Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          rsYrSukVQFYgehM0yoqhQYR+0R+A7vfjUf49VKJhplg=
Subject key identifier:   E3:E4:1E:12:B9:3A:F1:55:33:18:A1:28:12:49:10:7D:63:4D:11:F3
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       236F8B9A7E41C460AABFB043AF0EE47051AD1ADA
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 14 May 2026 15:42:30 +0000
ROA not before:           Thu 14 May 2026 15:37:30 +0000
ROA not after:            Thu 13 May 2027 15:42:30 +0000
asID:                     22927
IP address blocks:        186.143.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 11:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6f:8b:9a:7e:41:c4:60:aa:bf:b0:43:af:0e:e4:70:51:ad:1a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: May 14 15:37:30 2026 GMT
            Not After : May 13 15:42:30 2027 GMT
        Subject: CN=E3E41E12B93AF1553318A1281249107D634D11F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:b5:49:f3:5e:97:a3:0a:d8:3d:56:cd:44:
                    24:12:0e:23:71:3c:d9:87:97:ae:cd:38:c4:e5:c2:
                    c8:38:5e:0e:86:b9:15:39:48:e5:ed:46:2b:6b:b0:
                    fc:67:fe:54:3d:27:c6:b1:74:29:de:c2:f3:da:0f:
                    50:1f:7f:b1:79:88:08:77:46:6b:49:ab:58:c6:9f:
                    e8:4d:6c:e1:5e:a3:27:fb:f1:c0:c4:ad:c0:e7:97:
                    21:84:ed:09:c8:85:b4:21:f5:64:e9:c8:a2:68:70:
                    f8:d1:15:60:c1:6f:1a:f0:a4:c0:7a:c4:50:7c:1c:
                    8f:9f:01:26:29:e2:4e:a8:c2:01:31:5d:02:8d:e3:
                    02:92:9f:bd:29:a6:de:90:42:12:e6:4e:79:0c:f4:
                    33:76:65:57:15:fb:33:04:4d:74:39:9b:3f:09:21:
                    35:89:10:d7:db:54:d8:78:86:db:1c:e2:85:d3:fb:
                    74:ca:4d:3b:26:ec:37:4b:a8:ec:d2:bb:2d:88:15:
                    1a:a4:07:eb:d3:c9:07:2a:43:aa:5c:47:1b:94:2f:
                    6f:5c:d8:fc:fd:2a:c3:36:a7:24:e1:28:ef:dd:bf:
                    e8:14:16:4f:b9:aa:8b:8f:56:76:e1:75:17:09:79:
                    0d:65:e1:97:eb:ad:c9:c3:46:2d:b2:3d:1c:1d:27:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:1E:12:B9:3A:F1:55:33:18:A1:28:12:49:10:7D:63:4D:11:F3
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:b3:26:7f:90:99:ff:bc:df:af:0f:8b:3d:4c:28:f2:41:
         cb:f5:37:fd:c1:7f:4f:0e:ce:9a:bd:0d:a9:8b:2b:df:55:68:
         b3:06:02:03:9a:e1:85:f9:57:8a:82:67:b3:a9:18:63:3b:63:
         fe:42:c2:3d:d4:d7:f9:4f:58:19:f6:16:da:53:c1:5f:98:3d:
         a2:a5:dd:9f:07:fe:18:8f:cc:fc:c5:81:d0:57:9c:38:31:7d:
         8a:ad:01:87:4b:d4:8a:51:4c:52:58:27:d0:59:b6:13:6e:08:
         56:f9:ee:36:ed:0c:b7:70:67:7b:d5:ab:08:f8:fc:28:7c:21:
         e5:a2:0b:d7:83:8b:8e:90:c2:14:ee:0c:42:24:14:81:71:d7:
         5c:ad:70:d7:68:0a:ba:c1:d0:8d:29:8e:7f:18:5f:9f:b7:72:
         c1:f3:8e:7b:4d:ce:83:cc:3a:b1:5b:f7:5a:48:f1:18:3b:71:
         35:46:95:c1:0c:24:10:d9:45:6c:88:73:e6:c4:02:ac:7f:6e:
         1a:28:91:b3:11:c4:70:58:88:17:fc:84:b2:eb:ae:f5:a6:89:
         32:b0:70:97:90:7a:5b:27:7b:2e:c8:80:24:68:4d:c2:e9:bc:
         b8:80:ae:bd:40:9a:23:87:94:fc:a5:d1:15:2b:71:5c:01:27:
         aa:6c:b5:3a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUI2+Lmn5BxGCqv7BDrw7kcFGtGtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNjA1MTQxNTM3MzBaFw0yNzA1MTMxNTQyMzBaMDMxMTAvBgNV
BAMTKEUzRTQxRTEyQjkzQUYxNTUzMzE4QTEyODEyNDkxMDdENjM0RDExRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzLVJ816XowrYPVbNRCQSDiNx
PNmHl67NOMTlwsg4Xg6GuRU5SOXtRitrsPxn/lQ9J8axdCnewvPaD1Aff7F5iAh3
RmtJq1jGn+hNbOFeoyf78cDErcDnlyGE7QnIhbQh9WTpyKJocPjRFWDBbxrwpMB6
xFB8HI+fASYp4k6owgExXQKN4wKSn70ppt6QQhLmTnkM9DN2ZVcV+zMETXQ5mz8J
ITWJENfbVNh4htsc4oXT+3TKTTsm7DdLqOzSuy2IFRqkB+vTyQcqQ6pcRxuUL29c
2Pz9KsM2pyThKO/dv+gUFk+5qouPVnbhdRcJeQ1l4ZfrrcnDRi2yPRwdJ8HBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4+QeErk68VUzGKEoEkkQfWNNEfMwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMzMmUzMTM5Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo/G
MA0GCSqGSIb3DQEBCwUAA4IBAQBfBbMmf5CZ/7zfrw+LPUwo8kHL9Tf9wX9PDs6a
vQ2piyvfVWizBgIDmuGF+VeKgmezqRhjO2P+QsI91Nf5T1gZ9hbaU8FfmD2ipd2f
B/4Yj8z8xYHQV5w4MX2KrQGHS9SKUUxSWCfQWbYTbghW+e427Qy3cGd71asI+Pwo
fCHlogvXg4uOkMIU7gxCJBSBcddcrXDXaAq6wdCNKY5/GF+ft3LB8457Tc6DzDqx
W/daSPEYO3E1RpXBDCQQ2UVsiHPmxAKsf24aKJGzEcRwWIgX/ISy6671pokysHCX
kHpbJ3suyIAkaE3C6by4gK69QJojh5T8pdEVK3FcASeqbLU6
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:34:05 2026 by rpki-client