Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          lKMjecj6vVZbO3I76KWchgwqzbRjJLzGenhpT55K1m8=
Subject key identifier:   2B:FB:9A:E1:BE:E8:68:4E:EA:DB:1D:8E:D0:BA:D7:E9:E7:E0:27:6E
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7C5503736A14D4E7AB5CED5E3846DD647C94596C
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 14 May 2026 15:42:29 +0000
ROA not before:           Thu 14 May 2026 15:37:29 +0000
ROA not after:            Thu 13 May 2027 15:42:29 +0000
asID:                     22927
IP address blocks:        186.143.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 11:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:55:03:73:6a:14:d4:e7:ab:5c:ed:5e:38:46:dd:64:7c:94:59:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: May 14 15:37:29 2026 GMT
            Not After : May 13 15:42:29 2027 GMT
        Subject: CN=2BFB9AE1BEE8684EEADB1D8ED0BAD7E9E7E0276E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:75:59:2f:2b:30:a5:5c:23:fe:3f:41:d6:
                    8e:59:e2:45:49:07:98:92:dc:7f:d0:b6:04:74:31:
                    85:bb:0a:da:54:1f:ec:f0:57:5e:ab:1a:d8:2a:86:
                    71:8c:6e:6f:9c:03:b4:c2:a9:c9:18:92:43:5d:76:
                    f7:5b:de:86:47:57:bc:4b:a2:f2:4d:a8:13:67:a6:
                    59:76:45:a7:d3:33:29:f7:ba:f0:79:66:58:d2:5f:
                    ba:df:e8:dc:54:28:2b:4a:52:a8:c3:eb:69:b3:c8:
                    34:5c:28:1f:45:46:c5:c3:99:0c:d5:00:08:b1:8d:
                    be:65:01:7d:69:a2:e5:06:bc:71:ef:e4:97:9a:16:
                    cb:8c:53:4b:06:d0:cd:22:41:f4:be:3f:0b:ee:ba:
                    45:95:eb:48:0c:bf:5d:70:d9:81:30:79:8b:5d:00:
                    c0:8c:63:c1:64:60:10:94:73:ed:3b:03:a9:47:0a:
                    fb:9a:af:f6:9f:e6:ce:36:10:5b:2e:34:ce:7a:44:
                    49:25:ea:70:a1:84:4d:f8:20:32:c8:68:ff:fa:8d:
                    bb:90:43:75:4a:d8:e5:38:b5:d7:7f:6b:6d:c8:71:
                    68:0e:20:37:da:55:d4:41:19:61:b4:5f:70:1e:c3:
                    e5:6b:5e:85:c5:56:f3:2a:37:21:a1:e6:b8:6f:93:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FB:9A:E1:BE:E8:68:4E:EA:DB:1D:8E:D0:BA:D7:E9:E7:E0:27:6E
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:9c:9f:96:b2:ed:02:b4:98:b6:58:f3:04:ef:f6:f4:d9:
         67:2f:67:4d:e7:40:1b:92:0f:20:2f:82:65:1c:2d:a4:44:c8:
         7b:44:cd:2a:d0:16:73:27:84:af:f5:a7:1d:e3:d8:6d:f6:9f:
         cb:25:4a:06:98:0f:6d:cc:b8:75:c7:02:a0:6d:d8:e4:06:2b:
         26:18:c8:e0:52:0b:6a:86:38:2e:ce:61:af:f8:c2:f9:2c:d1:
         3f:a8:82:c8:a2:5f:35:f9:63:65:90:2f:7d:67:8e:7e:83:fa:
         0e:75:24:43:ce:4e:8c:19:d2:f6:fe:64:77:67:7d:f2:ba:fe:
         ec:31:28:6d:cc:de:90:ac:7f:80:b6:6c:0b:65:9f:c1:07:3b:
         06:aa:6a:c1:8d:c6:e3:8f:18:e6:ef:f8:a4:d7:4e:16:ac:f3:
         b6:f1:35:8c:84:e5:f2:b5:ef:49:b4:f7:01:d8:cd:4d:e3:b1:
         79:b0:50:1a:29:de:1c:9a:97:5e:f5:f2:ff:2b:d8:18:f2:6f:
         61:5a:28:58:e3:57:19:ab:79:74:8f:7e:67:e9:74:ca:f8:a8:
         22:9a:62:69:1a:b3:9b:e0:d7:86:b2:0c:d3:91:92:1f:1e:46:
         63:a6:9e:81:a5:ff:b0:c9:b0:8a:d7:8a:63:ae:82:96:59:29:
         c4:af:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:34:09 2026 by rpki-client