Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/735291B5C7E1E8C8B955D019D3C1E7490C1C49607DFDC687E1F2A69F97148ACF/0/3138362e3132312e3136322e302f32332d3233203d3e20323732343038.roa
File:                     3138362e3132312e3136322e302f32332d3233203d3e20323732343038.roa (raw, json)
Hash identifier:          la9ERMEYYZbOirugTt6FFuaR62aZb33FlMIHEdKbIGU=
Subject key identifier:   26:AE:5B:A8:38:6B:D0:49:E0:8E:A3:E7:CA:D2:88:04:4E:9B:84:8B
Certificate issuer:       /CN=F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4
Certificate serial:       20727FF8F01D12BAAC64E8D52E4B8311C5CE1846
Authority key identifier: F6:4C:20:D4:C0:6B:96:DF:3C:F4:B4:4E:90:00:E8:50:B9:2E:8D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/735291B5C7E1E8C8B955D019D3C1E7490C1C49607DFDC687E1F2A69F97148ACF/0/3138362e3132312e3136322e302f32332d3233203d3e20323732343038.roa
Signing time:             Tue 29 Jul 2025 23:55:00 +0000
ROA not before:           Tue 29 Jul 2025 23:50:00 +0000
ROA not after:            Tue 28 Jul 2026 23:55:00 +0000
asID:                     272408
IP address blocks:        186.121.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/735291B5C7E1E8C8B955D019D3C1E7490C1C49607DFDC687E1F2A69F97148ACF/0/F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/735291B5C7E1E8C8B955D019D3C1E7490C1C49607DFDC687E1F2A69F97148ACF/0/F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:7f:f8:f0:1d:12:ba:ac:64:e8:d5:2e:4b:83:11:c5:ce:18:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4
        Validity
            Not Before: Jul 29 23:50:00 2025 GMT
            Not After : Jul 28 23:55:00 2026 GMT
        Subject: CN=26AE5BA8386BD049E08EA3E7CAD288044E9B848B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:e5:3d:05:55:fe:fe:d0:4f:fc:95:5e:9a:
                    0e:9f:64:3b:f0:aa:c4:86:f8:b6:3e:1e:a0:58:90:
                    5d:26:d6:3f:86:df:ea:55:c9:35:c0:53:56:c1:f0:
                    e4:1d:0c:bc:1d:f4:b6:43:2f:b6:c9:44:60:c2:44:
                    3a:d8:dc:87:87:e9:49:52:41:15:ee:da:c7:f1:0d:
                    46:8b:3d:c6:19:b5:bc:8d:ad:81:77:f2:77:ba:6b:
                    60:70:e7:28:db:37:ed:b9:06:de:45:ff:f4:e5:3d:
                    ec:f2:9e:16:79:a5:6f:c8:a5:19:e5:5d:d8:fb:f7:
                    03:16:43:ce:39:af:42:24:d1:34:73:7c:23:a3:db:
                    ef:58:c8:47:f3:3c:b1:1e:f8:bb:12:04:0d:3a:ed:
                    21:e2:02:f9:3c:dd:17:ce:6b:37:c1:10:e4:ee:e5:
                    0b:d4:ed:ab:73:8b:5a:9a:e5:03:86:84:05:70:e7:
                    80:65:6a:2f:51:44:14:b9:57:5b:b2:5a:49:f6:96:
                    7a:db:25:e6:1a:74:23:ca:7b:ce:7c:4b:2c:c9:13:
                    08:4b:8a:c3:18:44:83:54:2b:3a:29:16:1c:60:ed:
                    62:b9:0e:e5:8e:bd:db:20:34:ba:48:77:38:48:75:
                    4a:66:b5:32:7b:f7:94:6b:51:5c:2d:33:6d:3a:5c:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:5B:A8:38:6B:D0:49:E0:8E:A3:E7:CA:D2:88:04:4E:9B:84:8B
            X509v3 Authority Key Identifier:
                keyid:F6:4C:20:D4:C0:6B:96:DF:3C:F4:B4:4E:90:00:E8:50:B9:2E:8D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/735291B5C7E1E8C8B955D019D3C1E7490C1C49607DFDC687E1F2A69F97148ACF/0/F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64C20D4C06B96DF3CF4B44E9000E850B92E8DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/735291B5C7E1E8C8B955D019D3C1E7490C1C49607DFDC687E1F2A69F97148ACF/0/3138362e3132312e3136322e302f32332d3233203d3e20323732343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:5c:e2:7a:56:47:5a:78:a6:fd:93:61:70:0c:0c:5c:3e:6d:
         40:be:ea:55:83:f9:c6:c3:32:3e:63:ec:27:b1:d8:e6:47:69:
         cd:b6:fb:b9:14:5f:f5:34:a5:73:cf:67:53:ad:b6:e3:bf:c0:
         57:d4:67:2e:ea:7d:d4:6e:31:5c:f3:f6:42:1f:36:ea:79:d4:
         64:68:ff:42:f2:ae:38:92:44:32:e1:00:bf:67:8d:dc:1f:15:
         83:62:bd:e8:8d:b4:59:e0:0a:60:80:1b:fd:33:8c:0b:5f:83:
         ee:ac:1f:57:01:16:ce:0c:86:73:43:8b:3d:f1:ac:58:ee:07:
         9c:72:ae:66:43:8c:ab:10:57:5a:8a:0a:35:61:43:a4:89:8f:
         ca:3b:ba:6e:63:88:57:a2:c3:7c:06:3e:3f:03:41:5c:4a:95:
         a5:7f:73:b6:20:95:e2:33:c4:f1:61:62:f4:da:5a:35:6b:56:
         b0:fe:62:e8:d8:6f:0e:c0:68:a9:7a:17:5b:81:56:3e:49:6f:
         37:f6:26:1a:f2:41:15:9d:9a:8d:77:c8:ec:6d:62:9e:7e:b1:
         49:2c:ec:1e:61:04:c1:94:1a:95:7b:66:5a:88:e2:6f:13:6e:
         56:b9:90:d1:8c:cf:5c:8d:ac:22:77:59:61:32:49:65:b2:f8:
         18:3b:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 16:03:52 2025 by rpki-client