Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          f5lAYPldJTJnl+I6jQnIG4ttN8ROjqTp7UPpwniPh/E=
Subject key identifier:   10:AD:0E:CA:21:2E:49:84:66:B4:D8:CA:A0:24:37:5C:6C:FD:DD:D2
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       662F5B6E402D161423575FE13502124991602EAE
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa
Signing time:             Fri 25 Sep 2026 21:37:04 +0000
ROA not before:           Fri 25 Sep 2026 21:32:04 +0000
ROA not after:            Fri 24 Sep 2027 21:37:04 +0000
asID:                     22927
IP address blocks:        186.141.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 22:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2f:5b:6e:40:2d:16:14:23:57:5f:e1:35:02:12:49:91:60:2e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 25 21:32:04 2026 GMT
            Not After : Sep 24 21:37:04 2027 GMT
        Subject: CN=10AD0ECA212E498466B4D8CAA024375C6CFDDDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:dd:03:2a:cc:9e:4c:4c:e4:d3:14:d5:5b:
                    56:34:eb:a3:00:91:b1:9c:8b:64:23:23:bb:09:af:
                    e4:75:35:a6:fa:96:ea:5c:f2:bf:ad:23:aa:b3:2b:
                    a9:fb:7c:bb:cf:ff:c2:02:89:5c:5f:81:da:82:9e:
                    db:07:37:77:26:f4:ab:69:a4:ee:f1:d1:b4:41:41:
                    6a:1d:e6:c1:d3:af:dc:ee:57:ea:ee:f7:a3:f8:c5:
                    6c:e4:59:ce:b6:dc:ca:2c:4e:cf:76:43:3e:c0:21:
                    cf:5c:99:54:af:2d:d1:94:5f:ce:1f:78:94:6c:2f:
                    dd:16:e9:b0:4d:32:bd:f3:51:78:b0:f9:12:b8:7f:
                    e2:63:67:26:d9:14:f7:ea:48:38:49:20:7a:80:3f:
                    c5:81:ed:22:88:fe:ae:91:b8:72:8b:8a:c1:fc:fe:
                    17:0e:65:5e:ff:ee:8d:77:e7:00:dc:f0:89:d3:00:
                    73:cc:62:75:43:23:35:47:d1:25:62:ae:58:5f:52:
                    60:04:e8:fd:39:68:94:8e:55:b0:ea:e5:3a:11:8e:
                    25:a0:29:ce:cd:f5:0b:66:c5:ff:59:3f:4d:e7:54:
                    66:97:ad:e6:0d:ff:95:9c:38:a1:81:36:c1:93:25:
                    83:d5:2f:a5:2a:bd:77:1f:14:f2:1f:62:4c:5c:fb:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AD:0E:CA:21:2E:49:84:66:B4:D8:CA:A0:24:37:5C:6C:FD:DD:D2
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:27:6d:fe:58:72:c0:5a:56:cf:46:95:ed:6b:52:d5:4b:39:
         ad:22:92:af:0b:54:4d:d4:67:9c:1b:6a:ed:2a:ec:d1:21:44:
         aa:bb:51:33:1d:55:b0:6b:81:dc:ce:61:3e:8d:04:bb:5d:9b:
         10:30:73:62:91:b3:70:a8:15:60:02:41:21:f7:c2:6a:29:bd:
         98:7c:8e:38:32:fd:f5:13:d5:32:62:54:6f:37:8b:25:15:08:
         e7:ab:ca:3d:70:67:16:5c:e3:35:3d:c7:64:97:33:0c:d2:26:
         2c:9f:7f:6f:d7:e1:e7:78:d8:49:8a:f4:f6:09:a2:82:50:56:
         b4:96:c6:d6:97:f0:78:19:63:c4:d2:32:86:bb:d1:48:fa:2c:
         c9:0e:74:5d:d8:c5:ba:15:7f:cd:c9:c8:dd:38:3e:9c:f2:5c:
         ba:1b:99:33:d2:f3:c3:cd:6a:e4:a6:8c:77:47:cd:41:08:87:
         df:b6:0c:17:4d:17:ed:09:c7:b1:e2:ea:d4:8c:4f:b5:1d:51:
         ed:fa:64:85:75:0a:14:a3:9a:7b:d6:22:dd:7d:fc:85:13:6a:
         ec:0d:88:3c:29:94:0f:bd:22:c0:fa:5b:cf:50:79:4d:85:13:
         94:a8:1c:da:15:c4:8b:a9:cb:b6:24:51:00:a9:03:7f:a6:e5:
         bd:e8:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:34:25 2026 by rpki-client