Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3138362e3134382e3233352e302f32342d3234203d3e203237373837.roa
File:                     3138362e3134382e3233352e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          T2FGEqTLxnHxCviL0bSpUzE5sxBclcRPKy80IlVXy5M=
Subject key identifier:   74:80:6E:E8:A4:19:E7:98:36:24:1B:17:63:89:23:BE:09:A5:25:D2
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       779643E87FEC8ECAD3B961507A15441895FC0449
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3138362e3134382e3233352e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:04 +0000
ROA not before:           Fri 09 Oct 2026 20:35:04 +0000
ROA not after:            Fri 08 Oct 2027 20:40:04 +0000
asID:                     27787
IP address blocks:        186.148.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:96:43:e8:7f:ec:8e:ca:d3:b9:61:50:7a:15:44:18:95:fc:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:04 2026 GMT
            Not After : Oct  8 20:40:04 2027 GMT
        Subject: CN=74806EE8A419E79836241B17638923BE09A525D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:6a:17:42:cb:d3:6b:f5:8c:3e:3b:14:13:
                    e0:36:17:01:e8:af:1b:6e:0a:1d:8c:0a:37:ea:e6:
                    bd:82:27:43:0a:4b:19:00:dc:c9:53:1d:f4:f0:50:
                    d3:d4:f7:a1:c0:91:af:12:f3:5a:87:31:57:87:3c:
                    8e:88:5c:05:17:a4:d4:e5:7f:c5:05:6d:4a:1f:9c:
                    ab:2d:b2:11:f8:98:ba:95:35:6e:e6:b0:c5:1e:2e:
                    66:17:b9:e2:ec:74:6a:90:b6:5e:de:3c:05:e7:42:
                    ba:66:d6:ad:5f:f3:0a:ee:06:ed:2f:48:b7:e0:64:
                    1f:ba:23:f6:10:4f:a9:db:31:f2:eb:d5:54:47:15:
                    29:dd:6e:ee:2c:d7:9c:aa:34:4d:ca:a3:b6:f4:82:
                    ae:c1:5b:99:7b:b0:86:38:01:2d:fa:2a:32:99:2c:
                    d1:76:ba:73:c4:fa:84:78:59:f0:9b:92:36:fc:3b:
                    0a:7f:60:f8:56:5a:7b:42:a1:c1:6c:0f:91:05:69:
                    15:a5:b8:b2:bd:de:0b:78:16:09:f7:bf:b4:3b:43:
                    fa:01:73:30:14:2c:f0:3e:c3:bc:b6:1b:31:a6:12:
                    29:19:a8:38:43:71:9e:e8:5f:ea:a8:03:12:ab:a9:
                    3f:47:b6:c9:98:c8:49:6b:ca:20:42:80:57:4f:fd:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:80:6E:E8:A4:19:E7:98:36:24:1B:17:63:89:23:BE:09:A5:25:D2
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3138362e3134382e3233352e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:78:2b:bf:a3:8c:03:36:fa:f9:89:3c:7a:cb:f5:79:d9:ad:
         0f:f0:94:29:7f:34:57:99:b9:d7:bc:c7:b7:47:73:ed:de:3e:
         52:86:d6:e0:92:0a:1c:bc:60:52:f9:0e:d4:d7:4e:42:8c:db:
         b9:25:7d:12:36:c3:63:97:72:cb:2f:53:01:32:01:f9:84:29:
         3e:1c:10:e5:c0:6d:71:11:3e:64:79:52:49:c8:89:62:2b:8f:
         fb:b1:97:95:c5:8f:2d:b0:3b:4c:af:9e:3f:9c:62:2b:29:98:
         52:36:4d:12:5f:e8:b9:fd:b6:29:e4:55:ae:49:da:b5:70:66:
         87:93:14:17:f0:fd:2b:58:ca:8f:62:3b:7e:2e:a9:e6:00:1c:
         b0:a7:be:c7:2c:93:f9:1f:b8:72:3c:8f:8a:9c:22:73:d4:b5:
         8e:7b:c4:d3:9e:d7:c9:59:64:9d:9c:9a:6b:64:0a:fd:cd:6b:
         2b:c6:c0:a5:f4:7f:28:15:1e:1b:11:34:b9:29:28:9d:14:e0:
         0e:1a:3e:0c:e6:6d:70:17:8c:8d:98:12:3b:9c:e4:cc:e7:61:
         4f:29:a2:ac:c9:07:05:bc:08:be:4e:1d:61:0f:1e:23:af:2e:
         3f:6d:e8:62:36:d2:b4:45:64:94:e6:82:b0:19:46:38:07:01:
         d1:c5:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:44:16 2026 by rpki-client