3c:97:d9:25:07:c5:42:bf:60:4b:08:3d:b0:d3:7f:
                    07:00:3a:84:13:e4:ea:83:69:43:81:dd:8b:6a:ab:
                    78:d3:92:d0:9a:19:4f:ec:97:61:91:d5:20:7a:26:
                    c7:cc:e3:83:10:6f:0b:f6:bc:16:a4:b2:82:29:18:
                    84:1a:89:1a:35:00:e3:61:fc:5f:a1:d4:dc:52:cf:
                    ec:04:28:ef:12:c7:63:39:c1:e4:a9:d2:18:f5:df:
                    48:ad:8b:b1:ca:4f:02:fa:b6:9a:41:53:92:79:60:
                    b7:a5:a9:65:59:f9:85:b4:22:14:d6:67:6a:35:08:
                    73:52:26:7a:98:3a:1d:4c:8a:1f:b1:2e:59:f5:96:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:8E:B0:37:3C:9A:8E:CC:41:75:B4:31:50:3C:5C:2E:9E:AF:3C
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:86:81:65:ae:9a:29:d3:3b:41:e1:94:80:bb:c2:2f:8e:ec:
         00:0e:66:1c:f3:3c:9e:48:d7:64:4b:3f:50:71:c9:9f:e6:f7:
         17:d3:c4:b6:9f:cf:bc:79:09:d4:00:0c:2d:98:57:f5:e5:e4:
         35:e3:a8:69:2c:b1:7e:33:b7:cf:13:fc:49:02:ca:1b:83:0b:
         cb:54:b3:15:ba:df:9c:95:7b:5e:7e:aa:bd:7f:ee:40:96:9c:
         3c:5f:dd:71:93:2c:76:b8:e9:cc:52:46:dc:97:17:41:eb:06:
         b6:ec:de:c8:bc:b5:10:09:e1:59:b0:ab:62:8b:9f:19:d6:f4:
         3f:42:6e:93:e2:21:bf:85:66:1c:3b:f6:92:e5:36:28:8e:98:
         4a:8e:0b:48:99:63:96:48:7e:2b:42:82:ff:a6:3e:81:59:ce:
         54:82:05:4c:13:0f:fe:b8:49:8b:03:ba:61:10:45:0a:13:f4:
         8e:b9:42:1b:9d:a2:22:fa:98:4a:45:a7:2b:56:35:98:6e:e6:
         43:1b:3e:24:3b:8a:21:f7:95:96:ac:99:08:76:3a:a9:aa:55:
         18:75:8e:2f:a8:9a:f3:8b:5c:6a:0b:85:d3:98:29:e1:39:fa:
         7d:bb:3f:df:9d:6f:c2:14:d3:9e:10:60:bd:e2:0b:b3:79:0b:
         75:1c:69:2d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVnUJ29UBKP1/T+kja5na19xTcHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjEwMTkyMDM3MDJaFw0yNzEwMTgyMDQyMDJaMDMxMTAvBgNV
BAMTKDk0NjY4RUIwMzczQzlBOEVDQzQxNzVCNDMxNTAzQzVDMkU5RUFGM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLrg8Qk8j5hKtMi4sIfUids78
CyKd3XJNyfESOVEdDxKmPGm5VrcgDcsN31qQpW37Qc/1OYpnBU+FKi2hgDwU9FNv
RWjegrdC4kaIauAbYQi34TscvwuFEvSiLo6xWa1KV5SLcuvpxt6mPocES1jTSwN+
aJPXvzyX2SUHxUK/YEsIPbDTfwcAOoQT5OqDaUOB3Ytqq3jTktCaGU/sl2GR1SB6
JsfM44MQbwv2vBaksoIpGIQaiRo1AONh/F+h1NxSz+wEKO8Sx2M5weSp0hj130it
i7HKTwL6tppBU5J5YLelqWVZ+YW0IhTWZ2o1CHNSJnqYOh1Mih+xLln1lpUJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlGaOsDc8mo7MQXW0MVA8XC6erzwwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzgzNjJlMzEzNTM5MmUzNjM0MmUz
MDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzNzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbqfQDAN
BgkqhkiG9w0BAQsFAAOCAQEAmoaBZa6aKdM7QeGUgLvCL47sAA5mHPM8nkjXZEs/
UHHJn+b3F9PEtp/PvHkJ1AAMLZhX9eXkNeOoaSyxfjO3zxP8SQLKG4MLy1SzFbrf
nJV7Xn6qvX/uQJacPF/dcZMsdrjpzFJG3JcXQesGtuzeyLy1EAnhWbCrYoufGdb0
P0Juk+Ihv4VmHDv2kuU2KI6YSo4LSJljlkh+K0KC/6Y+gVnOVIIFTBMP/rhJiwO6
YRBFChP0jrlCG52iIvqYSkWnK1Y1mG7mQxs+JDuKIfeVlqyZCHY6qapVGHWOL6ia
84tcaguF05gp4Tn6fbs/351vwhTTnhBgveILs3kLdRxpLQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 19:30:47 2026 by rpki-client