Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3138362e3134382e3233392e302f32342d3234203d3e203237373837.roa
File:                     3138362e3134382e3233392e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          +D81cP3mmMww5/qzofbbBvxw6CJmNHB+m+rz5OcvHPw=
Subject key identifier:   8F:9C:50:E8:B5:97:FC:B9:18:B1:C6:47:FF:AC:D2:EC:BF:72:15:9B
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       7B73CD017CCF4CABE454CFD2A5571472627F9360
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3138362e3134382e3233392e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:01 +0000
ROA not before:           Fri 09 Oct 2026 20:35:01 +0000
ROA not after:            Fri 08 Oct 2027 20:40:01 +0000
asID:                     27787
IP address blocks:        186.148.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:73:cd:01:7c:cf:4c:ab:e4:54:cf:d2:a5:57:14:72:62:7f:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:01 2026 GMT
            Not After : Oct  8 20:40:01 2027 GMT
        Subject: CN=8F9C50E8B597FCB918B1C647FFACD2ECBF72159B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:c4:85:ef:0d:36:5d:90:84:50:5d:4d:d2:
                    d9:42:13:5c:de:8f:a1:60:d8:c0:cf:c2:87:50:1e:
                    6d:7b:5d:c5:3e:be:70:92:d9:06:18:79:8c:96:7d:
                    aa:34:30:e9:a5:98:9f:1f:01:33:48:ec:23:e0:7d:
                    09:46:98:6b:7d:d2:f5:93:38:79:83:58:6d:f5:f0:
                    10:96:2d:07:91:1f:11:be:d4:c3:70:c8:21:fc:43:
                    ca:b8:a5:2a:b6:b6:1d:64:19:92:4b:3a:59:9c:43:
                    8a:9d:29:b2:89:c0:42:d6:b2:06:7d:cb:bc:e0:31:
                    a2:7d:7b:fd:06:95:28:e7:17:14:06:cc:a6:8e:6f:
                    1a:d4:37:4d:aa:82:a0:a3:3c:8a:80:a1:ea:e8:bf:
                    81:33:c9:ad:73:df:67:d3:d9:1c:89:bd:c0:c4:be:
                    c0:2e:e4:0d:9d:99:ed:d7:00:58:9e:8a:fc:3d:88:
                    33:17:96:65:91:4a:d3:32:51:9a:19:fb:b8:a7:81:
                    bd:1f:f5:e8:e3:2f:1d:9c:4b:71:16:33:25:0d:cd:
                    47:56:b4:3d:93:a4:1d:e8:a7:38:52:70:2b:56:bc:
                    73:a7:02:29:20:ee:da:5b:97:9c:ef:33:1b:89:e3:
                    fb:e9:44:a3:e7:e3:c8:d6:09:b8:b7:a9:89:72:38:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:50:E8:B5:97:FC:B9:18:B1:C6:47:FF:AC:D2:EC:BF:72:15:9B
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3138362e3134382e3233392e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:f0:93:e6:b6:e9:b5:f5:41:21:22:2c:af:dc:bf:c4:78:
         29:0a:b1:44:f2:cf:d5:39:ab:85:f5:95:28:4e:ac:eb:23:be:
         51:2e:89:4c:b7:9c:b4:07:05:fb:e1:75:f6:81:e2:73:57:8f:
         ce:a6:48:a0:c9:de:65:96:18:62:4c:88:6c:d8:1b:10:a3:d7:
         f5:68:e3:24:86:54:4e:a1:91:bb:44:1c:17:78:18:40:42:87:
         c4:83:8c:90:d3:87:4f:e7:4d:67:0e:ee:96:4a:7b:8f:48:31:
         0e:37:06:4a:53:3f:bc:32:ad:a5:da:a0:63:ac:6d:25:c8:20:
         2d:cb:29:9a:e5:f4:55:a2:1d:6a:40:0d:f2:32:f9:a2:e3:dd:
         ff:89:24:47:c3:27:7c:06:d5:f0:56:54:8f:c1:9b:1b:8e:d0:
         ed:a2:56:d0:fd:1c:bf:f4:b3:e5:16:f2:3a:da:de:4d:d8:f1:
         ae:b4:6d:cf:91:e2:20:a4:97:20:3a:44:c1:17:02:0a:4d:0f:
         3b:fc:69:43:4e:38:b8:a0:52:de:e2:77:5b:7b:dd:8b:78:65:
         b6:fe:d7:71:ef:ec:ea:ed:eb:4d:dd:9b:48:9a:06:2a:bf:d3:
         de:c5:2a:54:1b:c4:bd:36:b0:bb:83:df:32:a1:4e:c9:f0:9d:
         d4:0d:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:43:59 2026 by rpki-client