Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          16Xy30rWreNF+aCa6TeVXoNawo4Cu9jkJQm0ZdRX+tk=
Subject key identifier:   74:54:0F:2D:0E:5A:09:6F:91:0D:0F:5A:72:0E:D2:C6:D7:7D:42:8B
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       5B52C766CC81B4CAFF4CEDF0B5CA89F8A870EAC2
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 14 May 2026 15:42:29 +0000
ROA not before:           Thu 14 May 2026 15:37:29 +0000
ROA not after:            Thu 13 May 2027 15:42:29 +0000
asID:                     22927
IP address blocks:        186.143.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 11:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:c7:66:cc:81:b4:ca:ff:4c:ed:f0:b5:ca:89:f8:a8:70:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: May 14 15:37:29 2026 GMT
            Not After : May 13 15:42:29 2027 GMT
        Subject: CN=74540F2D0E5A096F910D0F5A720ED2C6D77D428B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:55:51:14:c1:84:0e:85:06:50:5c:d2:8c:
                    3b:ed:58:2d:f4:bb:62:15:0e:4e:f6:77:19:0d:c5:
                    9a:dc:2e:ca:62:4e:39:a3:0e:61:a8:0d:f5:ef:ca:
                    98:70:13:f7:17:01:a3:ba:b7:93:62:41:71:42:b4:
                    fc:34:6c:b4:6a:6b:c2:5c:fc:7f:e1:7e:76:8a:f8:
                    b0:86:aa:d0:70:c6:a8:da:80:1a:ea:23:77:17:49:
                    35:34:64:9a:22:92:c0:b7:f1:9a:4c:5f:3a:a4:75:
                    50:24:3f:c5:9b:88:ba:b6:c0:af:0d:25:20:a0:69:
                    6f:bc:19:dd:d3:d6:9b:d4:e7:6a:98:24:37:9d:25:
                    37:24:f7:09:7a:17:17:04:ff:c6:26:3e:0e:26:31:
                    db:8f:a3:c6:4b:b2:2f:de:04:73:f3:45:29:3a:b7:
                    11:b0:52:8c:dd:22:85:89:5a:5b:ef:8a:37:32:03:
                    dd:f3:b0:88:fe:bb:d5:fb:2c:b1:79:11:2b:8a:e8:
                    ca:b5:c7:f7:d9:38:8a:29:68:d8:80:46:82:f3:86:
                    cc:96:d8:7a:be:04:25:00:f4:f1:5f:75:2f:7c:65:
                    7e:5b:e4:4d:cd:d7:3c:07:8a:14:a5:4c:a9:5a:0d:
                    57:c6:3d:e3:4f:4b:2d:8e:75:46:38:ae:7b:ac:2b:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:0F:2D:0E:5A:09:6F:91:0D:0F:5A:72:0E:D2:C6:D7:7D:42:8B
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:60:47:80:41:24:e3:84:86:91:07:b3:3b:98:27:fa:d5:
         f9:bc:21:90:75:ca:cc:f6:5d:cb:6b:40:ed:27:9a:5e:1b:f9:
         16:81:ff:0d:26:c2:d6:84:41:1c:75:00:06:4a:da:52:76:78:
         49:3e:bb:f8:08:01:36:c6:b9:50:4c:79:2d:0c:12:26:15:58:
         e3:d6:e3:4a:2f:a2:36:e1:b0:6e:1a:76:bc:10:83:4f:10:e7:
         7d:c7:82:e9:75:18:fb:69:95:ab:1a:b0:31:50:7f:35:fa:cf:
         ec:0e:2e:19:ca:09:c0:35:1f:14:6f:5a:de:18:a6:56:6a:c1:
         59:08:02:58:84:79:d6:94:07:82:82:0c:c7:30:68:e4:29:54:
         2e:63:38:8c:0f:70:81:6b:0f:53:25:ee:1d:5b:a7:5a:0a:95:
         ef:62:cf:10:ff:e4:34:13:07:77:51:ed:67:77:3b:51:1a:3f:
         c1:60:70:db:8f:c1:80:5b:01:f8:5e:aa:ef:cf:8d:89:bb:6d:
         8a:6f:07:fe:15:99:30:be:54:e7:a5:7a:7f:1a:db:77:85:9f:
         24:23:92:41:a2:75:0f:cc:5b:41:5f:b0:3b:8c:00:32:4f:c4:
         5b:61:cf:fa:4d:f2:1a:8e:41:f0:8a:8e:be:37:ab:34:cc:ee:
         71:e6:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:34:13 2026 by rpki-client